Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File: OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier: c1VHUzIJ8AtkVONpgoYCyyBvsvvMeesekdRT4S0lhKc=
Subject key identifier: 35:1C:E6:61:3C:05:7C:DA:FE:62:53:B8:EA:3B:6D:1E:23:60:4A:AE
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer: /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial: 0198D4738A98FB42CD8AA7E482432E3B6BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number: 0967
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: SrkQWHhSf4Wb4AUBccEozUhQzvnDdgNAs7C2yWOVMoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8a:98:fb:42:cd:8a:a7:e4:82:43:2e:3b:6b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=351ce6613c057cdafe6253b8ea3b6d1e23604aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:09:80:ee:88:5a:cc:65:fb:a8:5f:79:53:
11:7e:a2:39:d9:31:68:bf:3e:56:e8:06:a1:51:5f:
76:f2:35:47:69:76:60:3d:18:50:39:e2:2f:2d:af:
35:cc:f7:45:2e:1a:cd:88:3f:1a:85:29:cd:b4:37:
1e:fc:d3:88:00:ee:55:34:67:95:24:12:22:e9:37:
64:32:8f:03:7a:72:8a:cb:21:34:75:1e:4c:7d:e3:
21:c2:64:46:c4:97:bf:5e:52:b6:e8:cb:cb:96:db:
b7:ec:18:a5:14:c5:97:83:27:16:f3:d7:29:d0:dc:
5a:65:89:59:81:02:d0:61:b7:b5:99:1a:7d:50:57:
cd:37:b8:13:f7:d0:63:12:23:19:ba:45:66:8c:4b:
56:d1:a0:76:89:79:69:fa:94:56:0f:73:8d:e4:5c:
3c:23:ff:40:9d:37:ec:ea:ea:38:55:3e:b2:95:53:
41:80:02:a4:dd:f1:b9:13:3b:bc:69:cb:b6:72:6f:
ab:3c:1d:59:1f:a5:45:ba:60:6a:df:dd:41:f8:e9:
87:77:fa:26:1e:90:13:8e:8b:e1:67:d6:c4:4b:9e:
70:41:5e:a2:ea:56:1a:a3:f3:7b:1d:60:e5:08:58:
b4:1f:c0:c5:eb:29:0f:54:6e:ae:6c:03:93:b2:8e:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1C:E6:61:3C:05:7C:DA:FE:62:53:B8:EA:3B:6D:1E:23:60:4A:AE
X509v3 Authority Key Identifier:
keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:79:12:32:4a:b9:26:d7:58:76:88:b8:ab:d9:8f:57:4b:7c:
2b:c3:2b:04:3b:dd:96:5c:b5:1f:02:3d:c2:f4:c0:ca:7e:8b:
2d:ed:d9:fe:05:38:1a:71:7f:59:1f:e4:6a:56:35:d9:b5:fe:
28:95:8b:e5:40:06:f5:33:0b:f0:13:bc:87:e9:d0:7e:71:ba:
65:79:01:da:08:45:59:c0:1d:16:5a:87:7a:e7:f6:be:b5:39:
ef:76:79:6f:e0:e3:c8:a5:9a:bd:b3:17:c6:15:bf:7e:3b:cc:
ef:47:9f:f9:4f:90:0d:65:95:56:65:19:49:a2:e5:91:0a:d0:
75:d2:46:cb:70:6a:b4:b3:b4:03:b0:cc:c0:df:ca:4e:73:cc:
dd:4c:63:90:5f:8a:8a:39:07:dd:05:65:de:42:7d:f0:a4:f3:
a4:e3:ef:ab:16:2b:47:e6:7c:0b:76:d0:b3:be:9d:c4:86:36:
2c:e1:4b:fa:9f:9e:a9:83:18:b4:85:5f:73:37:41:93:ec:79:
10:cd:fe:7c:c0:ee:41:38:b6:d3:41:76:40:f2:ce:df:14:1e:
e8:c8:37:23:6e:19:5b:6c:6c:cf:ec:fa:5f:fa:d7:f5:b4:fc:
b4:f5:0a:4b:a2:57:76:0f:b7:2d:54:87:7a:72:ab:09:23:cb:
f9:9f:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:44 2025 by rpki-client