Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: aChn7z1te383XmdPG2VzZ3abBagEDAXweVVPkmFRT8M=
Subject key identifier: 9B:7F:85:64:3E:E1:EA:DC:3F:7B:20:9D:8E:C4:7D:54:1B:7E:48:8C
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019897EE817DABAFFCE2DA245917C27F3779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0276
Signing time: Mon 11 Aug 2025 07:00:46 +0000
Manifest this update: Mon 11 Aug 2025 07:00:46 +0000
Manifest next update: Tue 12 Aug 2025 07:00:46 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: q+MxxGXisvFh1xVVI6X7UBEJtdJrZMX1IfaqFYt0a9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:81:7d:ab:af:fc:e2:da:24:59:17:c2:7f:37:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Aug 11 07:00:46 2025 GMT
Not After : Aug 12 07:00:46 2025 GMT
Subject: CN=9b7f85643ee1eadc3f7b209d8ec47d541b7e488c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:7d:42:59:c1:85:86:0c:5e:13:d1:6a:52:
b7:d8:7a:30:14:b8:73:56:0c:7e:76:f6:78:81:c5:
34:06:9b:78:3f:e9:b3:1a:68:27:4e:20:8d:8e:59:
4e:41:ae:d4:28:f1:03:9e:13:82:bf:07:e1:78:e9:
f9:bc:11:77:40:bf:be:a3:03:13:58:a3:f8:b2:f5:
20:bf:d0:df:3a:fd:04:39:34:a6:51:1a:f3:d2:5d:
ff:f5:c4:d4:de:1c:4c:a2:ea:c3:12:88:63:90:44:
39:ec:49:71:ec:50:cc:3c:6d:f6:87:d0:a3:fd:2d:
07:c4:0b:57:53:73:e8:45:ff:dd:40:3b:8b:5c:76:
c0:a3:32:ea:2d:53:09:56:41:0d:31:1e:fa:a1:e5:
72:9f:e8:03:32:6f:65:38:1c:b9:9f:39:48:89:92:
3b:f6:4f:ce:c0:d6:b4:fc:53:e3:cf:fe:95:ef:7d:
5f:f1:9d:ee:fc:94:a5:10:a5:73:d7:6d:c9:d7:96:
1d:4b:99:b8:66:e2:a1:5c:8f:a6:3f:a8:a3:0c:75:
25:e6:74:b0:b3:de:5f:65:f5:bb:b4:25:64:59:b4:
30:6d:09:f4:dd:5d:1a:b5:33:d2:70:71:19:4a:03:
52:fa:ed:af:3a:cc:51:88:a0:b2:91:e7:f7:64:4d:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:85:64:3E:E1:EA:DC:3F:7B:20:9D:8E:C4:7D:54:1B:7E:48:8C
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:1e:35:68:54:be:fb:0e:cd:23:9a:a9:b2:a6:7e:18:0e:
9d:58:78:29:df:9a:e0:e2:d4:66:9c:79:99:d0:9f:d8:42:a8:
fd:24:2a:23:5c:16:b1:ac:b4:fc:77:5e:f6:49:2c:2a:fd:90:
35:2b:7c:ea:bc:1f:58:e2:1a:66:51:42:72:1a:02:80:f0:ad:
91:ac:1d:f5:e8:81:08:22:6f:71:12:b5:f8:e3:8d:ea:9b:b1:
ac:9a:9f:b8:ed:ef:b3:d9:83:aa:de:04:f9:16:13:fd:e3:d8:
34:ca:f0:49:c7:f0:1f:e4:c8:a1:b4:f3:13:c2:da:2c:ef:a7:
5d:9b:5e:92:c7:6b:66:99:10:ea:89:eb:17:12:81:f5:a0:df:
7b:bd:93:10:f1:2f:3c:f0:e0:fa:00:9b:aa:d6:a7:0c:23:f1:
29:ee:88:d8:99:4a:df:a3:2a:cc:0d:9a:42:12:06:cf:71:4c:
27:7c:7b:a6:53:a2:3b:7c:86:f9:23:ec:80:f7:39:4b:cb:ea:
47:e9:df:0b:60:e6:d9:0d:75:e9:db:22:5f:e6:6e:63:70:38:
03:8d:a5:14:7d:86:32:1d:fc:77:2f:48:c0:b6:6f:3e:48:3e:
45:b5:74:fe:20:91:0a:6d:65:38:51:80:2d:15:62:3e:b5:38:
8a:1b:21:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiX7oF9q6/84tokWRfCfzd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YmM3OTRjNWZiYWFjNjMyYTdmZmI0M2RiMTRmNzM5Y2Q1
M2IyYzQwHhcNMjUwODExMDcwMDQ2WhcNMjUwODEyMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg5YjdmODU2NDNlZTFlYWRjM2Y3YjIwOWQ4ZWM0N2Q1NDFiN2U0ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hd9QlnBhYYMXhPRalK32HowFLhz
Vgx+dvZ4gcU0Bpt4P+mzGmgnTiCNjllOQa7UKPEDnhOCvwfheOn5vBF3QL++owMT
WKP4svUgv9DfOv0EOTSmURrz0l3/9cTU3hxMourDEohjkEQ57Elx7FDMPG32h9Cj
/S0HxAtXU3PoRf/dQDuLXHbAozLqLVMJVkENMR76oeVyn+gDMm9lOBy5nzlIiZI7
9k/OwNa0/FPjz/6V731f8Z3u/JSlEKVz123J15YdS5m4ZuKhXI+mP6ijDHUl5nSw
s95fZfW7tCVkWbQwbQn03V0atTPScHEZSgNS+u2vOsxRiKCykef3ZE36bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt/hWQ+4ercP3sgnY7EfVQbfkiMMB8GA1UdIwQY
MBaAFDi8eUxfuqxjKn/7Q9sU9znNU7LEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYt
ZDk4NTM5NGUzYzEwLzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYtZDk4NTM5NGUzYzEw
LzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPY0eNWhU
vvsOzSOaqbKmfhgOnVh4Kd+a4OLUZpx5mdCf2EKo/SQqI1wWsay0/Hde9kksKv2Q
NSt86rwfWOIaZlFCchoCgPCtkawd9eiBCCJvcRK1+OON6puxrJqfuO3vs9mDqt4E
+RYT/ePYNMrwScfwH+TIobTzE8LaLO+nXZteksdrZpkQ6onrFxKB9aDfe72TEPEv
PPDg+gCbqtanDCPxKe6I2JlK36MqzA2aQhIGz3FMJ3x7plOiO3yG+SPsgPc5S8vq
R+nfC2Dm2Q116dsiX+ZuY3A4A42lFH2GMh38dy9IwLZvPkg+RbV0/iCRCm1lOFGA
LRViPrU4ihshYw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:57:04 2025 by rpki-client