Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File: Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier: 4x0wVxdQ/jTdGKmXetD7EFFR2V+ibLpvRaTc7A6aLD4=
Subject key identifier: B1:7D:24:12:69:4B:89:9A:AB:1A:08:DD:7B:80:C0:15:17:94:CA:AF
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01987E65A4539399F20599D560162ED404C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number: 10DA
Signing time: Wed 06 Aug 2025 08:00:46 +0000
Manifest this update: Wed 06 Aug 2025 08:00:46 +0000
Manifest next update: Thu 07 Aug 2025 08:00:46 +0000
Files and hashes: 1: 5-ifbkzxAVenbOTh7xnTmSmBRII.roa (hash: FOnnytfJcY5VsaO7IU74ZEnL9Ku9T/H6aGG9jNy1XD4=)
2: 8EgilQwuaLeesY5D4MXR98cjsk4.roa (hash: W7fEZRR9vQWc1wZaS6T1JTfiycKOFxnx4jwhxIG0rbQ=)
3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: ApVSE6KckfCKyyXgJpM7pisIxb4ePsZXpBCKA9RmHY4=)
4: g_mDeeMiBsxAO1aMYobd6COqAyg.roa (hash: C6OmPgZYFNJO1UnyGDjiycVke0+x3UvPSJ7l7B/PjDY=)
5: sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa (hash: Xn9RqjO0Bl5wwfZuCHIFFFBi1M7CLKKfAFqVPviV4cI=)
6: x_EubJIedCZLAcQtdIa25nYyDrk.roa (hash: PgJOT+273yMa8SLFUPwyR3K64DEc4yPVquyOKHNI560=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:a4:53:93:99:f2:05:99:d5:60:16:2e:d4:04:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Aug 6 08:00:46 2025 GMT
Not After : Aug 7 08:00:46 2025 GMT
Subject: CN=b17d2412694b899aab1a08dd7b80c0151794caaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:fd:bf:c5:84:34:07:38:fd:b4:d4:64:54:
78:bf:48:6c:14:96:69:a7:cb:c4:50:a1:da:51:e2:
61:27:10:57:83:02:f4:5c:80:f1:f9:89:37:37:d4:
fd:6a:50:94:57:6d:19:d9:e6:df:29:79:ad:c3:7b:
d9:7b:f4:e9:f8:61:dc:d7:55:23:63:09:e3:42:31:
b1:3e:95:2a:6f:5b:e5:4e:f4:98:6d:6e:db:6f:1c:
56:6f:37:22:93:68:e6:66:ec:ee:8d:88:8c:55:08:
e7:5a:25:6a:54:b5:46:b6:30:aa:2a:1c:1f:0a:31:
c2:20:81:97:3b:06:54:9b:fd:8b:17:16:88:9f:7f:
58:d8:a8:64:31:04:fc:73:4d:9f:25:8b:bc:38:d5:
2a:58:5f:87:f0:49:7e:3d:a3:99:21:e3:f5:36:b1:
a2:fd:74:e5:de:85:31:09:20:f2:50:07:cd:df:2c:
d0:38:50:51:04:75:5c:34:e2:90:4d:0e:58:31:cf:
e8:8b:70:57:fb:97:bd:2e:4e:11:c8:b4:26:8c:3f:
e2:0b:9e:61:60:51:da:4d:db:aa:a9:1f:01:3e:ce:
73:5e:06:de:df:65:9e:a9:70:36:b5:70:63:8c:0b:
b7:43:0d:8b:3a:d7:59:8e:c6:87:28:2b:29:bf:54:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:24:12:69:4B:89:9A:AB:1A:08:DD:7B:80:C0:15:17:94:CA:AF
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:18:a7:51:14:2f:2b:ee:df:05:c9:5a:13:11:6c:3d:72:75:
40:bf:86:bb:3a:55:ba:26:41:56:39:66:ef:a8:21:72:14:2d:
31:05:15:eb:1f:d0:d8:8a:7d:0d:39:3d:24:bb:b4:4a:1f:2e:
9a:66:10:72:c3:76:96:4c:47:98:29:02:98:71:2e:b3:8e:40:
de:93:2f:84:de:ea:19:80:13:ab:4a:f2:f0:02:eb:0b:60:0d:
de:f0:22:0b:cd:af:55:31:43:b1:3c:21:32:60:ce:47:e5:c9:
46:05:10:d1:0c:31:f6:db:3f:fe:23:a0:78:6f:37:6e:c1:22:
6b:86:f3:e1:bd:fc:be:18:b2:88:a6:2d:36:b8:bb:70:51:30:
67:71:e7:f7:7f:79:3f:af:51:e4:fd:8b:e7:80:62:21:2f:16:
35:3c:6c:7b:67:ad:a8:29:b0:39:03:db:ef:1b:bc:cf:52:ee:
76:0c:a6:f8:b3:fb:bb:77:08:8c:b9:a1:e5:1c:e5:c2:10:59:
d6:bc:52:e5:88:a2:c7:45:74:32:ef:ea:89:21:95:a0:89:9c:
04:94:2b:1e:86:05:58:2b:d1:e0:8f:ab:88:43:ba:3c:f2:b8:
6a:a1:50:6c:d1:ee:f3:6d:6d:78:b5:06:bd:cd:1e:fe:2e:d1:
2f:8f:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:21:53 2025 by rpki-client