Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: xc+yzXNwVl8H8kCmLmFH6OHae8c5JHfO5d3o6FuINHE=
Subject key identifier: B7:60:8B:4F:B9:A6:52:7D:4C:F7:F3:FE:3B:0C:DA:FD:A2:1E:37:43
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 0197B7B363E59A2C481CDA9D6FEED3DABB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 024E
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: YKPSsbnAJ746Z8IYDi3dN9w4iMRSpJcPPzACW1YaWLE=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:63:e5:9a:2c:48:1c:da:9d:6f:ee:d3:da:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=b7608b4fb9a6527d4cf7f3fe3b0cdafda21e3743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:f8:0b:93:3b:72:7d:1d:47:cc:ca:8b:ec:
9c:c7:fa:27:75:bc:e4:3f:6f:d0:f3:45:a1:5a:ab:
3a:8b:b6:51:10:38:90:89:08:9e:a9:3d:c2:62:5e:
17:58:21:79:b2:0b:1e:87:72:fc:46:ea:0a:9a:04:
f2:6c:f1:5a:aa:0c:2d:40:c1:da:72:64:ca:46:fe:
14:f2:71:97:b5:77:0f:0d:44:99:36:f4:f1:88:d4:
37:32:69:59:e4:d7:76:71:11:91:57:e3:4b:ae:6b:
64:40:c7:48:40:1a:e5:28:9a:0b:19:91:99:a9:b5:
f9:84:20:48:8e:66:09:45:b8:1f:c3:ad:7a:d4:2c:
e5:28:9a:38:ba:e7:91:11:1d:49:77:aa:fc:52:94:
77:b0:1f:b1:cc:f4:4a:05:fc:eb:6c:3a:fc:f2:cd:
a3:37:46:bd:93:30:5b:62:4c:c5:9f:50:f6:6c:2f:
8a:6e:25:fc:c2:81:6d:d0:24:34:07:53:a0:00:67:
9a:a5:f1:bb:32:33:1c:e5:98:e1:ba:fb:fe:af:ac:
44:dd:20:53:5c:9d:3a:6c:67:97:e9:a8:d5:30:91:
f7:52:d9:89:1b:34:b3:ea:b2:81:50:d6:2d:ff:6a:
46:2e:83:60:d8:e6:7e:d0:7c:ba:d3:35:ba:eb:ea:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:60:8B:4F:B9:A6:52:7D:4C:F7:F3:FE:3B:0C:DA:FD:A2:1E:37:43
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:4b:ab:9e:74:30:53:0f:4b:f1:48:28:d4:73:c4:f9:15:ad:
f5:af:eb:14:91:7b:6e:09:67:bf:53:1d:de:e2:cd:cb:88:82:
b1:5f:26:c6:50:b2:14:6e:9d:4c:2b:69:40:8d:7d:a8:2b:29:
df:aa:36:ee:73:02:ff:9f:24:35:80:7d:38:74:66:a9:ab:b3:
31:5d:a1:0c:75:42:ee:57:8d:e2:c0:36:9c:f1:dd:58:fc:c6:
26:72:1e:08:60:d9:f7:d2:d3:70:90:60:5e:d3:36:14:b5:5a:
fe:36:a4:62:b3:45:de:1f:09:5b:2f:4a:3e:e3:ee:8f:ef:37:
94:98:7c:08:d2:87:d6:08:bd:18:64:94:7a:80:4e:40:67:e8:
ca:c9:4b:e4:22:55:c3:a6:58:37:71:d8:e7:70:fa:7a:ca:ec:
eb:6a:1e:41:3b:62:08:9c:07:5e:9b:ca:69:79:d5:05:70:59:
3b:ba:d8:1b:7b:3b:aa:5f:bf:71:d6:3c:41:14:a2:2c:14:e2:
d3:3b:b7:26:1c:c6:8d:83:4b:5b:a3:ec:ca:5d:11:2b:18:70:
c1:59:81:c3:25:d9:38:4a:33:fb:91:7b:8f:f9:16:a1:07:11:
99:9b:5f:64:b3:5e:e9:35:d5:77:f8:d1:4f:ad:ce:b7:05:99:
4f:2d:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:33 2025 by rpki-client