Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: Ah+uQ6gJJE9qNJz/SquJEXFF2NFADJiSzvsGp4MorUc=
Subject key identifier: A8:F4:65:38:B1:4E:86:D6:E9:7C:DB:E8:5D:2A:EC:5B:D1:A8:44:03
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 0197BA7ED258F5D61AD667649F989FDD3855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 07:02:42 +0000
Manifest this update: Sun 29 Jun 2025 07:02:42 +0000
Manifest next update: Mon 30 Jun 2025 07:02:42 +0000
Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=)
2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: lic6rEcqqf/XrMFqJ/EKWqp17CgRlA0NMj2A8fs81mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:d2:58:f5:d6:1a:d6:67:64:9f:98:9f:dd:38:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Jun 29 07:02:42 2025 GMT
Not After : Jun 30 07:02:42 2025 GMT
Subject: CN=a8f46538b14e86d6e97cdbe85d2aec5bd1a84403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:0f:cd:f6:ec:b5:86:e7:1d:d5:c6:c1:bd:
68:e9:c9:36:d1:9e:fa:c9:07:d9:19:5e:0f:6f:e2:
44:11:d9:e7:9e:a3:4c:23:84:b1:2d:40:e6:28:3a:
60:eb:5f:41:1f:80:e1:1d:e8:f2:d6:54:06:1c:c3:
2b:4b:c9:0d:b7:17:3d:1b:95:03:29:81:b2:7c:16:
32:06:ab:9a:c5:53:a1:21:3b:d0:39:9d:a7:e7:af:
41:f9:fa:f1:b1:09:80:af:bb:e6:aa:d1:71:5c:91:
e2:79:fe:13:1a:74:31:0b:6d:8d:a4:47:ec:74:ae:
82:9b:0d:d7:23:54:23:c6:32:77:e6:a3:ff:36:69:
df:bb:a0:47:c0:75:b8:36:e3:6e:67:ea:0a:d0:cf:
40:ad:56:f5:9f:a2:6d:78:48:82:f7:3a:07:a5:14:
68:3b:38:66:c6:8b:2e:b1:8c:e8:62:ae:c3:1a:b5:
1b:90:db:a6:4b:80:09:5f:67:e6:a5:cb:97:f5:6a:
9d:fb:9e:73:f1:ea:bf:d4:0a:88:17:18:c8:fa:d1:
e8:d1:98:96:36:30:d8:2f:73:be:a5:eb:4b:ac:b1:
0f:da:7c:10:13:5f:24:3e:da:9b:66:81:ce:15:6d:
ed:48:c6:e3:b4:a2:7a:bc:93:7b:48:a9:e7:2b:a9:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:65:38:B1:4E:86:D6:E9:7C:DB:E8:5D:2A:EC:5B:D1:A8:44:03
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bf:46:a4:76:4e:fc:ce:8b:f3:8b:d9:0e:43:2a:c5:f5:36:
56:c4:92:ff:60:74:b8:84:2c:83:98:49:d3:e7:b9:fc:3d:62:
48:60:ce:84:96:32:d7:f3:ef:3a:73:f5:fa:65:94:52:2a:c7:
3b:cb:32:01:47:8d:f0:e6:0a:c9:f0:cc:52:7f:78:07:69:bf:
5b:4e:9a:a5:41:61:5a:f8:08:cf:2a:2c:35:8b:a0:0a:72:94:
a7:fe:16:d2:82:4e:e8:d6:a4:6f:15:37:bc:d7:50:b2:05:8d:
fa:19:90:73:83:51:ae:d8:e1:f5:b4:82:d5:c8:83:49:aa:ed:
f5:2a:08:aa:1d:6f:a0:da:59:19:9d:9e:40:a8:10:dd:ee:88:
f4:d7:87:e3:0b:8a:08:59:1e:09:72:d0:97:c5:ea:03:a5:73:
cc:11:09:2c:0a:a6:35:28:bf:74:20:ff:a3:a7:f3:4f:f6:53:
62:98:70:8d:cf:09:56:46:eb:2f:12:36:bd:5a:ff:9c:10:9e:
24:f2:fa:2a:3a:b1:7b:40:76:a7:09:f9:41:5d:dd:e6:a8:0e:
1d:ce:5d:db:2f:2e:be:a7:5c:d7:08:18:3d:d4:a4:c0:40:26:
f9:57:9d:a4:f6:e2:81:79:84:0a:19:6a:1c:06:4a:27:f0:f6:
a2:e4:77:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6ftJY9dYa1mdkn5if3ThVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjViZDM5Yjc0ZjIzZDc2ODNkMTIzOGVhOWFjYTNjNjZh
NjMxYTMwHhcNMjUwNjI5MDcwMjQyWhcNMjUwNjMwMDcwMjQyWjAzMTEwLwYDVQQD
EyhhOGY0NjUzOGIxNGU4NmQ2ZTk3Y2RiZTg1ZDJhZWM1YmQxYTg0NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhgPzfbstYbnHdXGwb1o6ck20Z76
yQfZGV4Pb+JEEdnnnqNMI4SxLUDmKDpg619BH4DhHejy1lQGHMMrS8kNtxc9G5UD
KYGyfBYyBquaxVOhITvQOZ2n569B+frxsQmAr7vmqtFxXJHief4TGnQxC22NpEfs
dK6Cmw3XI1QjxjJ35qP/Nmnfu6BHwHW4NuNuZ+oK0M9ArVb1n6JteEiC9zoHpRRo
OzhmxosusYzoYq7DGrUbkNumS4AJX2fmpcuX9Wqd+55z8eq/1AqIFxjI+tHo0ZiW
NjDYL3O+petLrLEP2nwQE18kPtqbZoHOFW3tSMbjtKJ6vJN7SKnnK6kM1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj0ZTixTobW6Xzb6F0q7FvRqEQDMB8GA1UdIwQY
MBaAFDi1vTm3TyPXaD0SOOqayjxmpjGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDct
ZTNjZmU2Y2VjMGFjLzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDctZTNjZmU2Y2VjMGFj
LzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApb9GpHZO
/M6L84vZDkMqxfU2VsSS/2B0uIQsg5hJ0+e5/D1iSGDOhJYy1/PvOnP1+mWUUirH
O8syAUeN8OYKyfDMUn94B2m/W06apUFhWvgIzyosNYugCnKUp/4W0oJO6NakbxU3
vNdQsgWN+hmQc4NRrtjh9bSC1ciDSart9SoIqh1voNpZGZ2eQKgQ3e6I9NeH4wuK
CFkeCXLQl8XqA6VzzBEJLAqmNSi/dCD/o6fzT/ZTYphwjc8JVkbrLxI2vVr/nBCe
JPL6Kjqxe0B2pwn5QV3d5qgOHc5d2y8uvqdc1wgYPdSkwEAm+VedpPbigXmEChlq
HAZKJ/D2ouR3SQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:28 2025 by rpki-client