Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: 3X57nlAxBS9/llUQiqFUndqX4tfhQEhYNZ5Cs05+xTc=
Subject key identifier: 2A:CA:B3:AA:E7:C8:83:F2:49:E8:DD:F3:F6:71:5B:78:02:B8:C6:CD
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01988DA1A3FB4C8A1F0FB734F3AEA16D1A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 069D
Signing time: Sat 09 Aug 2025 07:00:37 +0000
Manifest this update: Sat 09 Aug 2025 07:00:37 +0000
Manifest next update: Sun 10 Aug 2025 07:00:37 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: THx8dAMQ7j8ro9lX1W7IF9aIptSKOxKFt335DRji3JU=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:a3:fb:4c:8a:1f:0f:b7:34:f3:ae:a1:6d:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Aug 9 07:00:37 2025 GMT
Not After : Aug 10 07:00:37 2025 GMT
Subject: CN=2acab3aae7c883f249e8ddf3f6715b7802b8c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:ee:bd:0f:ce:3e:e2:56:2d:d0:fa:ba:e5:
6d:23:98:6d:ee:6e:bf:46:78:1e:e2:26:92:51:15:
13:d1:54:b9:85:44:ad:e9:f1:e6:31:13:9c:0a:a8:
fc:9b:2b:7c:44:b3:97:42:81:39:b4:e6:da:06:d6:
78:ea:19:14:b8:0f:11:62:ac:46:c4:3c:8a:ab:40:
e0:13:19:e9:bf:f3:e3:88:c1:9d:8d:27:32:68:22:
2b:4d:87:8f:eb:3e:39:a7:18:73:b8:68:c5:1f:5b:
9e:a3:3e:5a:4a:00:c1:c5:dd:ba:e4:9a:e7:8f:1c:
95:6c:f8:e2:a0:2d:f9:ca:4e:24:f8:f2:b1:55:e9:
66:8a:d5:0f:51:a0:de:3a:f8:4e:9e:66:7c:51:1e:
5e:c2:4b:5e:3f:e0:96:45:20:79:d4:ce:3a:ee:89:
c2:9a:cf:f9:25:fa:57:51:ac:01:8b:62:7b:10:0d:
35:db:ab:a9:a7:42:8c:c2:f8:5f:ce:b4:06:73:80:
d2:14:d1:b8:48:a5:1e:97:35:58:8d:0a:64:fc:47:
2e:80:97:e8:02:d5:b3:85:e4:1a:03:1c:72:51:05:
69:b1:06:f0:a2:e0:d4:4d:92:5a:20:8c:56:1c:03:
7e:63:ac:bd:bb:4b:f9:f8:11:6c:71:12:cc:17:ad:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CA:B3:AA:E7:C8:83:F2:49:E8:DD:F3:F6:71:5B:78:02:B8:C6:CD
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5f:db:70:53:86:87:8e:e0:de:be:9a:ed:25:21:72:28:5b:
f9:a3:01:ae:79:58:fe:5d:87:f4:e0:1e:d3:ff:2b:c5:2a:89:
88:b3:5c:26:93:72:78:a8:32:51:d2:eb:b1:96:f1:8f:36:e7:
68:69:8d:56:72:56:1a:92:98:f8:88:a6:c5:d1:31:9e:e5:d2:
58:26:13:8d:36:57:bb:4a:90:87:97:df:1d:bc:44:fc:9f:be:
c4:9d:5c:a9:b0:ef:b4:a3:2b:89:07:e5:67:d0:a6:b9:87:51:
81:6a:f8:2f:3b:b5:0f:f1:dd:e8:0a:5b:3d:fe:d6:f3:68:6e:
0f:ab:ae:42:5f:11:c6:00:00:cb:8d:89:14:75:92:09:29:35:
45:1e:f9:01:1f:f0:7e:7b:9a:a0:77:57:98:aa:69:bf:3e:0a:
5d:8f:2b:85:cf:25:08:ea:a6:68:98:5d:57:6a:1a:9f:0d:85:
a0:d4:cf:50:8a:38:72:c3:1b:78:d2:3b:58:ff:98:e7:d2:de:
70:17:c3:fc:87:32:ff:06:44:f9:8c:9b:68:7a:ef:17:17:8a:
6d:3b:ee:22:87:df:d2:98:40:51:db:97:7f:d7:90:c9:68:02:
6b:76:1f:ac:76:dc:70:1c:f4:96:e7:60:23:d8:2b:fb:97:3e:
20:56:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:31 2025 by rpki-client