Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: raOVLEKEErRx6XaOQRUk/c8F6yOVYNH4+HkvEP+2DjQ=
Subject key identifier: 46:06:0D:4F:2D:FC:D2:AC:52:D0:F6:B8:39:7A:20:56:FD:04:05:CD
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 0197B77C2994C78A075D46E85C50D03AE40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: XwMgm9NAOE0G8Xbq/R+p7D79ixOzcjnZiJ6o8kSWy9c=)
2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:29:94:c7:8a:07:5d:46:e8:5c:50:d0:3a:e4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=46060d4f2dfcd2ac52d0f6b8397a2056fd0405cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:15:60:a0:4e:fd:5c:bc:7a:55:de:fd:ca:
62:e6:d1:e1:6d:6f:2f:ed:63:5f:f2:27:8f:1e:8f:
b8:3f:44:30:6a:e4:b6:02:ea:64:d5:41:86:24:66:
01:a3:3b:e8:9c:b3:6e:af:7e:53:a9:9c:ee:30:99:
de:7b:ca:74:53:b5:84:dd:3f:d4:b6:43:d3:0e:e1:
42:b7:76:ea:a2:ee:11:b3:1d:8b:82:44:bb:2d:22:
97:8b:9e:5c:25:3c:e8:fd:26:c1:35:37:72:e9:8c:
04:07:24:e1:48:bc:d9:f8:8b:34:3b:b8:8e:b3:22:
32:03:dd:3f:68:08:d4:04:5c:12:82:be:d5:55:d2:
dd:e4:36:6f:7a:60:63:28:36:30:ae:7d:6e:cc:13:
01:93:34:2b:77:fa:cf:f8:87:c1:e3:0f:5c:ef:51:
82:1b:ca:9e:95:0e:4b:40:e7:05:81:2f:d4:40:14:
c0:91:51:0a:b5:a6:97:82:3b:ca:43:19:36:69:59:
80:88:12:e3:7d:7c:dc:20:eb:50:0f:86:03:3e:9e:
2c:c9:e8:ca:1c:dd:2c:33:cc:33:96:78:1c:ae:e4:
0d:62:5a:3d:ab:9a:60:50:8f:e7:e8:42:4a:67:48:
c9:3d:ea:c0:dc:ec:72:45:9a:88:25:57:dc:fd:a8:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:06:0D:4F:2D:FC:D2:AC:52:D0:F6:B8:39:7A:20:56:FD:04:05:CD
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:89:12:cb:86:90:b8:39:43:3b:a9:f7:84:f3:d3:5a:ac:d2:
c7:9b:8f:49:82:dd:06:f8:44:92:40:8a:58:ac:86:55:0d:bb:
e0:33:2d:37:0a:b8:53:28:90:49:87:4d:6f:59:e6:77:d8:34:
4d:db:e3:8f:03:4a:69:d6:8f:9c:52:93:f5:25:d7:29:fa:1e:
57:3f:05:4b:40:03:7a:8b:f1:df:de:22:ad:ad:13:fb:a7:99:
5a:1a:7f:7a:39:67:d6:da:cc:6a:a5:f7:de:4b:2a:91:46:41:
02:e3:e7:61:44:cd:e8:51:d7:25:46:24:58:bd:29:f8:7a:a6:
eb:f3:7e:b4:b7:17:d6:aa:14:da:30:49:91:c4:da:d1:87:2b:
45:93:5c:f7:3c:05:cf:60:2c:1e:34:c9:22:a1:b7:c4:e5:80:
c2:a6:11:3e:cf:75:eb:3b:1c:92:c3:c8:4f:8a:eb:4f:6a:52:
6a:19:01:8f:c7:7e:3e:28:c8:4f:5a:12:07:4a:5b:4f:6a:75:
a8:a9:e0:19:2b:0a:ec:df:32:bd:17:28:b6:88:69:c2:74:a9:
cc:d1:c4:c8:b0:5d:d0:d8:1f:a2:74:22:fe:10:05:27:47:5d:
cc:60:99:ee:71:c4:1b:da:43:a7:f1:82:6c:8c:eb:4a:4e:c4:
e1:5f:50:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fCmUx4oHXUboXFDQOuQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNTM5ZTUwMWRmZjM3Y2RjOTJjYmVlMGNkZGI5MmVkMmU4
MWMxM2MwHhcNMjUwNjI4MTcwMDU2WhcNMjUwNjI5MTcwMDU2WjAzMTEwLwYDVQQD
Eyg0NjA2MGQ0ZjJkZmNkMmFjNTJkMGY2YjgzOTdhMjA1NmZkMDQwNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UQVYKBO/Vy8elXe/cpi5tHhbW8v
7WNf8iePHo+4P0QwauS2Aupk1UGGJGYBozvonLNur35TqZzuMJnee8p0U7WE3T/U
tkPTDuFCt3bqou4Rsx2LgkS7LSKXi55cJTzo/SbBNTdy6YwEByThSLzZ+Is0O7iO
syIyA90/aAjUBFwSgr7VVdLd5DZvemBjKDYwrn1uzBMBkzQrd/rP+IfB4w9c71GC
G8qelQ5LQOcFgS/UQBTAkVEKtaaXgjvKQxk2aVmAiBLjfXzcIOtQD4YDPp4syejK
HN0sM8wzlngcruQNYlo9q5pgUI/n6EJKZ0jJPerA3OxyRZqIJVfc/ahEcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYGDU8t/NKsUtD2uDl6IFb9BAXNMB8GA1UdIwQY
MBaAFDpTnlAd/zfNySy+4M3bku0ugcE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kODFhNDMtNDgyYS00NDMzLWE3YTIt
MDI3YzBkNjQyNGUzLzEvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kODFhNDMtNDgyYS00NDMzLWE3YTItMDI3YzBkNjQyNGUz
LzEvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADokSy4aQ
uDlDO6n3hPPTWqzSx5uPSYLdBvhEkkCKWKyGVQ274DMtNwq4UyiQSYdNb1nmd9g0
TdvjjwNKadaPnFKT9SXXKfoeVz8FS0ADeovx394ira0T+6eZWhp/ejln1trMaqX3
3ksqkUZBAuPnYUTN6FHXJUYkWL0p+Hqm6/N+tLcX1qoU2jBJkcTa0YcrRZNc9zwF
z2AsHjTJIqG3xOWAwqYRPs916zscksPIT4rrT2pSahkBj8d+PijIT1oSB0pbT2p1
qKngGSsK7N8yvRcotohpwnSpzNHEyLBd0NgfonQi/hAFJ0ddzGCZ7nHEG9pDp/GC
bIzrSk7E4V9QPA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:33 2025 by rpki-client