Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: 2krnWt+sf64WOGqRHgoYyswld+0uLB494InXJ6Py9G0=
Subject key identifier: E1:FC:82:1B:E7:FC:80:99:05:28:C4:9C:EF:23:9D:CD:FC:01:CD:0F
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 019769616D077580FC4D0DFA224EDFC73FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:01:21 +0000
Manifest this update: Fri 13 Jun 2025 13:01:21 +0000
Manifest next update: Sat 14 Jun 2025 13:01:21 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: 3FhMeEjjXshrhvZGHDH+bT7QSf6LQ/RGisQcsh4L3Q4=)
2: qGclPxhfh32KtuLneyqN4qho8W0.roa (hash: Hhh+blGm68/K3Y0iK4idov3LXxMurIpuJKDKpXuGS98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:6d:07:75:80:fc:4d:0d:fa:22:4e:df:c7:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Jun 13 13:01:21 2025 GMT
Not After : Jun 14 13:01:21 2025 GMT
Subject: CN=e1fc821be7fc80990528c49cef239dcdfc01cd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:9f:af:e1:70:58:2c:a2:5c:a1:bf:bf:34:
82:8d:8c:1e:b4:1e:8f:87:ab:7a:38:16:ce:27:53:
86:c2:cf:4a:a5:df:b8:e6:1b:22:a0:8e:a7:1b:c7:
20:67:ff:04:6d:e2:55:0f:45:11:61:14:e6:3a:02:
76:c1:1a:06:9b:bb:47:d4:e6:52:bd:6c:3e:75:39:
34:85:b4:57:aa:b9:9f:9a:b6:4f:52:90:61:27:27:
b9:08:7e:ac:ee:05:f4:77:d6:ac:d3:8a:6f:6c:e4:
aa:5f:fb:8c:63:70:45:60:52:85:90:48:8f:59:fd:
f5:97:7d:2a:78:b9:b7:e2:bb:92:61:81:9b:fc:fd:
8b:db:64:75:85:17:ff:a8:f2:7d:d9:3d:7a:b5:6b:
fa:e6:17:8d:21:47:a7:97:90:0b:07:73:e9:fb:9a:
77:17:c7:8e:83:ba:c3:12:c2:67:13:dc:be:4f:b1:
f2:ba:2a:a7:7b:6a:43:a6:e8:00:15:0c:d6:61:72:
d6:94:ff:42:d7:c2:3d:af:b1:e1:ec:5f:b3:a8:a9:
6d:66:f9:9d:50:e7:15:72:fb:5f:31:f8:93:b8:4d:
26:dd:5a:35:a5:47:3b:0e:38:af:a0:70:d0:57:53:
95:bd:f3:c7:ef:d3:01:66:00:ef:c0:b0:42:19:e8:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:82:1B:E7:FC:80:99:05:28:C4:9C:EF:23:9D:CD:FC:01:CD:0F
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bc:16:d0:30:a0:7d:ee:9b:b0:8d:5a:4c:17:80:e3:a8:f7:
f9:be:c5:ed:d8:eb:d5:5f:b7:39:a1:60:3a:9e:b0:90:20:be:
6d:40:db:15:b3:11:74:ed:7e:e2:e4:d0:bf:27:dd:4f:46:ea:
ba:e2:e4:f8:33:81:ee:f9:f5:5d:23:e0:c6:72:99:06:de:6b:
d8:35:98:62:a0:7b:20:3d:30:86:00:73:5e:68:c5:f4:24:30:
92:75:a2:29:34:1f:e4:b0:d0:c3:2e:f8:af:4d:b9:fe:a6:ff:
fb:43:f9:d6:e9:99:af:69:6a:96:60:97:39:77:c9:f0:75:41:
60:84:ea:e1:24:94:b9:e2:78:53:e6:fa:9b:79:56:32:20:6c:
dd:9a:a6:1b:9b:2c:a1:9b:92:19:d1:8a:53:7a:9c:42:3d:aa:
fb:a2:27:74:03:64:d4:b3:6c:7d:5a:73:19:4b:86:10:d3:e3:
91:73:ab:51:ff:be:a2:d0:72:58:fd:60:a3:3d:22:38:f0:36:
55:fb:d8:5c:37:40:4a:66:9a:8c:e9:98:da:4a:09:10:e5:43:
d8:23:d7:be:32:f8:1f:92:ad:5d:4a:d4:92:45:6b:2b:bf:60:
26:25:d6:cd:8e:17:5a:51:5c:f0:73:d6:b4:4d:e2:fd:98:46:
cb:dc:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:00:57 2025 by rpki-client