Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: tr4kTfQZp7sKlRYqipoPX5z0sFLi4HU3t4mwOjci0uE=
Subject key identifier: 48:9A:46:FB:41:5E:4E:DE:AA:35:9C:54:81:95:E7:91:9D:2B:87:89
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 0198D697EA4ECE922762C52FD2C237628FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 04BA
Signing time: Sat 23 Aug 2025 11:02:16 +0000
Manifest this update: Sat 23 Aug 2025 11:02:16 +0000
Manifest next update: Sun 24 Aug 2025 11:02:16 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: SF6b+PF6g3qlioRR5VHyDXN7mHcs2HWpel5KvRuNSnQ=)
2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ea:4e:ce:92:27:62:c5:2f:d2:c2:37:62:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Aug 23 11:02:16 2025 GMT
Not After : Aug 24 11:02:16 2025 GMT
Subject: CN=489a46fb415e4edeaa359c548195e7919d2b8789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:d6:ab:ad:fb:53:86:11:8e:01:36:46:a8:
e6:b4:ab:73:18:7c:17:79:0f:fe:56:d1:33:3c:c0:
8d:1f:ce:40:9d:17:da:cc:de:e3:5e:ba:ce:c7:d8:
c3:49:f0:bf:c6:d7:7d:7d:10:c3:6e:39:5e:9e:6c:
51:de:89:eb:33:0a:98:a7:b2:20:81:f3:3a:16:e4:
ca:c0:fa:b7:80:88:47:c3:58:ff:74:5f:4a:f1:77:
4a:08:cf:a1:af:23:b2:32:1c:e0:c3:bd:99:0f:eb:
c3:f3:99:f2:07:92:67:b2:f5:2f:41:c6:09:61:42:
f5:c7:47:fc:8f:d4:df:ec:19:38:e3:d0:49:c5:5a:
92:41:a2:bb:f3:b2:f0:d1:6e:ad:9f:1e:8a:62:cf:
5c:a1:a1:6c:88:9d:e1:cd:b0:8b:17:11:11:1b:3e:
00:2f:ea:25:13:80:a5:45:48:34:78:e7:6e:6d:41:
ff:b5:19:75:43:ee:3e:66:92:c4:0b:9d:a4:25:dc:
a3:74:86:c5:95:f9:ac:a2:e1:b9:4b:e9:77:b8:29:
04:42:92:ea:44:e7:f6:40:57:26:e8:77:47:aa:24:
a6:45:8b:75:3b:ca:26:a2:b0:ad:8b:d3:eb:01:b9:
9b:13:d0:9a:0e:a0:6b:7e:f4:96:29:02:31:57:db:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:46:FB:41:5E:4E:DE:AA:35:9C:54:81:95:E7:91:9D:2B:87:89
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:68:8d:e7:58:2c:b4:f3:0d:57:8d:13:55:ee:d1:e3:0f:db:
21:32:0d:88:d4:6f:23:e6:e5:6b:40:3e:7e:21:03:1a:18:65:
7b:f6:03:17:d4:25:2e:3b:36:ec:f7:ef:2f:a4:04:c1:ec:e0:
23:7e:2f:01:6f:17:66:26:ac:23:c9:e1:8f:cc:c6:d8:58:db:
39:95:79:dd:92:e1:25:f4:d0:b7:d5:55:e3:cc:8a:5a:fd:39:
88:e9:59:3f:b5:17:20:16:59:0d:6c:78:ae:e7:05:fe:e2:36:
f1:7e:df:e5:35:1b:67:a8:4b:77:ff:e2:df:7d:cf:6b:ef:cf:
0d:3c:4e:b3:71:b3:d0:50:55:d1:53:91:ac:21:49:10:c5:07:
47:ac:78:ea:3c:9f:e2:4d:d1:40:48:41:e7:a5:dc:e0:f4:27:
7c:e4:ce:ee:1e:da:8f:36:46:3b:9e:a5:3e:cf:06:17:e6:b9:
d7:b5:e3:a5:d1:1f:ee:40:4d:db:ae:44:49:fd:72:76:a8:9c:
f7:6a:6e:93:cb:bc:89:63:ac:de:ab:a6:5a:4b:5c:b5:28:07:
a8:f8:f8:e7:27:69:c3:c5:35:c9:e7:59:4e:30:d4:5f:54:f1:
fc:17:4a:04:8b:79:c1:4d:b7:4d:9b:87:73:6b:91:ee:b9:0b:
2e:5e:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:08:21 2025 by rpki-client