Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File: olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier: fURCYBL2qRsXevpJxmH3Mr+d4yLxn8/HUmN2wV2mQYg=
Subject key identifier: 20:92:27:88:9F:25:50:D8:02:CE:52:81:D6:6C:22:C3:55:6A:9D:F4
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial: 019A05C89F97645C9B1279BA51F13616E054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number: 10E2
Signing time: Tue 21 Oct 2025 08:00:25 +0000
Manifest this update: Tue 21 Oct 2025 08:00:25 +0000
Manifest next update: Wed 22 Oct 2025 08:00:25 +0000
Files and hashes: 1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: SW6TxcconY4NJUpL4KBM/RpiSSnHRIoToTRQ52wFfL4=)
2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:9f:97:64:5c:9b:12:79:ba:51:f1:36:16:e0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
Validity
Not Before: Oct 21 08:00:25 2025 GMT
Not After : Oct 22 08:00:25 2025 GMT
Subject: CN=209227889f2550d802ce5281d66c22c3556a9df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:c7:94:e3:f1:20:b5:ab:e3:a4:06:3b:33:
f6:2c:5f:88:93:26:bd:0f:ac:08:bc:64:6e:fc:f5:
7d:8a:af:e7:bc:cc:d6:cc:59:3f:f2:56:14:ab:3b:
d0:94:a4:4c:49:46:07:34:57:ae:31:6e:ad:fe:ae:
84:d2:07:f3:45:f0:01:ae:c8:cb:bf:e5:7d:08:e8:
13:09:b2:ee:3c:03:34:70:77:20:c9:1b:8a:16:20:
7a:d0:95:c4:ff:c2:33:2f:e2:af:89:e2:42:0b:f0:
31:5b:79:01:80:c5:06:99:09:d5:78:77:4b:08:50:
d6:95:74:0b:a7:0f:47:dc:c9:9e:7f:71:1f:ca:08:
17:bb:95:94:93:fc:d4:f3:3a:10:2b:c8:7a:37:71:
bc:7c:18:33:0f:33:0b:19:7f:c4:0a:0f:aa:32:86:
90:02:0a:10:82:97:3c:c5:dd:12:38:3a:e8:29:0e:
8c:68:49:73:be:0a:a8:2c:a6:66:b5:bc:4d:49:49:
76:a7:6d:de:02:8d:68:9c:1c:5d:3d:b9:09:4a:dc:
b9:5d:81:ea:6b:1d:19:cd:cb:40:e1:43:cc:fb:e9:
dc:19:34:b2:98:e1:3b:bb:31:c1:4f:32:e4:ec:91:
d2:d1:bc:77:5f:45:c6:d3:19:eb:b4:1b:a3:3c:e7:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:27:88:9F:25:50:D8:02:CE:52:81:D6:6C:22:C3:55:6A:9D:F4
X509v3 Authority Key Identifier:
keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d0:30:5a:4a:56:1f:11:a8:b2:1d:c9:a0:ab:fe:47:eb:db:
b7:f4:7e:f1:36:5d:56:c3:d2:f4:fe:53:38:f8:c2:2e:23:3a:
25:0b:c6:a9:48:bc:88:69:67:b1:96:82:bc:6b:3b:90:87:75:
cf:97:c9:5b:29:ff:dd:42:90:42:e3:9b:be:32:bb:c5:fc:b9:
be:6d:b6:e5:f7:f7:cc:25:2c:08:d3:bd:12:f8:6d:0b:d9:6d:
99:6c:16:97:0b:50:85:a6:e4:20:28:25:d7:f1:94:0b:a1:b2:
ec:a0:9a:1e:45:cc:35:bd:1f:b6:3c:32:d0:83:95:37:ef:60:
80:7a:d0:27:bf:2b:15:3e:db:c4:54:d9:50:3b:a5:b0:9c:b2:
c9:71:cf:68:9b:89:f9:ed:8f:97:c5:59:74:2c:79:ca:88:ac:
ec:85:14:6b:06:fe:4c:95:2b:39:df:48:d0:b1:c0:b9:56:e2:
5f:ce:40:72:d3:b4:bf:5e:66:96:31:5c:05:bb:5b:06:9f:6c:
9c:3c:3e:90:b4:e7:1d:b7:de:16:3f:82:5a:0e:63:76:e8:ad:
ed:68:d5:41:18:3b:e7:ee:24:a3:9e:02:78:50:b0:85:15:52:
bc:1a:9d:3c:f3:82:89:b2:1e:b8:3f:e0:f8:8f:3e:0b:1c:b3:
3d:f4:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:48 2025 by rpki-client