Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: PSrBDIssVRgHLD0q3aA9hx7ohOTodgTcR/AjAw8Bnd8=
Subject key identifier: 61:0C:68:45:6E:4B:B9:0E:EC:98:47:FD:A3:FB:3C:E2:86:FC:97:23
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 019893DB0BACF689E42C1CA478D13CB6286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 12:01:02 +0000
Manifest this update: Sun 10 Aug 2025 12:01:02 +0000
Manifest next update: Mon 11 Aug 2025 12:01:02 +0000
Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=)
2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: gML9PsqwFYkZJ3oDsJi5Vs4wv2Qv2m/JNmruO7LjanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:0b:ac:f6:89:e4:2c:1c:a4:78:d1:3c:b6:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Aug 10 12:01:02 2025 GMT
Not After : Aug 11 12:01:02 2025 GMT
Subject: CN=610c68456e4bb90eec9847fda3fb3ce286fc9723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:92:d2:c7:16:1d:f2:cc:7a:e6:5c:de:cb:
c6:5e:ff:9b:07:7d:42:48:c0:40:bf:5d:cf:12:bf:
90:4e:ea:13:2e:be:5a:be:d9:75:9c:76:a8:2a:84:
16:0e:bf:6c:c9:18:67:6c:0a:3c:9c:36:e7:a2:45:
ff:f9:c3:0b:84:32:30:f9:76:44:db:c4:96:20:96:
89:3a:bf:7e:e9:1d:78:42:cc:ee:c1:dc:d9:67:4d:
29:57:56:7a:3a:15:31:e3:6d:07:ed:7a:a6:50:b5:
f8:3a:89:a6:65:9d:1d:15:11:70:45:b6:3f:0b:03:
cb:9b:1b:b3:44:7b:e8:b2:9c:54:7a:a5:30:47:e7:
aa:90:72:e3:46:84:de:99:0e:7a:5c:5c:44:b5:20:
51:22:50:33:bf:94:69:95:74:b1:85:ab:85:9c:5e:
e3:ed:c2:a8:c6:43:fe:7e:cf:38:e4:75:03:4e:f3:
6f:61:1d:00:7c:d5:ad:ae:4b:a0:79:e8:a1:3b:12:
cf:aa:4c:33:fa:2b:be:cb:93:9a:c0:88:31:c4:a2:
4f:2c:6b:2f:ec:a5:8f:15:35:f6:d0:66:d4:10:61:
42:b2:5f:91:b3:dd:e1:9f:1d:47:c6:77:5b:1a:a8:
06:d4:69:04:83:d7:40:ab:4d:64:d8:c0:81:87:0d:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0C:68:45:6E:4B:B9:0E:EC:98:47:FD:A3:FB:3C:E2:86:FC:97:23
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2d:41:19:10:e7:74:b5:70:01:cb:48:7e:e8:e4:12:f4:88:
ec:ec:bd:c4:fe:bf:dd:9f:9e:09:ad:02:bb:f7:5e:fb:3d:fa:
53:c4:f5:7a:2f:b4:15:87:88:d5:28:ec:46:4f:2b:d9:47:f6:
e6:5e:61:03:43:a0:06:03:cd:3d:80:57:7b:37:16:67:c3:52:
fc:f9:ec:d8:e7:b5:9e:16:43:31:83:fe:86:38:77:ee:e0:3d:
28:0a:76:4b:d9:13:6e:f6:ee:1f:0b:c2:1a:53:d5:4f:16:d5:
be:d2:a2:74:c2:30:2e:14:1e:5d:84:f8:15:ad:ae:0d:42:7d:
fc:e5:c3:2e:6f:88:77:12:7f:50:08:06:a6:57:3a:f6:1f:e9:
43:15:c7:35:6b:28:df:20:cf:c9:0c:d4:4e:e3:db:02:93:ea:
41:09:95:91:41:33:70:e6:07:84:f9:4a:02:d4:6a:39:59:fc:
d7:e4:33:ec:02:61:06:88:21:64:c7:b6:c3:71:03:ca:c3:5d:
f9:6b:6a:e7:f0:66:a8:00:d0:96:20:39:4a:80:72:6d:39:ab:
73:f6:bf:6b:9f:60:22:8a:d0:3b:f2:1a:17:e4:fc:39:5a:4b:
b3:e9:bd:7e:34:74:85:de:a0:83:4a:92:ff:2d:a2:fa:73:b4:
4d:be:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:55:15 2025 by rpki-client