Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: xVPtaLmF3HyaxBHoE3XPzCVSS5I5xWGj4vKmSNBAXZM=
Subject key identifier: D1:33:45:CB:F5:FB:86:07:C1:AA:88:5D:B5:5F:C4:01:B5:41:88:FD
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 0198D54DEE1C6120A2510BFA2AC379F57CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: rBvDNqDxovXThL+tlj2T6piQUnv4e5vSW8yQ5rqbC7k=)
2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ee:1c:61:20:a2:51:0b:fa:2a:c3:79:f5:7c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=d13345cbf5fb8607c1aa885db55fc401b54188fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:2e:03:c6:7e:b0:ef:e9:3c:17:bb:08:1a:
68:26:24:4e:75:ef:38:59:34:a8:cc:39:be:ed:ba:
29:43:4c:5a:e8:0d:b5:97:37:77:18:0c:76:57:bb:
72:1c:31:8a:e5:ea:eb:ea:bd:d6:b7:37:ab:a9:51:
50:bf:01:f5:2a:1b:24:b4:f4:f6:82:48:24:67:9f:
1b:4f:0e:62:5b:75:55:63:24:be:3c:c4:63:60:05:
25:64:26:b8:e5:e3:28:e4:70:15:4a:fd:84:a8:86:
2e:b3:e6:9b:ad:3d:b5:3f:b3:e7:9b:4a:d2:3f:c6:
56:a4:5e:6b:70:fd:5c:c6:ba:02:70:13:ad:78:ed:
b3:d8:eb:c4:4f:92:4f:b7:f8:5b:91:6b:d1:71:19:
b6:28:f8:75:5b:23:e5:d0:3e:6b:88:a7:26:b7:eb:
f4:b3:16:d9:39:0d:9f:1b:54:ce:af:af:98:ac:5e:
39:aa:4a:33:e5:90:d8:eb:b2:b0:11:3c:b9:59:28:
6a:54:b2:56:44:a9:74:7b:0b:31:98:e4:cf:7b:eb:
df:01:72:cb:91:2e:6c:63:bf:cc:76:4b:1f:b7:b6:
04:00:51:d8:52:a9:b0:81:8f:d3:0f:0c:85:1d:e3:
10:26:56:7c:0a:0e:63:20:b9:68:77:ec:28:f6:9d:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:33:45:CB:F5:FB:86:07:C1:AA:88:5D:B5:5F:C4:01:B5:41:88:FD
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9d:15:4c:e9:23:1a:2e:e7:48:86:a1:42:9c:3a:0f:86:4a:
6d:c7:bb:08:17:a8:9d:88:73:a1:3a:58:d7:fe:a1:40:1a:30:
3e:f6:c0:a3:ad:bf:94:3d:5e:3f:8d:f6:20:0b:ea:f2:89:83:
c4:c3:82:89:56:17:eb:40:5c:f2:5c:e3:67:20:b6:4b:1b:cd:
f8:2d:6c:9e:48:cb:31:d8:6a:34:26:a5:91:2f:9f:84:f5:22:
a9:fa:aa:18:f9:77:29:36:5b:07:d2:bb:cf:82:11:94:f3:cf:
ce:2a:ff:67:90:8e:1a:f1:b9:e6:29:94:67:30:f2:2c:ba:6b:
6b:62:96:ef:ff:a6:ac:54:6d:30:39:ff:a3:aa:e5:88:ac:6d:
d9:30:37:c2:92:c8:16:8f:e2:ac:6e:5c:24:fa:be:71:ec:e2:
15:48:62:04:c6:ee:55:16:cd:e6:f0:d9:2c:b9:82:3b:cb:a6:
d6:26:5b:3f:85:9b:84:71:94:a5:18:63:1c:ee:ee:ea:45:b9:
81:5e:4e:e7:78:19:5c:e3:5e:88:ba:69:e3:d4:04:99:97:a9:
02:f0:80:d1:a6:a9:51:23:cf:75:ac:67:3f:d1:e4:82:33:1c:
e4:91:a0:60:66:47:c3:39:a2:07:94:6c:b1:dc:a8:4d:c3:dc:
cc:bd:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:38 2025 by rpki-client