Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: xx9uUBjVImxm1C3wnV+mP44eTBXwg0Qf0h34orV7UDc=
Subject key identifier: B6:2B:C3:E7:F4:76:BA:00:2A:4E:73:1D:6A:00:0D:55:50:BB:B7:72
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 019A00DA77BA2764B1BD1D1B25B54AD0F9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 037D
Signing time: Mon 20 Oct 2025 09:01:48 +0000
Manifest this update: Mon 20 Oct 2025 09:01:48 +0000
Manifest next update: Tue 21 Oct 2025 09:01:48 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: pZ5pl8WrS65QI1P09SpV/Er5xjmqYTVh7cNTXO1uFWI=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:77:ba:27:64:b1:bd:1d:1b:25:b5:4a:d0:f9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Oct 20 09:01:48 2025 GMT
Not After : Oct 21 09:01:48 2025 GMT
Subject: CN=b62bc3e7f476ba002a4e731d6a000d5550bbb772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:23:21:ab:ac:82:2e:94:09:68:42:7c:4d:
76:09:e9:1a:98:6a:52:1d:d1:b3:e9:6f:d7:47:73:
c0:be:28:b0:d2:0b:bf:94:ee:a5:42:09:ec:1d:c8:
b1:20:82:32:0b:06:29:67:df:bc:1a:89:74:57:4e:
11:b8:2b:0b:c8:cf:25:c2:82:c5:73:3e:66:01:fb:
94:86:b3:65:0c:24:a4:98:96:1f:64:04:d5:18:42:
35:cd:0f:d3:be:0d:39:de:3a:fd:7c:cb:34:0b:df:
34:29:64:16:e6:bb:28:84:ee:56:33:1c:12:aa:76:
44:4f:c0:3a:42:3d:f8:97:ef:37:63:de:a7:de:ca:
29:c0:af:e0:9f:8c:00:e9:7f:ee:5a:22:67:24:cb:
a8:1b:c9:8d:ff:ef:94:13:b7:d3:9c:c1:9c:38:5a:
28:53:d3:2a:63:4a:70:86:28:23:59:83:73:c7:c1:
f6:d9:e5:8b:03:70:b3:97:c2:dd:84:04:3a:fb:c6:
21:5a:df:e8:0b:4d:bf:60:8e:37:09:1c:ae:06:9b:
73:cc:7d:b2:da:5e:4b:51:4b:12:eb:08:8f:93:9b:
44:23:53:c5:c0:b6:0b:09:1b:21:71:aa:3b:23:42:
57:11:d7:a7:8a:11:62:5c:af:2e:1b:29:66:13:ac:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2B:C3:E7:F4:76:BA:00:2A:4E:73:1D:6A:00:0D:55:50:BB:B7:72
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:55:10:8f:53:a0:f1:ff:e2:e1:ef:e7:5a:27:cb:91:df:c8:
a6:ba:22:68:3e:a9:d7:f4:2c:6f:45:44:47:37:d0:74:ec:82:
29:15:02:b0:45:34:af:e8:f6:31:8f:82:52:c4:b2:5b:49:73:
32:0c:f5:eb:e3:72:2a:7f:95:13:08:37:14:4a:6a:8c:58:fd:
b3:19:2d:88:ab:d7:66:f9:6e:9e:0f:38:77:0b:7e:5a:fa:97:
15:af:44:5e:34:6a:52:e0:41:ee:2b:f9:ac:2f:d1:b8:ec:c3:
e7:b2:7b:f8:cd:8d:a9:8a:a3:27:10:00:1a:48:e9:ac:a5:d3:
22:5e:5f:f0:65:8e:af:d5:51:3c:7e:bf:53:02:b9:78:85:75:
2f:fc:cc:e1:49:c3:a5:7e:1f:85:c1:a0:68:67:6b:8a:1c:5b:
8a:92:1d:1e:07:0a:25:16:56:38:14:a6:23:c7:40:60:0f:e5:
ff:7c:6b:7d:0c:3b:69:9a:2e:f3:48:41:42:86:62:2d:ad:72:
45:45:9c:ce:26:29:11:2d:1f:57:4f:01:ec:9d:43:6e:b1:bd:
51:13:5f:41:9d:94:41:a7:83:42:b8:2c:83:b2:3d:28:1b:4d:
9f:8c:a7:cd:dc:0b:2e:72:ce:01:55:58:93:e5:b0:85:80:36:
fa:e3:9d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2ne6J2SxvR0bJbVK0PnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWQzY2U4MTlhMDgxNTA1MDBhOGY0YTJkZjc5ZWI3MDE0
NWQxNTgwHhcNMjUxMDIwMDkwMTQ4WhcNMjUxMDIxMDkwMTQ4WjAzMTEwLwYDVQQD
EyhiNjJiYzNlN2Y0NzZiYTAwMmE0ZTczMWQ2YTAwMGQ1NTUwYmJiNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi0jIausgi6UCWhCfE12CekamGpS
HdGz6W/XR3PAviiw0gu/lO6lQgnsHcixIIIyCwYpZ9+8Gol0V04RuCsLyM8lwoLF
cz5mAfuUhrNlDCSkmJYfZATVGEI1zQ/Tvg053jr9fMs0C980KWQW5rsohO5WMxwS
qnZET8A6Qj34l+83Y96n3sopwK/gn4wA6X/uWiJnJMuoG8mN/++UE7fTnMGcOFoo
U9MqY0pwhigjWYNzx8H22eWLA3Czl8LdhAQ6+8YhWt/oC02/YI43CRyuBptzzH2y
2l5LUUsS6wiPk5tEI1PFwLYLCRshcao7I0JXEdenihFiXK8uGylmE6yLVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYrw+f0droAKk5zHWoADVVQu7dyMB8GA1UdIwQY
MBaAFDpdPOgZoIFQUAqPSi33nrcBRdFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMt
YWJhZWM4MmJkOGJiLzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMtYWJhZWM4MmJkOGJi
LzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1UQj1Og
8f/i4e/nWifLkd/IproiaD6p1/Qsb0VERzfQdOyCKRUCsEU0r+j2MY+CUsSyW0lz
Mgz16+NyKn+VEwg3FEpqjFj9sxktiKvXZvlung84dwt+WvqXFa9EXjRqUuBB7iv5
rC/RuOzD57J7+M2NqYqjJxAAGkjprKXTIl5f8GWOr9VRPH6/UwK5eIV1L/zM4UnD
pX4fhcGgaGdrihxbipIdHgcKJRZWOBSmI8dAYA/l/3xrfQw7aZou80hBQoZiLa1y
RUWcziYpES0fV08B7J1DbrG9URNfQZ2UQaeDQrgsg7I9KBtNn4ynzdwLLnLOAVVY
k+WwhYA2+uOdBw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:37 2025 by rpki-client