Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: AwhokDUIEsy5OoZyPOAMcSEMb+lqg6xq2uou6ha8PJI=
Subject key identifier: F0:16:A4:76:A6:E6:80:47:97:25:F7:38:DA:1F:AA:7B:C4:D9:A4:EA
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 0199FBEB4D8AE860FEF125C48D42DF7DEED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0AEE
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: AONHg3Ey0jEdXGpl9S5E9XUBwZJL4f8GEmRNuwUXUfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4d:8a:e8:60:fe:f1:25:c4:8d:42:df:7d:ee:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=f016a476a6e680479725f738da1faa7bc4d9a4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:a9:a6:d1:09:a1:df:5b:dd:86:bb:f9:50:
2f:65:f7:4b:bc:e8:1c:17:b5:7e:d9:0c:ab:5a:25:
90:be:32:1e:07:7e:6c:ca:97:f2:3d:ee:bc:d2:5f:
3c:4f:f7:54:ce:17:d6:37:d0:f1:e7:53:e9:bb:30:
1f:e8:2a:57:63:13:a3:d2:f4:fe:fe:1a:0b:fe:f7:
a9:08:22:a5:e0:a1:ca:6c:78:7c:3e:53:81:ac:2c:
22:d8:79:d7:3c:91:ad:f6:2b:c2:05:dc:0f:9d:a6:
81:58:e0:fd:89:ed:9e:6b:bf:e1:96:df:e9:c3:61:
e8:a4:de:86:6b:6f:a3:14:d8:40:2d:03:c6:46:79:
1e:83:57:cc:36:fa:b5:99:63:6f:ed:70:ca:93:23:
97:b7:a0:fc:ae:5b:23:ff:42:d5:ec:f5:6a:19:59:
ec:c7:e0:de:c7:7e:85:12:68:e4:2e:be:65:af:10:
51:1c:e7:55:92:ff:36:76:de:92:8a:2d:30:fa:df:
c6:71:86:9a:6e:64:46:d9:53:52:e0:6d:6d:03:0f:
37:75:6f:72:db:9e:92:9a:f8:6b:d3:e4:5c:f8:b8:
e5:58:ee:37:3d:bd:57:d1:5f:f0:c3:96:2c:0a:a5:
8b:5e:e4:5f:ef:b8:c3:62:00:54:4e:c9:93:e2:d0:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:A4:76:A6:E6:80:47:97:25:F7:38:DA:1F:AA:7B:C4:D9:A4:EA
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4e:f1:54:2d:d4:86:e4:f9:f4:33:b1:eb:86:ae:3b:d9:30:
ba:d5:1b:ad:e0:6b:ea:55:1e:3a:74:74:8f:75:64:7e:3c:d2:
c5:84:34:4b:ef:d6:85:8f:e2:79:67:f2:13:01:2f:37:f4:2a:
ef:aa:d1:c0:e2:35:73:01:48:27:b8:8e:e4:67:34:55:19:ea:
9c:89:91:8d:8b:a1:13:07:e6:a9:c5:57:1b:c6:bf:2c:6c:0e:
69:f6:0b:59:22:f0:36:c8:0f:d2:de:b7:be:11:13:d0:6f:1a:
d7:32:16:94:bc:2f:9e:3c:db:78:67:c2:12:3e:58:82:1f:9c:
85:bb:a7:45:64:37:8d:13:bd:4a:a7:41:de:48:a8:21:e5:b3:
2e:8f:75:33:60:8f:5c:17:a7:3c:da:99:ff:f7:15:ee:9c:e5:
14:2a:3f:4e:9f:ec:c3:6a:df:b3:13:71:7e:0f:a5:fb:28:98:
06:2f:00:c5:8f:f4:a6:c4:59:d5:8c:c5:5f:00:7c:df:d9:28:
f4:10:47:f9:42:95:90:02:3d:07:c4:42:8c:0f:61:84:14:82:
79:26:94:e6:d4:d9:51:96:ae:5f:55:3b:79:83:46:e0:c4:06:
20:82:c7:6f:43:12:ae:3c:c3:0e:47:6c:10:d3:3e:f4:55:5b:
40:81:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:53 2025 by rpki-client