Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: gw27qRVmwGqR43IbOIo4QwurVxIcjHlmYiBOPCEZSM4=
Subject key identifier: 46:FD:50:7B:AD:64:86:1B:EC:98:40:17:5D:31:C4:D6:92:1B:05:3E
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 019A53ACE4C07A3A9A4D6C41732C0115A242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 11:00:30 +0000
Manifest this update: Wed 05 Nov 2025 11:00:30 +0000
Manifest next update: Thu 06 Nov 2025 11:00:30 +0000
Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: eOMqmjvwkrWVffCOCtPT3OUtDNy/9z7MO1BaxfzCOHU=)
2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:e4:c0:7a:3a:9a:4d:6c:41:73:2c:01:15:a2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Nov 5 11:00:30 2025 GMT
Not After : Nov 6 11:00:30 2025 GMT
Subject: CN=46fd507bad64861bec9840175d31c4d6921b053e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:92:f3:37:4a:09:71:79:08:18:3a:62:51:
ac:86:fc:38:d2:c2:82:3c:e1:26:40:4a:85:0a:b4:
cd:63:c4:5d:8e:e6:ac:1d:88:28:87:fe:ec:c1:ae:
63:37:6d:ed:85:c0:c3:0c:8b:91:68:d1:90:df:08:
41:22:da:52:75:86:9e:76:3a:b8:32:6f:b9:8d:b6:
bc:33:15:ad:c9:92:68:aa:69:9e:27:4f:2e:b3:9b:
e6:bb:29:e8:f0:83:6a:4a:b1:7f:ce:30:f4:cd:b5:
c1:8b:fd:23:d6:4a:93:1e:5e:2f:82:7b:a4:6d:3a:
9c:73:9b:87:4d:08:a2:01:62:0c:17:04:10:95:a8:
e0:d1:55:1d:e0:8d:58:94:48:fa:72:70:77:56:66:
1a:54:55:c5:e7:6a:82:e4:57:65:9d:43:15:aa:3e:
a4:a6:56:55:6a:4d:eb:d8:fa:8d:fe:8e:15:f3:cb:
f5:68:ec:80:9c:1d:bd:a7:42:ee:1b:dd:fc:bd:90:
64:25:ba:fc:b3:59:9c:74:dc:4f:53:b4:54:69:71:
77:fc:d5:29:6b:82:a2:aa:96:71:49:d9:18:30:35:
90:00:ee:25:33:76:e2:4b:5b:04:09:96:79:ec:5e:
f0:9e:af:27:62:91:19:e3:7a:0d:7f:6d:4b:33:46:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FD:50:7B:AD:64:86:1B:EC:98:40:17:5D:31:C4:D6:92:1B:05:3E
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ca:a8:80:74:12:2c:ba:89:5a:ab:b2:9c:fd:2c:f2:f4:d8:
3a:72:c5:bd:ca:f8:57:8c:8e:3b:c7:b2:9a:f4:95:a0:66:3e:
1d:99:04:d5:a6:c4:f6:1e:e0:6c:a4:ee:e7:f5:d9:41:74:4d:
72:ce:85:a2:6c:87:42:4c:0b:45:04:a5:34:96:39:ec:84:5b:
e8:14:fb:f3:c4:7d:39:d7:46:37:67:66:56:5f:ec:79:d2:d2:
2b:1a:58:32:8f:12:26:53:9b:19:f0:5a:72:a7:c4:4c:41:05:
8c:f5:d8:df:b0:46:0c:25:bd:5f:7c:db:43:50:f7:29:36:07:
e5:53:95:a4:f5:b3:4b:26:51:5a:2a:9c:68:51:4b:3b:a2:73:
b9:a6:92:ce:43:e6:fc:39:cc:95:4b:74:ce:55:84:d4:8a:db:
5c:9f:29:2c:45:e9:20:a3:1d:4e:e8:06:18:b8:8c:12:ce:9d:
05:fd:be:e1:a7:b7:ff:6e:bb:d3:6a:f1:08:95:93:78:5a:7a:
bb:eb:d5:49:0e:ae:d4:5d:0f:63:f4:74:70:5b:55:7d:4e:94:
3a:06:64:da:9d:d7:7b:c8:e2:fd:52:36:f2:19:08:7e:93:4a:
f1:76:93:5e:5c:3d:77:9f:b0:a1:45:cb:c6:af:39:03:7e:1b:
23:a7:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:05:52 2025 by rpki-client