Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: FpDt7ETl5wlNVUW/LLP29INXrn4hwtCCSIWlUOElqDI=
Subject key identifier: DD:8F:94:0B:06:7D:42:79:53:B5:32:D3:C1:69:1B:99:95:BB:A0:AF
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 0199FEB4F80FAB9CB31B95336D75BBA46633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:36 +0000
Manifest this update: Sun 19 Oct 2025 23:01:36 +0000
Manifest next update: Mon 20 Oct 2025 23:01:36 +0000
Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: OYd6peCrBlRihQXYIvErd9p4aHotW2jCSWj6Xwiez5U=)
2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f8:0f:ab:9c:b3:1b:95:33:6d:75:bb:a4:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Oct 19 23:01:36 2025 GMT
Not After : Oct 20 23:01:36 2025 GMT
Subject: CN=dd8f940b067d427953b532d3c1691b9995bba0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:3c:e5:08:d3:5d:c3:19:da:b5:1e:ab:b0:
26:06:fb:a3:79:70:f1:c9:af:92:ef:c2:d4:eb:12:
79:cd:e2:7c:cb:c2:e3:4b:86:f9:06:fc:08:40:d1:
ec:c4:3a:3d:74:5b:b1:2a:b3:ed:ff:1c:3b:5d:01:
94:8d:6a:9a:ca:a4:0a:6a:39:bd:25:ce:89:13:0e:
0b:f4:0a:7b:62:12:5c:51:a6:38:0e:90:0f:16:3d:
bf:d2:53:c2:b4:19:e0:1f:95:ab:4a:1e:45:5e:c1:
c6:f6:42:f6:76:d8:f5:e9:d4:c7:fb:6a:d5:38:af:
b6:11:f0:7a:fd:50:a8:d7:4c:18:0b:74:8a:a9:55:
7d:11:6b:ef:02:c7:38:fd:91:7b:7f:47:d4:05:a8:
82:e1:06:df:18:1c:e3:ce:e1:c0:36:30:cc:2f:d7:
16:15:ac:cd:5f:ed:73:0e:8b:59:df:9e:9a:a1:43:
14:82:44:52:56:9c:ba:34:ed:f5:fa:5c:5e:13:a3:
e1:19:6e:d5:0b:6d:4b:ec:6d:f0:0c:97:a6:e3:7c:
75:6c:7e:e8:12:df:59:97:5a:c5:33:77:36:46:ba:
66:71:4d:f2:52:55:b4:e1:db:eb:d4:10:52:38:e0:
ef:43:4d:55:08:41:c1:08:58:c9:49:37:ae:6c:4d:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8F:94:0B:06:7D:42:79:53:B5:32:D3:C1:69:1B:99:95:BB:A0:AF
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6c:a3:a8:ab:de:36:7b:1b:f0:7a:74:33:a9:6d:ba:79:a5:
9f:e0:14:d3:35:09:4d:d9:66:e0:d3:b3:06:55:57:36:7d:06:
af:36:c9:8a:93:e1:24:98:fa:a1:78:59:71:3f:24:79:dc:b3:
f8:69:89:7d:19:a0:45:16:bc:ff:6c:69:bd:c5:5a:5a:70:60:
ad:a2:d8:df:3d:6b:62:45:3e:29:07:cc:13:c6:3f:b0:25:a6:
60:92:27:48:1d:83:d9:03:fd:32:52:9a:66:9e:83:54:99:3a:
e4:79:7b:48:bd:b0:ed:ea:b9:84:03:9d:79:db:b6:cd:9d:a5:
e6:e1:b1:fe:7a:3d:91:0d:c3:b6:18:71:6a:13:86:30:6a:3a:
a0:ff:4a:f0:67:b5:7e:43:68:0e:69:6e:f4:1f:88:8f:c5:ad:
9b:75:7c:c2:1a:da:44:c5:a5:0d:41:c3:b4:39:06:57:92:27:
1b:33:25:c7:20:64:3f:41:4b:e1:14:7e:82:57:c0:5d:be:32:
4d:5e:21:f5:1c:1b:4c:c3:09:e7:80:10:98:ba:4d:e4:b8:ad:
cd:43:9a:63:64:96:af:67:b0:55:91:82:75:c5:52:2c:15:67:
d0:de:e8:67:87:d5:91:ea:af:73:81:7a:07:4f:f5:e4:83:f7:
1f:ac:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:41 2025 by rpki-client