Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: 9GY/XuaiZIyY4AXtQW2XpMr3dJpc6tqk8Q/mH0hq54g=
Subject key identifier: BB:83:81:2A:34:5E:8C:6A:B1:10:6C:5D:C8:DB:82:ED:40:71:36:33
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 0199FD3495F96E13DADB24C2007897C787AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 032F
Signing time: Sun 19 Oct 2025 16:01:45 +0000
Manifest this update: Sun 19 Oct 2025 16:01:45 +0000
Manifest next update: Mon 20 Oct 2025 16:01:45 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: 6V2RQVo35279mX1H832qFtsyUVVpXyh04NW71PZMQp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:95:f9:6e:13:da:db:24:c2:00:78:97:c7:87:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Oct 19 16:01:45 2025 GMT
Not After : Oct 20 16:01:45 2025 GMT
Subject: CN=bb83812a345e8c6ab1106c5dc8db82ed40713633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:de:ac:f5:a9:cf:71:13:4b:18:e8:76:3c:
45:f1:f0:c7:eb:15:c0:d3:58:ed:d3:d2:e5:2a:e3:
3e:2e:4a:74:a0:db:a8:3f:0a:71:22:7d:f4:68:54:
1b:78:83:7e:ce:e9:67:29:42:b3:21:3d:31:fd:1a:
89:81:33:9b:95:6d:84:c4:1d:af:a4:37:7b:9a:1a:
6f:1d:b5:bd:dc:cf:a8:bc:4c:44:8a:ef:0b:aa:9e:
c8:86:18:39:79:18:48:80:74:ee:c4:69:7f:1a:e1:
21:ec:48:5b:84:38:27:26:24:b8:23:95:93:9f:39:
ac:9a:fd:38:4f:fc:dd:a5:3e:fe:14:15:a6:d0:4e:
0e:34:05:80:bb:b9:ea:7e:63:45:df:3f:10:6d:78:
e9:25:ef:b6:df:fd:86:f7:90:9f:da:29:bc:94:40:
b8:75:70:ac:82:85:8f:e8:a7:ff:b3:96:88:fa:93:
bb:3d:1e:fd:9a:32:a8:0e:b3:ef:80:2c:aa:69:68:
23:6d:ca:0e:a0:18:36:a6:8d:00:4f:40:50:a1:69:
bf:65:76:cf:00:f4:04:76:44:dc:40:0d:44:5d:87:
97:1c:df:ff:92:d2:58:6d:ce:cd:70:d5:ec:56:b0:
ab:97:e0:7e:73:0e:7b:bf:a2:d6:7e:02:00:22:54:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:81:2A:34:5E:8C:6A:B1:10:6C:5D:C8:DB:82:ED:40:71:36:33
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:66:36:57:1b:b3:a9:9f:2c:98:f6:bd:17:48:c6:3e:19:77:
bb:a3:c9:3b:24:60:51:5c:9c:19:28:56:28:3b:c4:c5:00:3e:
df:40:26:ec:f0:4b:8f:48:90:01:70:d3:ed:58:ee:19:a5:d2:
01:e4:08:bf:f5:6c:c8:12:87:73:2e:b6:52:d9:c5:3e:52:16:
04:82:8b:ed:13:b1:cf:fa:42:39:5c:8c:68:6c:9c:22:c2:ec:
3c:bf:18:65:2b:a3:58:e3:34:0f:e5:52:f3:9c:8d:89:c4:c7:
80:93:4a:15:68:a5:95:31:bb:31:52:a9:a2:d2:8c:2c:2c:ec:
9f:d0:39:4c:c9:75:21:ee:30:19:51:3e:ac:70:c2:a3:ce:15:
73:a8:dc:e3:12:2b:9e:02:e9:57:35:7a:c2:b6:4e:fb:2d:2e:
85:c4:d6:e0:87:41:0d:b7:d2:03:81:5a:6a:44:54:9e:d4:91:
e0:aa:65:67:e5:81:3b:c6:39:67:ae:44:2f:84:cd:f9:b1:8c:
72:36:50:59:6e:64:35:50:c5:33:c9:3b:b6:9a:3c:fc:d2:f5:
3a:ee:2d:3b:ca:75:dd:eb:81:ed:88:25:cd:13:63:a0:36:d2:
85:e6:a5:36:ce:6e:a4:c8:89:31:94:fa:7a:1e:48:13:81:d1:
41:63:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:49 2025 by rpki-client