Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: zqE8XvEu9/ydCM9OMFqPwfBxbPqBQo7ybhhTFCMmTLg=
Subject key identifier: 98:0F:D9:3C:83:6F:39:1E:DE:FD:52:0C:A1:13:D8:09:31:10:2A:DD
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019A03DA5D33A82DC919FB98E3D82DD41C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 140C
Signing time: Mon 20 Oct 2025 23:00:33 +0000
Manifest this update: Mon 20 Oct 2025 23:00:33 +0000
Manifest next update: Tue 21 Oct 2025 23:00:33 +0000
Files and hashes: 1: 5jNjIfZHCFKLrjsIx_m00VoOlb4.roa (hash: dt8T70nhuJEI4o3TKiSfnq7kGTmTe/iNZKgWHVnpVF8=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: dsWcd9keMxX2qJ/TDfTLEYhr6Nd/hXrnZvojloKDKDY=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:5d:33:a8:2d:c9:19:fb:98:e3:d8:2d:d4:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Oct 20 23:00:33 2025 GMT
Not After : Oct 21 23:00:33 2025 GMT
Subject: CN=980fd93c836f391edefd520ca113d80931102add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:da:1a:ee:3a:e1:ae:10:48:e5:c8:36:68:
96:08:21:1f:7b:d5:82:94:37:92:6e:36:7f:65:30:
97:5b:da:f9:af:70:29:ae:84:52:23:85:b6:ac:56:
08:67:8c:4e:b9:bc:f5:38:c9:37:09:c0:39:48:c7:
b7:e9:a2:c2:92:eb:52:95:7b:e0:d8:37:f6:4b:60:
5b:01:e9:c1:a0:04:fc:6a:2d:bf:0b:d3:71:43:6d:
88:a8:72:0f:51:1b:c4:63:f2:d8:a8:71:bb:f2:b7:
ed:ba:a1:80:23:02:41:41:66:80:ce:88:fb:ed:9b:
5c:36:a0:c5:18:a5:ed:72:8c:79:e0:27:bf:58:cf:
9c:42:c1:c5:76:3d:b9:d3:dd:48:9f:b1:40:b9:5c:
8c:d3:e5:ca:45:cb:bf:32:38:c1:4f:65:fb:0b:25:
63:c3:16:e5:ce:a3:59:06:ac:91:e9:8b:a3:11:47:
52:fb:2a:03:d5:82:f9:0d:de:04:f5:1b:ae:c7:28:
f7:88:1c:d4:e1:b3:34:14:47:72:4b:ce:25:b7:ec:
1c:5a:3f:ff:6f:27:5b:be:53:a8:e1:55:94:36:1b:
4a:b3:e0:22:1f:cd:8d:10:b3:c7:b5:1e:5c:da:57:
34:07:9b:1c:cc:f0:8c:e8:0e:c3:c6:b0:d9:ca:bd:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0F:D9:3C:83:6F:39:1E:DE:FD:52:0C:A1:13:D8:09:31:10:2A:DD
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2d:8a:68:c7:59:bc:5e:6b:a1:fb:b4:bf:90:0e:55:2d:84:
65:66:73:71:72:30:1b:92:3a:ea:f7:88:61:fa:1d:37:26:d6:
31:70:a1:2f:0b:23:0b:0f:df:8e:1f:72:87:63:2f:2d:f1:f7:
25:ca:3c:db:6d:55:55:eb:cc:1a:a8:59:c0:6d:5e:74:1d:d2:
13:ae:b1:8f:ae:a6:39:a9:22:ab:7a:57:15:ec:b5:db:07:99:
f6:90:3b:fc:e3:fe:de:94:8b:9e:d9:10:8e:0c:80:eb:38:36:
76:b1:72:0c:04:1f:e9:af:1a:d0:1c:8e:59:5f:cc:00:27:ff:
8c:dc:2a:b4:8c:21:dd:eb:65:d8:28:17:92:91:f8:3a:69:c4:
dd:a9:34:85:fa:db:f2:21:89:8c:3e:38:4a:af:f4:8e:eb:a9:
38:24:45:b7:b1:34:c3:c1:2e:a2:97:d9:35:de:6b:c9:5c:e1:
58:c2:4a:ba:83:99:d2:15:70:a3:87:cb:a3:07:7d:b8:69:94:
8a:17:b5:ea:28:19:ae:20:cc:fb:52:18:7f:c4:7b:ad:9e:e7:
d2:61:b3:37:e3:6c:77:4a:88:ed:2d:f3:40:e5:25:1f:58:78:
ef:5f:36:b4:ae:f4:ec:69:a6:e2:a7:74:4c:6f:e7:0d:0c:a1:
4e:21:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:15 2025 by rpki-client