Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: Dj6hfdwrQ4fslgZJ73IaQAhf0lvhPCPp/H80w3z3Kkw=
Subject key identifier: 97:09:58:A8:04:BA:B9:21:F4:1D:4F:7B:8C:D7:24:83:2F:D3:23:80
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 01987CAE6FFE8343C3B9857A5F1628DB7F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 02B4
Signing time: Wed 06 Aug 2025 00:01:03 +0000
Manifest this update: Wed 06 Aug 2025 00:01:03 +0000
Manifest next update: Thu 07 Aug 2025 00:01:03 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: g/wFdRcNyXS2ncp9PaVvjo2U6x0ILtr5sGl73Us/Jqg=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:6f:fe:83:43:c3:b9:85:7a:5f:16:28:db:7f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Aug 6 00:01:03 2025 GMT
Not After : Aug 7 00:01:03 2025 GMT
Subject: CN=970958a804bab921f41d4f7b8cd724832fd32380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:9c:2f:22:c2:f0:cd:91:a4:04:b3:47:7f:
99:55:71:94:5e:34:a0:66:8a:13:22:07:5e:e4:b0:
13:0a:b2:0d:0c:e7:00:d1:98:2a:68:da:df:6f:e9:
a2:e8:4b:3d:cc:86:0b:07:3f:6e:89:c8:95:b1:02:
b3:e7:26:a2:0d:7c:68:c1:61:45:89:4c:d7:31:f0:
c4:43:16:4e:a2:03:11:e8:c5:02:b1:66:e7:f7:9a:
4b:5e:fd:65:63:83:41:5f:ec:02:32:b0:84:17:d3:
29:20:ea:a2:3a:35:6c:08:79:44:a1:a7:46:23:be:
60:8c:73:0c:ec:f1:c4:4a:07:5d:23:7d:b8:61:f2:
60:44:5f:01:4a:2e:de:08:2d:8a:61:29:ac:67:2b:
7c:8f:25:b5:be:a8:f3:cb:d6:75:66:b4:85:bf:51:
ff:54:bf:ae:02:65:8b:bb:19:72:cf:fe:dc:16:20:
a8:97:25:8e:55:d7:1c:e2:4d:27:c1:32:39:aa:2e:
ed:93:a5:19:8e:0e:62:3f:06:10:76:57:7b:1e:95:
54:5a:cd:c1:57:72:44:bd:08:85:f0:fa:81:33:75:
21:e2:86:44:35:8b:54:cf:c6:b6:36:52:bf:8e:6d:
2b:f1:f0:17:13:fd:ae:24:39:7c:20:e8:f2:c2:e1:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:58:A8:04:BA:B9:21:F4:1D:4F:7B:8C:D7:24:83:2F:D3:23:80
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ab:dc:19:06:98:7c:6c:20:ed:13:13:ab:63:e7:29:91:65:
91:86:e5:e8:14:86:90:66:bf:e1:b1:8a:e0:ef:45:a3:09:1e:
20:f7:1c:d1:23:c7:6e:74:cb:05:71:d6:10:d2:d6:56:1f:fc:
a6:cd:de:6a:d4:80:25:94:fc:f1:05:08:8f:02:0e:aa:c4:37:
2e:00:f1:c3:3c:9a:b9:57:57:79:92:16:d4:2e:01:e5:74:66:
cb:20:3e:57:63:f6:96:4a:09:f8:78:72:80:dc:eb:f8:ce:b9:
d3:97:24:83:64:23:5d:70:9e:28:97:88:bf:ca:8e:28:3b:49:
dc:32:6e:fa:5f:28:f5:0f:ec:9b:0c:c2:7a:c5:ae:fe:c4:04:
8b:0e:c7:ca:3e:39:fc:62:e3:ac:ad:b4:97:45:5f:da:9e:ed:
25:eb:4f:8d:70:0f:90:b5:44:54:34:d8:37:ed:32:bd:b9:ff:
5b:b9:37:7a:93:e7:87:e7:ce:1e:28:97:f9:e6:e8:52:05:a3:
93:a5:96:f9:61:44:05:6b:9e:a2:99:72:4e:c4:ae:1e:27:f7:
5d:7f:22:ed:f0:0a:3b:96:4f:49:64:42:6e:23:b0:ab:4d:b2:
cc:ac:8a:c8:e9:99:31:2a:7f:39:97:15:7b:f1:a8:7a:24:99:
ac:2b:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:38 2025 by rpki-client