Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File: OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier: +A7KPVNhUZj3FAN1gg9sm1J0W/v3FUQAFNo0rqW1OMs=
Subject key identifier: CA:B8:80:67:D7:46:2E:B5:27:B5:66:5D:13:EB:FC:96:43:60:5D:AD
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer: /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial: 0197B6A06D7209C939FE84A247139D8DD8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number: 08D3
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: 9IkVbsaD36+PO7R6RwNujIapdTMWDPSzMil3qykmZAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6d:72:09:c9:39:fe:84:a2:47:13:9d:8d:d8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=cab88067d7462eb527b5665d13ebfc9643605dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:9b:61:de:56:f8:67:e2:86:f0:ec:f0:c1:
9e:49:a3:e5:67:42:d9:12:d4:87:72:35:f2:54:26:
13:86:eb:ea:1d:37:f0:c2:76:81:ee:ac:ba:5a:94:
3a:bc:7f:79:0a:66:95:7a:94:fd:aa:fa:c0:68:c5:
1b:b6:6c:23:9e:73:71:a8:24:43:38:12:34:6a:57:
59:e2:a0:04:90:e7:74:bd:ef:1a:b2:e7:d1:40:91:
27:23:3e:f4:ee:08:d3:28:d1:54:a3:c6:98:d5:85:
4d:8d:37:99:c8:e7:3b:08:d1:11:58:38:fa:37:04:
85:90:7c:ff:c1:51:64:11:16:7b:d3:68:91:30:34:
2b:c9:bb:f7:23:e8:0d:a4:86:f1:d2:06:28:7b:f9:
68:f2:69:a5:9f:14:33:40:b2:2f:45:b6:8a:51:dd:
4f:c3:29:0c:a7:90:bd:1b:e4:d4:8b:a2:cb:20:f2:
3c:e9:2e:fe:5a:47:45:ce:b5:e9:18:8a:6f:cb:86:
ec:61:1f:2e:9c:fe:26:74:7a:1a:96:cc:8f:08:36:
e6:48:40:91:c8:0f:43:21:4b:de:a5:e8:6b:f2:79:
51:05:34:50:4f:c3:fc:1c:9d:19:78:42:45:b9:8a:
9d:a2:b2:ee:40:f3:3c:0d:4f:a8:1a:bc:e4:1c:74:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:80:67:D7:46:2E:B5:27:B5:66:5D:13:EB:FC:96:43:60:5D:AD
X509v3 Authority Key Identifier:
keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cc:1b:9b:32:06:e4:05:c4:04:7f:cd:10:95:8a:7a:86:f9:
f5:36:81:76:f4:c7:7d:33:1a:b4:bc:8a:be:8f:6c:47:20:66:
9d:a1:5b:0e:d6:d6:68:b6:d4:02:c8:5a:6d:be:d0:a9:d5:91:
67:29:4f:81:24:b0:39:5d:f5:c2:91:dc:8e:cc:24:39:20:3f:
d6:81:f3:65:53:ba:bd:a6:75:33:0e:68:3b:05:22:b0:f5:48:
81:26:ac:9b:14:70:04:a3:b8:09:01:64:3d:39:0e:69:33:16:
e9:ed:7e:db:f7:b5:fe:bd:67:1f:eb:c7:0c:98:23:a6:ba:69:
93:f0:ae:00:d4:ca:f8:72:5c:f9:4f:dd:2f:56:6d:31:1b:63:
98:5b:9d:92:48:4c:a9:e9:8b:d3:6e:8e:0a:a9:cb:7f:fc:42:
ff:d0:8b:b5:b8:44:30:f6:65:75:2b:c5:db:2f:f0:c1:95:41:
86:70:77:6a:79:22:93:21:c7:ff:e4:2f:c7:c8:82:af:46:9e:
df:d2:d2:c9:fc:7e:87:97:18:68:75:58:33:3b:8e:1d:9b:a2:
9b:4f:fa:e2:e2:ee:da:2a:1e:49:36:41:d4:18:4d:ba:06:2c:
93:5e:5e:8a:3a:37:64:cd:c0:f0:4e:f0:8b:fa:e9:e2:80:d8:
3a:d0:9b:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oG1yCck5/oSiRxOdjdjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNTU1ZDg0ZGNkN2RkYjY0MDY5MWI5NDBjN2NhMDk3NzI4
OGExYzQwHhcNMjUwNjI4MTMwMDU2WhcNMjUwNjI5MTMwMDU2WjAzMTEwLwYDVQQD
EyhjYWI4ODA2N2Q3NDYyZWI1MjdiNTY2NWQxM2ViZmM5NjQzNjA1ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuybYd5W+GfihvDs8MGeSaPlZ0LZ
EtSHcjXyVCYThuvqHTfwwnaB7qy6WpQ6vH95CmaVepT9qvrAaMUbtmwjnnNxqCRD
OBI0aldZ4qAEkOd0ve8asufRQJEnIz707gjTKNFUo8aY1YVNjTeZyOc7CNERWDj6
NwSFkHz/wVFkERZ702iRMDQrybv3I+gNpIbx0gYoe/lo8mmlnxQzQLIvRbaKUd1P
wykMp5C9G+TUi6LLIPI86S7+WkdFzrXpGIpvy4bsYR8unP4mdHoalsyPCDbmSECR
yA9DIUvepehr8nlRBTRQT8P8HJ0ZeEJFuYqdorLuQPM8DU+oGrzkHHQPFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq4gGfXRi61J7VmXRPr/JZDYF2tMB8GA1UdIwQY
MBaAFDpVXYTc1922QGkblAx8oJdyiKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YWQwODEtZGE1YS00MmE0LWE0MzAt
MWU2NzE3MGRmYmJhLzEvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy85YWQwODEtZGE1YS00MmE0LWE0MzAtMWU2NzE3MGRmYmJh
LzEvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicwbmzIG
5AXEBH/NEJWKeob59TaBdvTHfTMatLyKvo9sRyBmnaFbDtbWaLbUAshabb7QqdWR
ZylPgSSwOV31wpHcjswkOSA/1oHzZVO6vaZ1Mw5oOwUisPVIgSasmxRwBKO4CQFk
PTkOaTMW6e1+2/e1/r1nH+vHDJgjprppk/CuANTK+HJc+U/dL1ZtMRtjmFudkkhM
qemL026OCqnLf/xC/9CLtbhEMPZldSvF2y/wwZVBhnB3ankikyHH/+Qvx8iCr0ae
39LSyfx+h5cYaHVYMzuOHZuim0/64uLu2ioeSTZB1BhNugYsk15eijo3ZM3A8E7w
i/rp4oDYOtCbaA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:05 2025 by rpki-client