Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: tR6ILy9u+Z3nBfEUjTablpK9ztAurjDYaGPiqatYeqs=
Subject key identifier: 11:20:D0:D4:DA:F6:A8:11:AA:B2:D3:F2:6E:ED:5C:50:4B:84:9E:18
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 0198D5836CFD9C2E5329A63938AC63DF2596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 02E2
Signing time: Sat 23 Aug 2025 06:00:16 +0000
Manifest this update: Sat 23 Aug 2025 06:00:16 +0000
Manifest next update: Sun 24 Aug 2025 06:00:16 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: KQZcMmHjgxjjzN/2oXq2u0ivpMNSdFwhWyGeyyu7cgI=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6c:fd:9c:2e:53:29:a6:39:38:ac:63:df:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Aug 23 06:00:16 2025 GMT
Not After : Aug 24 06:00:16 2025 GMT
Subject: CN=1120d0d4daf6a811aab2d3f26eed5c504b849e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:3a:9b:a8:c5:2d:37:07:8d:a4:9b:88:64:
48:94:62:61:5c:46:a4:b5:c8:8c:bd:79:85:6b:58:
ff:09:11:87:4d:34:48:40:d6:a5:a8:0f:77:21:a3:
30:c7:7d:d0:04:fc:93:08:c6:82:4c:10:d7:ce:fa:
5f:e4:29:31:13:62:88:fa:4f:50:34:13:ad:89:07:
08:99:21:f2:0a:52:1f:5f:44:e4:2a:88:52:2b:60:
83:36:a4:8f:ae:c1:fa:4f:36:9d:5c:d9:7c:a8:8c:
fb:34:9a:88:7f:a9:1f:fa:ef:05:86:5a:6f:6b:87:
b0:54:e5:66:de:91:07:88:ba:4a:25:97:26:b3:3b:
21:1c:56:da:bd:3c:d7:b8:b1:a2:41:3a:e2:96:26:
83:d3:2e:0a:9e:23:cf:ad:0d:9c:a8:f5:c0:26:f1:
41:3e:50:7f:3c:90:f0:26:0e:e9:7f:5c:ee:57:f8:
c5:6b:11:da:9c:5c:e0:fc:e8:89:cf:81:59:c6:5f:
d8:49:4b:59:ee:e4:b0:e4:bf:61:54:f1:22:cc:22:
8e:da:d3:ec:67:0a:e4:ef:0a:91:6e:70:2e:85:b6:
2b:aa:64:29:b2:aa:fc:7f:f9:c0:66:f7:e9:35:10:
2e:af:b4:2c:9c:61:83:e0:2d:d1:e4:e3:c0:2e:e6:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:D0:D4:DA:F6:A8:11:AA:B2:D3:F2:6E:ED:5C:50:4B:84:9E:18
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3c:d9:dc:24:0d:04:83:7e:38:ed:a6:39:82:a0:99:2b:3a:
d8:94:69:7e:d3:f3:dd:f5:b5:80:a9:1e:15:83:26:4d:92:e9:
dd:ce:5f:8d:4f:8b:9e:5e:be:3a:3f:08:87:d0:e2:86:69:81:
4c:ea:3a:8a:19:b0:46:16:1e:cd:90:da:b3:0a:be:cc:99:d9:
c6:70:2b:fc:3d:18:d1:41:3d:b7:49:5f:26:0c:d8:1b:15:29:
3f:d5:11:42:90:2f:52:ca:40:12:4e:b4:38:82:bf:12:77:e1:
84:b3:1a:5f:ac:9f:1c:86:29:16:ba:f9:2c:d9:1f:74:e0:f9:
18:f9:ad:ee:d9:d0:df:69:01:3b:30:ba:00:5e:3a:2a:a6:c4:
a1:3d:21:fd:f7:24:e7:f3:45:f3:4f:16:a0:f3:1b:1b:26:15:
f6:88:15:62:cd:37:09:f3:84:be:4f:f2:53:8a:b2:6b:20:6b:
94:ea:0d:9a:49:d3:b7:60:cf:73:0e:1f:89:87:f1:15:cc:c6:
ec:64:c6:ce:ca:84:a8:a4:cd:5f:47:22:86:d2:5f:be:2e:56:
d0:58:f8:30:c7:f6:cc:99:67:fb:ef:7e:95:97:f8:37:db:b8:
f1:a3:2e:71:ba:a8:ec:4a:f1:63:95:37:2a:f7:90:17:fb:4f:
30:40:60:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2z9nC5TKaY5OKxj3yWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWQzY2U4MTlhMDgxNTA1MDBhOGY0YTJkZjc5ZWI3MDE0
NWQxNTgwHhcNMjUwODIzMDYwMDE2WhcNMjUwODI0MDYwMDE2WjAzMTEwLwYDVQQD
EygxMTIwZDBkNGRhZjZhODExYWFiMmQzZjI2ZWVkNWM1MDRiODQ5ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXo6m6jFLTcHjaSbiGRIlGJhXEak
tciMvXmFa1j/CRGHTTRIQNalqA93IaMwx33QBPyTCMaCTBDXzvpf5CkxE2KI+k9Q
NBOtiQcImSHyClIfX0TkKohSK2CDNqSPrsH6TzadXNl8qIz7NJqIf6kf+u8Fhlpv
a4ewVOVm3pEHiLpKJZcmszshHFbavTzXuLGiQTriliaD0y4KniPPrQ2cqPXAJvFB
PlB/PJDwJg7pf1zuV/jFaxHanFzg/OiJz4FZxl/YSUtZ7uSw5L9hVPEizCKO2tPs
Zwrk7wqRbnAuhbYrqmQpsqr8f/nAZvfpNRAur7QsnGGD4C3R5OPALuZ5EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEg0NTa9qgRqrLT8m7tXFBLhJ4YMB8GA1UdIwQY
MBaAFDpdPOgZoIFQUAqPSi33nrcBRdFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMt
YWJhZWM4MmJkOGJiLzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMtYWJhZWM4MmJkOGJi
LzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTzZ3CQN
BIN+OO2mOYKgmSs62JRpftPz3fW1gKkeFYMmTZLp3c5fjU+Lnl6+Oj8Ih9DihmmB
TOo6ihmwRhYezZDaswq+zJnZxnAr/D0Y0UE9t0lfJgzYGxUpP9URQpAvUspAEk60
OIK/EnfhhLMaX6yfHIYpFrr5LNkfdOD5GPmt7tnQ32kBOzC6AF46KqbEoT0h/fck
5/NF808WoPMbGyYV9ogVYs03CfOEvk/yU4qyayBrlOoNmknTt2DPcw4fiYfxFczG
7GTGzsqEqKTNX0cihtJfvi5W0Fj4MMf2zJln++9+lZf4N9u48aMucbqo7ErxY5U3
KveQF/tPMEBgMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:57 2025 by rpki-client