Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: jE4LYrO+NnNTsjpzsICodS5sfYS7D8qUMUOlECBD7ys=
Subject key identifier: D7:DC:35:77:5A:22:51:20:7F:87:E4:61:1E:46:79:A5:BD:98:6E:92
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019A03DA08687159DB7CCBA59D87FD91984E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0556
Signing time: Mon 20 Oct 2025 23:00:11 +0000
Manifest this update: Mon 20 Oct 2025 23:00:11 +0000
Manifest next update: Tue 21 Oct 2025 23:00:11 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: KkmCWnK22IfGqQM+wdT4y62y685s/scbK1CyQDlzD4Q=)
2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:08:68:71:59:db:7c:cb:a5:9d:87:fd:91:98:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Oct 20 23:00:11 2025 GMT
Not After : Oct 21 23:00:11 2025 GMT
Subject: CN=d7dc35775a2251207f87e4611e4679a5bd986e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:27:53:88:fb:76:e7:e2:d2:4a:a6:a8:a5:
2b:65:6d:5e:ea:89:79:f6:07:8c:5c:b8:04:60:29:
3e:81:85:24:9a:3b:22:b0:16:6b:6b:40:9b:16:8b:
9b:1f:4e:0d:62:48:df:0b:44:bf:d3:08:d1:66:e0:
25:f9:66:c6:53:18:0e:e6:1e:25:ad:bf:d9:52:f4:
a4:62:83:68:e7:3d:b4:43:9b:b2:30:59:38:66:d8:
1d:d2:47:cb:77:90:99:cc:78:54:f0:d8:71:a9:b1:
7d:3f:f6:f9:9b:73:d7:a3:da:2f:e9:ad:6f:35:2a:
78:42:bd:04:4f:2d:dc:89:72:9b:d8:b6:7f:4c:89:
36:df:c2:1c:c6:ed:35:2a:7f:0e:8f:ba:be:9c:45:
7f:57:ed:a0:d9:08:f4:f6:72:02:47:f3:2b:ed:4b:
d6:49:ff:3a:93:a4:fb:15:a3:e6:1c:fc:b2:92:3b:
30:d5:a3:7c:89:8c:4a:77:31:66:9d:50:f6:80:7a:
c6:9a:08:e7:e4:b7:e4:39:81:7a:7c:d7:01:3b:15:
53:5c:e4:b7:89:c6:18:72:c8:9d:e3:23:18:81:a6:
19:99:3b:64:a7:51:a3:ed:e3:48:2a:19:b4:6a:1f:
21:14:f9:ff:f1:fa:7c:1e:a3:f2:1c:85:1d:d7:60:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:35:77:5A:22:51:20:7F:87:E4:61:1E:46:79:A5:BD:98:6E:92
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3a:87:c6:f7:7d:e1:21:21:d4:97:06:ed:1a:f6:ba:48:7f:
41:35:da:ec:39:68:de:7f:a5:51:82:95:bb:c9:ca:1d:c0:61:
54:d6:09:d3:45:73:01:f3:02:44:f8:06:b2:ba:28:a8:91:59:
ab:fc:43:89:ab:e3:b9:81:2b:bb:f8:bc:70:e8:91:93:cc:34:
ca:18:68:61:26:97:fe:89:cf:ba:07:4d:fc:1b:44:be:4b:20:
53:08:55:de:be:f7:87:1a:7a:ca:bb:0b:14:9c:0d:27:12:07:
3f:2b:bc:e3:c9:6f:a0:90:89:79:c2:d3:5f:7d:e7:e9:c2:67:
23:e9:0f:f7:a6:a5:df:0e:50:82:47:d1:21:1a:8a:b1:b2:38:
a6:4c:40:f6:76:de:33:5a:24:8d:8c:cd:be:e9:f5:27:1c:25:
4f:bc:28:e0:8d:3b:78:d3:2d:4b:41:26:b4:84:45:f3:d5:c0:
96:e0:96:2d:11:f5:d3:9c:1a:93:8e:03:e9:16:6b:8b:00:f8:
09:7e:42:13:c7:aa:cb:5b:f3:2a:61:09:86:bf:af:a7:86:63:
36:a2:8d:8e:75:84:b3:5d:c9:15:22:83:ac:1c:88:8d:a7:9a:
f8:34:07:b0:a7:36:34:00:d2:71:7f:b6:6b:78:7e:b1:92:1f:
6c:3c:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:37 2025 by rpki-client