Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: Nhs0olvtxGADK2C0Nt+FpUrXsCo4uigf8aU1MpiTTW8=
Subject key identifier: B2:4C:E8:E3:FA:76:9C:76:31:DD:9F:C9:45:84:BD:1A:B8:A5:0C:0B
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 0198D4724A7B9F4D4A426C974E9E511C8BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0E38
Signing time: Sat 23 Aug 2025 01:01:56 +0000
Manifest this update: Sat 23 Aug 2025 01:01:56 +0000
Manifest next update: Sun 24 Aug 2025 01:01:56 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: Q5k6K/cYat56LCpqYvWVSDDza46hWeSSuLGgSWSd/6U=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4a:7b:9f:4d:4a:42:6c:97:4e:9e:51:1c:8b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Aug 23 01:01:56 2025 GMT
Not After : Aug 24 01:01:56 2025 GMT
Subject: CN=b24ce8e3fa769c7631dd9fc94584bd1ab8a50c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:51:70:98:6b:36:4e:23:43:1c:d1:e2:7b:
0f:31:90:e2:13:3a:b2:a4:55:b0:03:af:10:1b:4f:
ad:ec:56:c9:7b:d9:51:a5:b8:5d:bc:5d:e0:98:ef:
ab:82:e3:51:94:fa:7a:56:94:10:d8:02:66:68:94:
9b:1e:2e:5c:19:0a:ff:fd:15:22:78:86:df:6b:31:
51:f0:70:ff:38:4e:60:63:5a:95:2a:bf:17:f1:77:
bf:4d:82:45:67:dc:d2:4e:7f:9a:b3:fd:b2:78:e8:
cd:96:83:b7:2a:7e:d7:3a:89:1b:9a:84:29:6c:51:
23:f4:05:f6:fe:5a:ab:91:93:fe:c7:00:b8:c4:65:
b3:94:1a:21:7b:a4:1b:50:8c:37:9e:39:2f:65:91:
cf:8b:3b:f9:2a:b0:e9:ba:6f:83:75:27:67:f2:4d:
fd:21:ae:96:5e:f4:2d:f4:10:0a:ae:9b:bb:7a:cb:
07:18:1d:c7:23:73:ce:85:3b:63:51:43:3d:cc:0b:
1a:a8:14:70:29:26:ec:e1:e2:58:7c:61:64:ef:31:
e6:55:cc:f0:ec:5e:bc:8b:44:44:9c:42:f5:aa:a5:
1c:f4:47:e4:5b:eb:b8:fc:4d:11:0c:70:ab:2f:ec:
b1:c0:d2:f8:d3:5e:ff:ae:1a:95:ae:98:dc:5b:c1:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:E8:E3:FA:76:9C:76:31:DD:9F:C9:45:84:BD:1A:B8:A5:0C:0B
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:91:b3:0d:99:df:1a:61:81:89:26:17:02:2a:c8:2f:ce:7a:
60:92:74:ad:14:60:fd:e1:93:da:73:e2:8d:a4:ed:dc:e8:a0:
9c:57:89:5d:8e:fe:5e:1a:2a:91:f9:aa:67:2f:53:52:e3:12:
fe:37:dc:ab:9b:54:24:02:d8:d4:e4:ce:32:71:c9:50:8c:c5:
e9:e4:e0:af:80:03:50:3d:a3:46:5a:45:51:1c:01:c6:50:a0:
c9:bd:2e:87:c3:e6:75:25:e7:d5:78:f8:a1:e8:f4:ed:28:56:
1e:9c:4c:37:b7:6a:a8:fd:e1:b8:d0:92:a4:5e:72:ee:54:85:
4c:12:46:a1:b7:34:2a:5f:f2:f1:1a:5a:50:c8:d9:8c:2d:6e:
1f:4a:8d:7d:5e:23:b6:5d:bd:0c:86:ab:26:00:8a:3f:2b:d8:
46:6b:22:f1:ff:f2:de:fd:6e:80:c1:cb:0a:40:4e:ff:f8:b0:
11:fe:b8:a4:ee:4c:5c:dc:67:22:dd:35:8c:d4:81:2e:0f:8c:
83:fa:fb:a9:1e:cc:77:e9:7e:1d:8b:ac:c2:88:38:c9:46:57:
ee:0b:c3:c4:bc:b0:f5:78:ae:78:9f:bf:de:97:67:33:a3:18:
84:7a:35:fa:af:91:d1:1c:27:5f:15:bf:af:9c:20:37:10:7a:
fa:13:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:34 2025 by rpki-client