Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: Ri2sjwKkM6g1JnuJKEakUGwdvYVYS2byb0AyTahT6n0=
Subject key identifier: 6C:FC:48:D7:E9:2D:B5:8B:6F:35:D6:F8:B9:65:FD:0A:2C:CD:59:3B
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 01984A782E26B900D23ECF0F5A27978BF65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:46 +0000
Manifest this update: Sun 27 Jul 2025 06:00:46 +0000
Manifest next update: Mon 28 Jul 2025 06:00:46 +0000
Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=)
2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: lcoko4Qh0ymGE7qMJnECGy1k8P3b9hNPiPk+PkVWac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:2e:26:b9:00:d2:3e:cf:0f:5a:27:97:8b:f6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Jul 27 06:00:46 2025 GMT
Not After : Jul 28 06:00:46 2025 GMT
Subject: CN=6cfc48d7e92db58b6f35d6f8b965fd0a2ccd593b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:01:38:09:bb:a9:80:e1:60:44:c0:f8:a6:
cc:81:53:91:a7:31:9a:3b:c7:9a:20:81:f1:f4:97:
1a:0f:2f:3b:65:0c:fb:c3:33:47:d1:33:a7:25:96:
96:11:c1:01:1e:a1:72:a4:b1:27:9c:ff:5f:52:4e:
ab:e6:e0:c9:74:04:b1:2a:7f:48:a8:f9:e3:17:02:
05:6c:60:a2:c4:3c:4b:fe:7c:9e:80:1f:4b:68:ee:
ec:03:fc:dd:03:43:fe:86:52:65:8f:eb:8c:79:d2:
44:dd:42:6e:2b:d5:9f:fb:98:02:51:f7:6d:6b:ac:
ca:22:17:3c:cd:11:22:fe:3d:6f:60:ca:26:6b:c1:
72:5c:4d:2e:d7:74:10:b2:8a:b3:e1:95:12:44:d2:
b1:ba:e7:f3:17:6f:11:0e:f1:85:dc:50:02:18:64:
80:1d:f8:ef:a4:bf:f8:3b:fd:ca:96:2a:20:12:91:
d1:5d:01:b0:78:24:08:e2:9e:df:1a:c7:b8:3c:8e:
ee:7d:c4:6f:7b:ca:40:a8:65:8c:e4:a1:90:62:d0:
7d:dc:23:a7:1b:cb:78:7f:ce:0e:14:a1:41:20:d8:
e9:d6:a1:c3:22:a8:4a:38:52:f6:78:df:1b:33:cf:
ee:7f:09:c0:c3:91:21:ce:58:7d:ee:22:3b:2d:04:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FC:48:D7:E9:2D:B5:8B:6F:35:D6:F8:B9:65:FD:0A:2C:CD:59:3B
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:ef:ad:0d:bb:e6:86:34:af:9f:0e:1b:8e:c6:84:19:59:
6c:5a:b2:a1:75:f4:85:25:66:bc:12:6b:0d:e4:61:03:65:14:
af:a2:7a:f5:a9:1d:c5:32:37:da:9e:70:25:b5:1d:d1:6b:69:
5c:c1:a3:87:83:02:80:e6:4a:b9:ce:74:9b:fd:5d:8d:3f:4c:
ea:e4:99:65:f2:62:70:93:e8:52:78:f6:65:37:c4:3d:bb:d1:
b1:20:76:bf:72:b3:1b:76:cc:84:a9:cf:cb:24:18:0e:40:a8:
10:6d:ee:5a:83:53:5f:ec:0b:73:6c:9d:cf:5e:e3:ce:d6:b8:
8c:40:52:e3:33:4b:fd:c7:ac:40:ea:e2:06:e3:09:9d:c1:5f:
7b:8b:13:ba:98:8c:9c:eb:d1:b1:ba:07:0d:0c:60:4e:bc:89:
f5:c4:12:57:a0:27:2c:ca:2e:78:6e:f2:92:08:ad:2a:f6:0e:
2c:3b:3d:65:03:f4:5f:83:d3:4f:23:ca:62:a6:f3:5a:0a:e1:
3c:57:83:59:9c:a0:38:36:16:78:68:0a:40:d3:58:de:f1:a8:
1d:ec:13:74:8f:c2:e0:e8:79:6c:4d:46:80:b8:9f:2f:ca:cb:
08:2e:fd:2e:56:54:05:3b:e5:15:ee:dd:0b:54:53:67:50:13:
75:d2:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:43:00 2025 by rpki-client