Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: F6LUPgbQ+wpW9CdyJy//eaWzl9CBvL4BM0K67cA+668=
Subject key identifier: 22:99:63:0C:91:E5:64:8C:51:27:BD:4F:2E:80:9D:60:30:24:07:05
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 0198D5158753BB0195F2525441270C7E5EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 06C2
Signing time: Sat 23 Aug 2025 04:00:14 +0000
Manifest this update: Sat 23 Aug 2025 04:00:14 +0000
Manifest next update: Sun 24 Aug 2025 04:00:14 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: x4Wf7GAmv1YB579jU72ARdo5pXgqUp/o0OqgZuRvtRE=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:87:53:bb:01:95:f2:52:54:41:27:0c:7e:5e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Aug 23 04:00:14 2025 GMT
Not After : Aug 24 04:00:14 2025 GMT
Subject: CN=2299630c91e5648c5127bd4f2e809d6030240705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:58:1d:cc:2c:04:1e:2a:2f:2a:01:51:d2:
7f:24:54:83:f5:0b:91:15:e2:6a:d3:25:6b:4c:c4:
ff:60:94:c5:b1:9d:5f:26:6f:39:6a:46:bd:d6:6a:
1c:49:ec:12:ed:e4:2d:b6:ec:0a:e8:89:d5:de:18:
5a:fc:c1:7b:16:34:92:34:3f:2e:6a:a9:31:d7:0a:
e9:63:21:75:d0:42:dd:57:b6:9d:be:55:ee:b9:2d:
39:b0:47:bc:65:47:c1:77:14:30:5a:31:5f:be:16:
d5:8b:35:5c:63:43:54:3d:49:72:ea:18:91:75:25:
31:01:81:d9:ee:5e:d9:45:b3:b4:52:22:a2:8c:ec:
84:ea:f7:29:a8:83:78:92:6b:9f:93:21:e6:70:6d:
78:6b:1c:86:53:86:fd:8d:4f:4c:ce:b7:f6:ae:16:
1e:2f:39:05:6e:26:c3:76:da:57:96:fc:55:63:13:
97:8e:d8:77:57:3a:81:88:4e:42:d5:02:31:ea:0b:
5e:59:72:1e:e3:a1:8f:3e:7c:37:6b:50:79:10:14:
a1:8b:8f:ad:27:93:0d:24:82:fd:a3:29:b9:98:12:
e0:ec:6c:6c:33:aa:7f:99:a5:ba:c1:e0:c0:4c:0b:
0c:95:2c:8a:1d:74:6a:70:33:86:39:d3:0e:57:40:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:63:0C:91:E5:64:8C:51:27:BD:4F:2E:80:9D:60:30:24:07:05
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:17:21:6f:5d:ed:72:84:2f:d1:0a:21:aa:0c:77:37:8a:
be:e2:11:3e:60:e2:4b:44:82:6c:6a:91:9f:14:53:21:63:ed:
6e:59:6a:f6:8c:54:f4:00:ac:3d:b4:88:78:d9:41:7b:e1:ba:
a9:40:ee:d5:1d:a0:0b:a5:63:5b:96:4e:e4:61:a7:03:60:95:
06:65:54:28:77:c2:95:c3:6d:75:72:46:2d:dd:6e:28:9c:1e:
6a:4c:57:e5:6e:43:bb:cf:d6:c8:86:ca:a8:f6:6f:ab:43:48:
73:7e:f1:b2:3a:3d:df:e7:1e:b5:90:44:3f:ee:0a:c5:12:fe:
9a:de:df:d7:fe:f3:da:8b:75:e3:f1:67:8f:77:10:d9:2a:a9:
99:26:1f:dd:2d:5b:4b:81:61:9d:96:d7:ab:3b:68:ed:f0:d7:
3f:68:97:7d:0f:23:22:88:e3:11:35:87:0c:7b:f8:24:5d:26:
fe:8a:a6:72:a1:18:6c:fa:2d:5f:83:d8:1c:c5:0b:69:5a:27:
19:21:af:71:6e:71:4e:54:55:89:d6:5a:a8:f0:bb:19:7d:35:
18:af:b7:87:ec:20:ec:c8:1e:b1:70:ec:f7:4e:0d:b3:42:e6:
be:03:bf:56:02:a6:38:20:e9:b4:c2:65:39:11:cd:90:07:e8:
14:34:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:01 2025 by rpki-client