Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: SRUP0qRRpBt624cwf0691t/eYZyDjI6dMbyI2foBpLU=
Subject key identifier: B2:D7:6A:81:F9:14:A5:4F:E9:80:D4:AD:88:A7:BF:28:04:A5:AF:81
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 0199FFFEB7E14C9B1CBC29455B76C88764DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 140A
Signing time: Mon 20 Oct 2025 05:01:47 +0000
Manifest this update: Mon 20 Oct 2025 05:01:47 +0000
Manifest next update: Tue 21 Oct 2025 05:01:47 +0000
Files and hashes: 1: 5jNjIfZHCFKLrjsIx_m00VoOlb4.roa (hash: dt8T70nhuJEI4o3TKiSfnq7kGTmTe/iNZKgWHVnpVF8=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: NbJsYdUe6QUABjROTAAaG2JKRatnG2oNhxwmMtP2Ht8=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:b7:e1:4c:9b:1c:bc:29:45:5b:76:c8:87:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Oct 20 05:01:47 2025 GMT
Not After : Oct 21 05:01:47 2025 GMT
Subject: CN=b2d76a81f914a54fe980d4ad88a7bf2804a5af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:e7:ed:41:75:de:96:b9:ca:fe:c6:f1:03:
7e:77:17:fa:e8:97:2d:2d:f8:0f:65:f8:d5:c3:a3:
5b:9a:9d:1e:ce:f0:4e:bc:34:66:21:a2:d8:cb:96:
bf:d2:b9:ef:82:03:2a:e4:03:63:9d:3a:9e:db:65:
54:f9:06:b5:1a:43:1b:8f:74:ba:ef:a3:4d:87:55:
b1:17:93:5b:2f:8a:be:85:ab:d3:52:a0:90:f1:ce:
2e:fd:1b:37:0a:96:d5:35:ba:e3:61:c5:8b:e2:42:
61:db:df:a9:4e:8e:61:21:71:d4:43:78:92:42:f8:
7f:5f:6d:d8:9c:30:ef:b7:6a:fd:8f:94:85:fe:6d:
48:d8:3f:a4:9e:e7:75:a2:a5:59:dc:26:d8:98:08:
5b:51:12:13:1b:7a:b4:3b:15:0e:4b:b4:0d:f1:8c:
da:42:88:5c:03:f8:f3:97:ec:a2:4a:d5:a5:b9:5a:
7f:5b:0d:88:32:0c:2b:de:b1:f1:38:1e:5a:fe:40:
57:a3:03:58:33:18:be:fa:cc:2b:a4:72:72:b7:ea:
e7:00:1f:6a:1e:c1:75:bc:e9:26:e1:4f:d1:03:b7:
0e:5e:13:f1:4c:97:7f:db:37:dd:a7:1c:5e:9b:0d:
8e:c6:eb:63:c6:11:33:58:5c:37:69:41:ce:35:4d:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:6A:81:F9:14:A5:4F:E9:80:D4:AD:88:A7:BF:28:04:A5:AF:81
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:eb:65:e0:7d:98:5d:33:38:54:6c:26:69:17:cf:37:ab:01:
2a:7d:c3:49:b5:83:30:f1:2b:22:ca:8e:d1:ee:13:67:ee:17:
71:24:8c:01:e5:60:70:26:80:d8:15:53:e8:98:81:ae:01:a1:
34:0a:05:19:8e:ca:7c:c5:d6:bf:ad:d2:59:0a:f1:76:8c:b4:
84:93:2f:61:79:e6:c7:c8:03:e3:93:62:f8:39:8a:0e:01:0e:
f3:0c:d3:07:22:ac:42:a6:95:3f:e3:21:44:58:4b:4c:7f:ad:
6a:b7:09:b4:a4:3c:53:04:57:45:11:81:d7:3f:13:fb:74:3f:
24:3e:66:bc:d4:61:c9:4e:1c:75:10:97:87:cd:1e:c0:de:0d:
c1:cc:a8:ef:7f:14:3d:05:68:79:a1:9d:83:49:b5:6e:3e:b9:
16:50:54:63:a8:e9:93:3b:0f:a1:10:98:3e:7c:d9:06:63:34:
53:16:0e:96:83:6e:d0:02:ee:21:b6:a4:22:3c:ad:17:73:ba:
69:46:b5:75:a3:a3:91:7c:63:d1:b1:dc:4e:f9:eb:a0:51:20:
40:ed:1e:a3:57:39:e2:b3:24:e8:e0:61:d9:be:17:ba:f3:08:
70:a4:d2:c9:a1:20:7d:79:02:72:b3:97:40:6a:3d:95:41:33:
b2:9f:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:04 2025 by rpki-client