Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: tkrMT78phqTAZUkGiiRCJTdYc/y3r84DPPmhbfBHkEA=
Subject key identifier: AF:E2:A6:3F:34:FA:E4:CC:7F:F1:31:C7:F5:20:76:1A:A5:48:81:7D
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 0198D6CD6A5AF822C8208142591CE75D5AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 136C
Signing time: Sat 23 Aug 2025 12:00:42 +0000
Manifest this update: Sat 23 Aug 2025 12:00:42 +0000
Manifest next update: Sun 24 Aug 2025 12:00:42 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: OaiyiAZw60Ym9uRnd1Oy9GyK5a+CkkYWqFFnIadWJyc=)
2: vvgZXdU06u-_0fiLyBC-ZekdFNM.roa (hash: mOC8gaNX6ZzpsE0BxWI+ytnCe6vTfEvF5plucp9xbzw=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:6a:5a:f8:22:c8:20:81:42:59:1c:e7:5d:5a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Aug 23 12:00:42 2025 GMT
Not After : Aug 24 12:00:42 2025 GMT
Subject: CN=afe2a63f34fae4cc7ff131c7f520761aa548817d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:69:df:be:0f:3e:23:d1:a9:c8:22:9f:4c:
02:c1:0e:7a:c1:9a:e9:dc:35:7d:8e:c9:7d:41:94:
06:f7:84:9a:c4:9f:ae:8e:82:e4:c7:d0:cc:53:e4:
22:14:d7:8c:a4:c9:75:89:e9:ca:50:45:b9:f2:c5:
5c:50:1a:31:ad:70:60:be:be:40:4b:ce:2f:f5:86:
45:56:17:45:26:de:57:16:cf:d2:8d:d5:53:22:a2:
f2:a6:54:03:a2:73:9d:b3:c6:d7:bd:b8:05:25:41:
05:cc:5a:7f:ac:15:c2:75:af:2c:53:9f:37:12:a1:
87:86:af:6b:d7:65:b2:08:27:1b:25:73:b3:e2:20:
a4:ce:72:62:32:2a:76:c0:26:70:28:83:b9:3d:76:
48:4f:db:a6:54:78:d5:fe:14:40:8e:4e:fd:c3:34:
4a:91:4d:a8:13:55:ca:00:8d:c1:e8:e1:73:aa:2f:
a3:76:50:3d:bd:20:57:33:d1:b7:7e:c3:94:55:ba:
f7:97:2e:91:d9:a8:6a:5f:b9:7a:5d:e0:fc:3e:1a:
da:7b:ae:6c:71:8e:c9:b6:47:43:1d:83:9f:87:e2:
55:7c:05:d7:b6:65:52:bd:35:55:4f:07:86:de:50:
bd:d9:ee:68:c7:13:e7:90:cd:c5:36:bb:64:28:74:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E2:A6:3F:34:FA:E4:CC:7F:F1:31:C7:F5:20:76:1A:A5:48:81:7D
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d9:0e:5b:d0:cd:0e:6a:4b:dc:e8:aa:bc:ff:4c:66:65:ca:
31:e3:c1:df:5f:f4:ee:42:84:cc:51:cb:a3:c4:39:d9:f9:40:
b4:30:6f:aa:14:4f:08:c1:87:32:39:da:e1:9f:65:46:16:b2:
b3:01:ee:9f:6b:37:c2:94:8f:fa:34:d4:54:35:9b:ee:d5:e8:
2e:50:14:30:b8:eb:21:1d:98:e2:cf:05:0e:a4:9b:cb:7b:22:
93:0e:77:ec:76:69:02:f0:55:88:02:46:70:79:5c:0f:55:76:
b8:53:05:ae:b8:de:4b:ba:7d:43:87:33:3a:fd:4c:aa:e2:4f:
ec:cb:d3:bb:92:a0:fa:03:b9:cc:40:5f:ab:0e:ef:d5:94:a4:
6c:d7:42:61:b4:33:0c:66:de:46:46:1e:66:4c:63:6e:e6:bf:
7e:0f:c8:ac:cc:bf:44:5b:b5:4a:21:82:6b:1d:28:1a:21:34:
9c:ba:9c:d7:58:1e:4a:11:bd:8a:df:4b:be:46:f1:16:fe:08:
f8:8b:04:b6:d2:11:23:91:c9:bf:e2:c9:ba:f7:f5:a8:30:8d:
99:e2:71:bb:1b:b0:2e:94:c3:7c:93:4c:8e:21:4d:d4:9f:98:
01:39:86:58:c8:77:80:13:1c:17:6a:df:64:58:54:37:57:55:
af:c7:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:30 2025 by rpki-client