Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
File: OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft (raw, json)
Hash identifier: Ab2U5+/YeWO7dUXzDP2iIWYYawPlwhjbhpt3VpdSphI=
Subject key identifier: AE:D4:23:04:85:14:E1:35:1B:CA:34:96:34:10:7D:68:9B:43:EF:8F
Authority key identifier: 38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61
Certificate issuer: /CN=38b912a1eab18eb729745e8978138b25c4407761
Certificate serial: 01989147E9A46AB712EDF1135A02C41F449D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
Manifest number: 0D08
Signing time: Sun 10 Aug 2025 00:01:05 +0000
Manifest this update: Sun 10 Aug 2025 00:01:05 +0000
Manifest next update: Mon 11 Aug 2025 00:01:05 +0000
Files and hashes: 1: FVz1Gs3goS-mz1CP7z4LNut0fHE.roa (hash: +EzGyBevLVejen0VLkmFtejit+8sBRd5jz7yFu64Sbw=)
2: OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl (hash: o3T88NwFL8sdUJ/ExSlVR3e5h25gHgJ6fqCRJz6oUck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:e9:a4:6a:b7:12:ed:f1:13:5a:02:c4:1f:44:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b912a1eab18eb729745e8978138b25c4407761
Validity
Not Before: Aug 10 00:01:05 2025 GMT
Not After : Aug 11 00:01:05 2025 GMT
Subject: CN=aed423048514e1351bca349634107d689b43ef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:67:b8:66:09:15:97:38:9d:6f:69:f3:fd:
f3:a5:53:9d:3c:c7:78:86:84:68:65:42:70:43:b8:
af:ca:e5:92:f1:5d:9a:49:d8:f3:c7:6e:f8:e7:4a:
53:03:c7:3b:bc:97:a4:4e:19:18:f2:9c:97:1e:77:
66:89:48:f1:c6:1e:3b:fd:a9:c3:73:73:2a:7e:8a:
95:a0:89:5b:9f:c2:7d:d5:ca:e4:ff:69:9b:c6:18:
40:04:3c:f3:89:1e:44:90:a3:db:c7:2c:de:5d:3f:
0b:e8:86:dc:db:ab:52:a8:08:4e:7e:cd:a2:af:8b:
e9:08:11:99:6b:13:32:34:de:ac:74:7f:b8:76:42:
e5:dd:74:1d:cc:b7:96:a0:1a:35:c6:ae:90:56:0e:
10:4f:0f:08:e0:bc:f5:2d:42:5c:ae:0a:e0:22:b4:
ee:4c:9a:cd:81:97:2a:a5:94:53:c1:e0:2f:43:e4:
7d:d4:74:04:e8:65:98:a9:05:a6:b1:d3:c2:64:28:
93:a9:a3:43:22:91:a1:0f:5a:50:37:b7:84:ba:44:
ba:6a:7a:7a:fd:72:15:f8:2b:91:bd:9c:2f:d0:db:
36:3f:5c:65:16:e1:7a:b6:56:a6:6a:e6:18:e0:05:
1f:19:89:fe:8d:02:ac:d6:90:88:06:60:70:16:af:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:23:04:85:14:E1:35:1B:CA:34:96:34:10:7D:68:9B:43:EF:8F
X509v3 Authority Key Identifier:
keyid:38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:94:6c:ab:66:c2:3d:9a:1f:4d:3c:ff:43:a7:f5:06:48:01:
88:f4:ce:b9:c8:5c:ac:a2:90:cb:25:23:9d:3d:c5:db:3c:48:
d3:ff:33:f7:db:c6:1d:96:98:eb:68:e0:8b:d7:b7:e2:7a:6e:
ac:5f:8f:20:e3:d8:3a:6b:cf:6e:e1:78:18:0d:af:3a:c5:d2:
23:61:38:a4:99:22:9d:be:b0:3d:68:57:21:fa:69:98:0a:45:
68:9f:04:7a:73:ed:10:ed:e6:7d:39:dd:c6:da:46:d8:dd:e2:
52:41:38:dc:9e:33:54:df:b3:ec:8d:8b:ea:5c:cd:4b:41:6d:
77:95:11:c5:c1:02:ec:d5:36:32:f1:3d:63:f7:67:47:0f:57:
3d:e0:89:48:f6:65:a3:17:fd:62:d5:91:8a:ed:a0:56:09:e3:
25:59:55:cf:09:89:27:25:9b:89:ae:f8:ec:c4:0c:f3:69:f8:
27:7e:57:94:84:48:0d:92:63:a9:61:f2:6f:13:7b:07:d6:8c:
70:73:1a:bb:d5:46:bd:f9:0c:a1:e4:3a:fe:05:02:99:0b:4a:
12:8f:0c:6a:d4:af:69:6d:f7:cc:64:e2:6e:59:09:bf:82:f3:
61:06:f4:c4:e2:77:82:33:ad:86:14:cf:53:b3:86:38:41:c2:
b0:1e:e8:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRR+mkarcS7fETWgLEH0SdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjkxMmExZWFiMThlYjcyOTc0NWU4OTc4MTM4YjI1YzQ0
MDc3NjEwHhcNMjUwODEwMDAwMTA1WhcNMjUwODExMDAwMTA1WjAzMTEwLwYDVQQD
EyhhZWQ0MjMwNDg1MTRlMTM1MWJjYTM0OTYzNDEwN2Q2ODliNDNlZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWFnuGYJFZc4nW9p8/3zpVOdPMd4
hoRoZUJwQ7ivyuWS8V2aSdjzx27450pTA8c7vJekThkY8pyXHndmiUjxxh47/anD
c3MqfoqVoIlbn8J91crk/2mbxhhABDzziR5EkKPbxyzeXT8L6Ibc26tSqAhOfs2i
r4vpCBGZaxMyNN6sdH+4dkLl3XQdzLeWoBo1xq6QVg4QTw8I4Lz1LUJcrgrgIrTu
TJrNgZcqpZRTweAvQ+R91HQE6GWYqQWmsdPCZCiTqaNDIpGhD1pQN7eEukS6anp6
/XIV+CuRvZwv0Ns2P1xlFuF6tlamauYY4AUfGYn+jQKs1pCIBmBwFq/TiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7UIwSFFOE1G8o0ljQQfWibQ++PMB8GA1UdIwQY
MBaAFDi5EqHqsY63KXReiXgTiyXEQHdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xrU29lcXhqcmNwZEY2SmVCT0xKY1JBZDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8zZmFlOTYtNGFhZS00NTQ0LWJlZjIt
YzFkNTIxMTY2YmVjLzEvT0xrU29lcXhqcmNwZEY2SmVCT0xKY1JBZDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8zZmFlOTYtNGFhZS00NTQ0LWJlZjItYzFkNTIxMTY2YmVj
LzEvT0xrU29lcXhqcmNwZEY2SmVCT0xKY1JBZDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZRsq2bC
PZofTTz/Q6f1BkgBiPTOuchcrKKQyyUjnT3F2zxI0/8z99vGHZaY62jgi9e34npu
rF+PIOPYOmvPbuF4GA2vOsXSI2E4pJkinb6wPWhXIfppmApFaJ8EenPtEO3mfTnd
xtpG2N3iUkE43J4zVN+z7I2L6lzNS0Ftd5URxcEC7NU2MvE9Y/dnRw9XPeCJSPZl
oxf9YtWRiu2gVgnjJVlVzwmJJyWbia747MQM82n4J35XlIRIDZJjqWHybxN7B9aM
cHMau9VGvfkMoeQ6/gUCmQtKEo8MatSvaW33zGTiblkJv4LzYQb0xOJ3gjOthhTP
U7OGOEHCsB7oNw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:17:25 2025 by rpki-client