Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: 94zMMSfdjho3L+idM/2rS/yn7F40Kt/K/o2HLb64BE4=
Subject key identifier: ED:35:A7:3A:D3:16:B8:AB:DF:F5:EE:77:F9:FE:4D:11:C5:F8:21:36
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 019A51F5994FF11814A87E0CB7FDA3192F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:41 +0000
Manifest this update: Wed 05 Nov 2025 03:00:41 +0000
Manifest next update: Thu 06 Nov 2025 03:00:41 +0000
Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=)
2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: xENCF9m2oWoWmabwhgI02kKN67YD1+KSYcqQGJVe8bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:99:4f:f1:18:14:a8:7e:0c:b7:fd:a3:19:2f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Nov 5 03:00:41 2025 GMT
Not After : Nov 6 03:00:41 2025 GMT
Subject: CN=ed35a73ad316b8abdff5ee77f9fe4d11c5f82136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:d3:c3:c3:24:68:5e:6b:8e:69:37:cd:0b:
27:39:74:9e:6f:20:ba:7c:9c:b3:d2:ac:3b:a9:32:
1a:6d:40:9d:e8:85:17:84:a1:fc:f9:13:75:b0:06:
af:d6:18:6c:db:80:94:2f:36:9b:7e:d9:2d:c2:83:
ec:79:74:6c:3f:56:5f:37:b2:79:a2:96:de:7d:df:
0a:80:6d:e7:fd:9d:0d:3a:3b:cf:27:ff:3c:50:a6:
9e:f9:01:2b:98:71:d4:ec:88:e4:ab:b6:24:2c:ff:
86:31:2e:8f:8c:74:1e:a8:41:e5:01:f8:88:1f:d4:
0b:5b:6f:1f:b3:cc:0d:fd:03:f0:01:5d:dc:6e:f3:
47:aa:ea:61:ab:a1:c6:83:d9:a6:31:9f:18:72:c7:
4d:91:85:48:b7:ee:4f:5f:0b:f8:6f:c3:1f:70:f1:
86:5d:76:a5:72:ad:79:cc:c7:a7:04:c9:10:a4:27:
10:e1:5e:bc:3f:5f:23:4d:d1:f9:51:7d:a5:9a:54:
1e:ef:84:14:8d:a4:4e:27:ac:94:e7:5e:c5:51:6e:
05:4a:3f:fd:87:0e:5b:0a:00:ee:f4:93:75:95:39:
bf:99:04:90:28:00:c2:ad:7b:95:57:f0:7a:8a:2b:
f5:23:f5:f3:66:6d:90:ae:14:a5:f3:92:5a:dd:dd:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:A7:3A:D3:16:B8:AB:DF:F5:EE:77:F9:FE:4D:11:C5:F8:21:36
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4b:ed:73:9a:17:4e:2b:64:d6:ed:67:71:07:bd:40:c2:50:
13:61:12:0e:11:38:a5:e2:e2:6c:1f:68:d8:0c:7b:c2:f3:14:
14:3b:30:77:93:99:ee:4d:16:8f:32:2e:9f:91:09:3a:af:3e:
fb:c1:73:20:24:b0:d0:db:55:86:b5:b2:1f:a1:28:15:32:04:
3b:3b:4d:12:7d:0e:5c:b6:22:f2:c8:38:5e:7f:a5:a9:94:0a:
a3:4e:8b:a9:25:7f:d7:31:cf:0e:c5:90:20:2e:5c:fe:fb:1c:
d6:09:a1:77:97:07:1c:9a:5b:8e:6f:71:bb:3a:91:29:76:ac:
29:56:97:86:4e:c9:14:ba:e2:02:12:7d:4e:90:6f:d2:6e:85:
25:06:39:31:45:35:ac:b7:86:43:ab:24:df:47:0f:fc:91:f9:
33:9c:08:c7:f0:f7:63:9a:e2:3d:d3:6c:a8:06:6b:8a:3d:96:
d2:16:c6:fe:9b:a9:cb:0b:88:2c:30:13:a3:04:90:1b:12:97:
d2:9d:77:71:b7:af:5b:c2:74:4f:da:59:3a:e9:aa:e8:14:96:
83:dc:bc:47:79:8b:56:f9:7f:d0:b9:77:8c:ff:74:c5:35:3e:
ca:e0:bc:1f:45:8d:5d:e5:1e:e1:90:1d:5f:52:85:3f:f9:49:
8e:d4:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:51:57 2025 by rpki-client