Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File: OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier: NEy90YHRVdMK8M6b1WY2AoW/SG+gir0PtWL/WL/co1c=
Subject key identifier: 23:3C:32:7B:1D:BF:94:F3:92:40:B4:2D:94:57:84:7A:DF:07:C3:41
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer: /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial: 019873E328CF8EAB1C6498BC5F2A1E45E862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number: 0935
Signing time: Mon 04 Aug 2025 07:02:03 +0000
Manifest this update: Mon 04 Aug 2025 07:02:03 +0000
Manifest next update: Tue 05 Aug 2025 07:02:03 +0000
Files and hashes: 1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: mucN/hDw1Y1Vu7/rxeJjY8F1nO+IfSe62Goii4THzhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:28:cf:8e:ab:1c:64:98:bc:5f:2a:1e:45:e8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Validity
Not Before: Aug 4 07:02:03 2025 GMT
Not After : Aug 5 07:02:03 2025 GMT
Subject: CN=233c327b1dbf94f39240b42d9457847adf07c341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:e9:58:88:05:f8:d0:e2:1d:42:f9:db:98:
fb:99:56:a6:72:0b:18:cd:bd:fb:79:76:05:56:a2:
99:10:6a:1f:7d:69:1b:60:5f:8c:80:ca:da:aa:d1:
52:65:dc:42:b3:65:87:71:37:8d:2e:43:5d:1c:98:
ca:c6:83:82:89:80:82:04:e4:4a:67:7b:27:0e:48:
a5:ff:04:c2:b6:e7:9b:6d:ec:43:57:68:25:47:06:
3f:a2:78:84:2c:7c:03:2a:c1:19:28:74:71:31:9d:
1e:03:72:3f:6d:dc:4a:a8:1e:e8:21:fb:44:8e:2f:
87:a4:4e:3c:38:96:00:e7:f0:29:30:af:2e:92:fb:
1f:8b:65:0e:91:d5:66:e2:16:cb:98:9b:7a:b9:46:
da:bf:26:7d:e7:fb:bb:eb:95:b5:53:98:f8:8e:4e:
02:9b:34:ce:20:0d:00:34:94:6a:3e:40:05:45:db:
f8:41:37:62:31:2b:c1:e3:86:f9:2d:dd:90:a7:66:
0c:a2:70:71:a8:d7:1a:7f:e7:57:ec:67:41:51:b5:
f5:54:98:57:5d:e2:4f:84:14:0f:0b:90:aa:82:78:
f6:23:a5:ac:40:ab:f9:14:87:82:9e:c4:70:8d:30:
b3:d8:cd:16:6f:16:32:c2:e7:1b:a8:ee:c3:45:c9:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:32:7B:1D:BF:94:F3:92:40:B4:2D:94:57:84:7A:DF:07:C3:41
X509v3 Authority Key Identifier:
keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d1:6d:c6:7b:e5:f1:6d:1f:48:22:17:da:1b:2a:c0:0e:8c:
81:fa:86:d1:1c:5f:64:13:00:18:ca:86:a1:be:7e:99:0b:41:
e7:ea:30:fa:62:33:01:8e:1d:03:a2:4c:05:47:44:35:de:c2:
82:9b:43:be:43:b1:6f:00:4a:65:1e:1e:3a:7b:37:46:34:60:
f2:97:63:e9:49:f8:29:ac:c8:a6:be:bf:5d:ab:ba:8a:e3:ec:
41:1e:ac:bd:85:98:6c:7b:7f:8b:2e:e5:a2:29:1c:e3:6a:1c:
6f:b9:11:d6:66:fc:d8:f6:d7:c1:9b:9e:d5:0a:b6:b4:0f:2e:
57:7a:a5:57:f7:cf:30:be:2c:bf:1e:e4:bd:4a:9c:b1:a1:cc:
dc:0f:9a:5f:16:9d:29:74:17:0f:5a:d9:ed:d3:ad:e5:96:7d:
4f:a6:ca:84:1c:a0:4f:51:3b:46:69:ac:2b:8f:4a:0a:87:02:
df:98:e2:65:a6:e9:95:f3:52:5f:a8:53:a5:35:36:9e:90:3a:
d3:e9:59:bd:5a:19:a1:5b:7d:7c:1a:01:80:b4:af:17:f6:32:
68:9b:70:5e:ba:ae:b5:ab:a8:43:b7:f9:05:62:1f:5b:32:6c:
ac:a7:0c:3c:ca:88:bb:2a:6f:d8:b3:d3:7e:fa:1e:6c:53:29:
5a:ef:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:12 2025 by rpki-client