Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: NOdR5dlx6TcqjakJvvdXMh474TXKmy3ER7VF6BJG0rs=
Subject key identifier: B9:B6:D9:BE:FA:C9:49:9D:8F:87:55:34:7C:61:0B:D3:8B:A6:FC:1A
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019783C55A985CA80B45690CA02254387F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 01E7
Signing time: Wed 18 Jun 2025 16:00:38 +0000
Manifest this update: Wed 18 Jun 2025 16:00:38 +0000
Manifest next update: Thu 19 Jun 2025 16:00:38 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: vXAyoHJTi6rI2G4qqLhoE36y3H5KGwupu3nuPp6+Mbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c5:5a:98:5c:a8:0b:45:69:0c:a0:22:54:38:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Jun 18 16:00:38 2025 GMT
Not After : Jun 19 16:00:38 2025 GMT
Subject: CN=b9b6d9befac9499d8f8755347c610bd38ba6fc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:df:8e:3f:bf:ef:e3:5b:27:e5:2f:6f:dc:
f3:5e:f1:8f:7e:68:9e:7d:d1:22:23:4c:e5:dc:9a:
93:d4:16:22:59:c8:28:32:93:4e:69:b8:ea:64:35:
7e:84:59:21:ce:db:e0:59:b6:15:1d:de:92:4e:a3:
f9:eb:39:c2:ef:cd:75:db:14:9d:7d:ef:24:a6:e6:
af:28:24:50:0c:f9:dd:26:c8:23:6b:50:3b:9f:50:
0e:02:89:6f:d8:00:76:d3:a8:bc:d1:16:5e:a5:05:
95:31:d8:e0:a0:d7:40:5e:2f:18:9a:85:a3:8a:6d:
bd:7b:cf:c7:8f:16:88:ce:b7:4c:6c:4b:e8:85:53:
23:33:1e:9f:67:13:fd:f0:7b:09:63:2d:6d:88:a3:
33:cb:cb:7f:da:5f:59:9d:2a:42:9b:19:7f:2d:b9:
b4:18:79:e9:25:de:45:53:ff:0a:e6:5e:1a:04:d8:
bf:80:5d:84:81:26:aa:4f:79:7b:81:fd:4b:13:f5:
62:c3:de:82:1f:b9:13:03:fc:45:1c:7a:51:db:2e:
6e:56:b9:9f:05:62:a2:b5:97:b9:84:be:d9:0f:ef:
98:fc:8c:6e:61:69:79:3f:a8:20:3d:5a:c7:5f:e0:
83:d7:dc:4d:ac:36:77:e7:a1:2a:5e:8a:4d:6c:c7:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:D9:BE:FA:C9:49:9D:8F:87:55:34:7C:61:0B:D3:8B:A6:FC:1A
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8d:e7:b1:4c:22:8a:81:54:9d:45:a5:13:ed:eb:43:b7:96:
55:36:4a:60:d1:b0:b0:d7:f6:bb:32:4f:4b:9b:48:d9:8d:28:
2d:2b:49:06:0c:7a:ae:db:fa:15:b3:df:10:93:5d:3c:2f:68:
48:65:47:4e:7b:6b:f1:34:4c:af:a1:8a:b3:55:b0:aa:fa:70:
77:6f:21:dd:c3:a9:10:b7:d4:50:a9:4c:8f:13:8b:98:0a:32:
3b:43:50:b0:cb:9d:5f:aa:0b:47:0a:c2:85:a6:ac:01:91:b9:
94:4c:f2:5b:a9:b7:1a:b1:83:95:1b:8c:f7:b3:e9:12:71:39:
2d:01:cf:70:f9:a6:a1:1f:cb:be:d7:b9:c3:f1:c7:40:9c:b1:
c6:4f:42:43:db:f0:e4:74:81:9e:6b:e4:6f:ba:6d:0b:e9:88:
32:e0:ff:e3:1f:3c:25:6b:67:5c:44:29:a1:e7:11:27:ff:fb:
34:c4:78:8c:4b:5c:a3:97:f7:ab:a8:30:5f:fd:bd:8d:76:cb:
d7:e0:93:46:db:d3:c0:fb:82:08:65:01:9c:78:bc:55:27:84:
ef:6f:e1:66:57:6c:f5:8f:87:f0:ab:5c:fb:03:ea:59:83:f6:
4c:e6:d9:86:34:54:f3:9b:f4:83:68:b0:5f:7a:64:47:3c:0f:
88:56:98:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDxVqYXKgLRWkMoCJUOH+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YmM3OTRjNWZiYWFjNjMyYTdmZmI0M2RiMTRmNzM5Y2Q1
M2IyYzQwHhcNMjUwNjE4MTYwMDM4WhcNMjUwNjE5MTYwMDM4WjAzMTEwLwYDVQQD
EyhiOWI2ZDliZWZhYzk0OTlkOGY4NzU1MzQ3YzYxMGJkMzhiYTZmYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXrfjj+/7+NbJ+Uvb9zzXvGPfmie
fdEiI0zl3JqT1BYiWcgoMpNOabjqZDV+hFkhztvgWbYVHd6STqP56znC78112xSd
fe8kpuavKCRQDPndJsgja1A7n1AOAolv2AB206i80RZepQWVMdjgoNdAXi8YmoWj
im29e8/HjxaIzrdMbEvohVMjMx6fZxP98HsJYy1tiKMzy8t/2l9ZnSpCmxl/Lbm0
GHnpJd5FU/8K5l4aBNi/gF2EgSaqT3l7gf1LE/Viw96CH7kTA/xFHHpR2y5uVrmf
BWKitZe5hL7ZD++Y/IxuYWl5P6ggPVrHX+CD19xNrDZ356EqXopNbMeL6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm22b76yUmdj4dVNHxhC9OLpvwaMB8GA1UdIwQY
MBaAFDi8eUxfuqxjKn/7Q9sU9znNU7LEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYt
ZDk4NTM5NGUzYzEwLzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYtZDk4NTM5NGUzYzEw
LzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ43nsUwi
ioFUnUWlE+3rQ7eWVTZKYNGwsNf2uzJPS5tI2Y0oLStJBgx6rtv6FbPfEJNdPC9o
SGVHTntr8TRMr6GKs1Wwqvpwd28h3cOpELfUUKlMjxOLmAoyO0NQsMudX6oLRwrC
haasAZG5lEzyW6m3GrGDlRuM97PpEnE5LQHPcPmmoR/Lvte5w/HHQJyxxk9CQ9vw
5HSBnmvkb7ptC+mIMuD/4x88JWtnXEQpoecRJ//7NMR4jEtco5f3q6gwX/29jXbL
1+CTRtvTwPuCCGUBnHi8VSeE72/hZlds9Y+H8Ktc+wPqWYP2TObZhjRU85v0g2iw
X3pkRzwPiFaY2A==
-----END CERTIFICATE-----
Generated at Wed Jun 18 22:03:33 2025 by rpki-client