Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: 9g/ZQ9g1eFRg5Hsgwl0akzK6nAYx8HEysJsva76rxHc=
Subject key identifier: 75:2C:DB:83:8D:9D:76:E9:ED:E5:2C:58:9E:22:98:08:9C:0D:09:62
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 01987418AED30597C5FDDE90D7B3E65710D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0487
Signing time: Mon 04 Aug 2025 08:00:31 +0000
Manifest this update: Mon 04 Aug 2025 08:00:31 +0000
Manifest next update: Tue 05 Aug 2025 08:00:31 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: DAaSPYxWOsTJ4aAiqsz9LaYJs6DW6bP6d4HOtax4Xko=)
2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ae:d3:05:97:c5:fd:de:90:d7:b3:e6:57:10:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Aug 4 08:00:31 2025 GMT
Not After : Aug 5 08:00:31 2025 GMT
Subject: CN=752cdb838d9d76e9ede52c589e2298089c0d0962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:da:bc:94:e1:f9:fa:f8:8c:be:c1:70:6b:
c8:81:0f:cd:66:3b:64:c8:ff:ed:50:24:5d:26:8f:
3b:95:c3:9c:4c:af:dc:fe:8e:4a:a6:c3:32:8a:3e:
fd:7c:44:0f:fb:4c:78:ce:cc:c5:39:fa:2c:d4:7c:
b1:03:7e:65:9e:02:ca:a8:12:35:43:d2:90:41:05:
5f:bf:5c:c7:95:58:7e:5f:9b:fd:65:88:0f:0d:36:
53:84:fb:23:1a:51:c2:16:6b:00:76:5a:e2:69:a5:
0d:1e:8e:ac:18:92:05:b1:2c:6b:7b:d1:6e:86:87:
78:2d:62:5d:10:bc:dc:5f:ad:0d:7f:de:be:6d:87:
0c:5f:de:aa:f8:c6:c6:9a:e3:35:4f:8f:db:90:c3:
cc:ca:71:95:6d:a4:74:00:ea:2e:89:83:11:df:16:
17:70:40:80:cc:95:c6:2c:1c:0c:c9:e9:fa:b2:f0:
e1:fd:25:97:d5:7b:e1:fd:17:af:c8:3c:47:e9:63:
b7:a8:f0:37:48:22:a9:b6:48:dc:88:9b:85:cf:44:
74:5e:85:db:49:83:92:7e:69:54:7a:6a:ce:11:f0:
74:49:ba:b6:1c:a6:b5:42:b9:fd:ad:91:bf:c8:4c:
f9:b9:97:26:eb:95:f7:c5:a8:01:ca:f7:76:0e:ba:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2C:DB:83:8D:9D:76:E9:ED:E5:2C:58:9E:22:98:08:9C:0D:09:62
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:da:85:39:f2:2b:d4:ec:8a:cc:a4:80:05:4d:77:49:3d:ee:
df:c6:54:ae:48:f5:55:24:02:70:e4:c2:4c:c5:31:a0:f8:d9:
77:d7:97:20:ac:a9:94:d2:23:56:7d:07:5b:ee:6d:d8:d5:d2:
be:87:94:2b:6f:4f:7a:b6:40:f1:ae:f7:d6:97:e5:c5:bb:fa:
2b:d6:74:b7:a4:97:d6:3a:3c:02:cf:9f:df:ac:e3:bf:c4:bf:
5a:1b:f7:15:bf:0a:e6:45:bf:ef:8a:42:18:0b:d8:23:30:ad:
48:7c:8c:78:09:d2:00:f7:48:a5:4a:17:0c:df:e7:6d:49:93:
8b:60:dc:c5:d9:64:5b:fb:69:1c:a3:43:c8:c5:1a:1d:60:3e:
58:f5:bb:c8:fd:96:4f:2c:23:06:5d:9d:74:17:d1:4a:f6:49:
a9:07:e6:d3:9b:61:8d:b2:48:e2:ac:9a:e9:a2:09:fc:83:87:
30:3f:f3:66:bb:bc:8b:30:4e:a5:9e:2d:9b:14:ec:33:f7:f3:
64:58:06:fa:7b:95:1e:a9:05:f6:0d:a9:68:d1:f3:9b:d4:87:
cd:f5:41:45:0f:93:b4:b5:d4:b1:0a:7b:93:68:32:02:92:a9:
d5:d8:e3:da:5d:5d:d7:6f:32:07:63:42:70:37:09:ee:70:c2:
7b:ad:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:11 2025 by rpki-client