Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: HIQeIC1zYqhzKO66RAQ6x9apWPK2EaI2bQqnBev7TCc=
Subject key identifier: 7E:25:08:52:DF:FB:36:ED:F1:5D:D4:94:D6:16:2E:ED:75:9B:35:6A
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 0199D46ED00F4F728DF6E3DEE5054C27A731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 16CE
Signing time: Sat 11 Oct 2025 18:00:55 +0000
Manifest this update: Sat 11 Oct 2025 18:00:55 +0000
Manifest next update: Sun 12 Oct 2025 18:00:55 +0000
Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=)
2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: jQzX//L+xUYLJKoKuhGbIwEIkSnycOc6BNYsmM1Vz/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:6e:d0:0f:4f:72:8d:f6:e3:de:e5:05:4c:27:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Oct 11 18:00:55 2025 GMT
Not After : Oct 12 18:00:55 2025 GMT
Subject: CN=7e250852dffb36edf15dd494d6162eed759b356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:9c:fa:23:1c:a4:85:ad:20:a5:e0:93:a5:
57:f0:a7:8a:77:25:8b:89:4b:28:c7:bc:ac:29:2a:
9a:3f:be:d9:07:ac:e0:96:ad:b2:0d:ce:54:d4:58:
b9:d0:5d:ec:44:62:75:f8:97:08:2a:9b:a5:62:ee:
71:25:b7:da:79:3c:60:23:57:47:8e:98:19:d7:23:
87:98:a1:b2:62:33:e9:db:3f:af:c0:30:40:84:77:
d7:10:31:6d:ee:42:f7:e7:92:06:17:4c:c7:72:f5:
6d:75:9b:8f:a0:c7:1a:00:90:8b:68:60:42:45:b1:
c9:20:f0:a9:10:3f:db:6b:27:06:94:31:7d:d3:4a:
59:f2:30:80:76:75:a5:c8:05:bf:ab:03:ea:05:43:
a3:c6:4a:2e:66:41:91:7c:65:c1:67:bf:48:83:f8:
81:26:dd:77:3b:63:72:df:29:4f:80:05:94:88:0a:
42:be:8e:98:9c:08:d6:39:43:c2:69:2e:5b:58:ea:
a6:8c:5f:2c:ab:cb:5d:7f:7b:5e:d4:26:a5:4e:d3:
eb:38:92:b9:73:7a:a2:ac:9c:33:69:9c:78:59:9f:
78:5c:2b:93:35:f8:7d:40:4e:41:da:85:30:ac:89:
05:60:11:0a:78:d7:b4:e0:5e:d4:1d:76:d5:d4:c3:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:25:08:52:DF:FB:36:ED:F1:5D:D4:94:D6:16:2E:ED:75:9B:35:6A
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:41:9c:52:e0:82:01:a9:df:0f:fc:f2:43:43:d8:81:c9:
81:22:e7:14:41:52:d9:15:8d:57:22:f2:91:74:d1:18:e7:fd:
8f:b9:0b:6b:95:16:e8:87:e2:31:a9:6c:98:31:4c:55:20:70:
c4:48:8b:40:70:af:ae:d2:9f:39:cd:7a:9f:35:9b:68:50:3b:
f7:e7:fd:81:9e:50:65:90:6d:53:db:ab:6c:0b:e0:01:ad:60:
69:74:41:67:68:ff:f1:23:8b:fd:0c:01:39:70:d7:9a:32:f2:
91:9f:c4:af:f0:27:f1:64:93:ba:57:a4:8d:55:98:c7:ee:49:
96:a4:92:28:27:81:77:fb:5c:cb:c9:73:b0:ba:91:ed:90:e2:
07:54:5d:63:e6:52:62:98:77:e5:40:2b:f8:ef:f0:8d:f5:9c:
2a:a7:65:df:b9:21:26:00:19:7b:a4:ba:55:70:e3:8d:c9:35:
26:4b:cf:b6:47:ef:1b:9a:cd:fc:eb:0d:bf:52:c1:df:28:84:
d3:be:2e:a3:58:17:e4:71:c8:1f:b9:23:ed:a1:d5:30:f8:bd:
48:88:a7:8c:ee:af:be:34:55:22:69:38:8e:66:0b:e9:f3:32:
8c:f4:5e:aa:9a:6a:14:ec:7d:b7:dd:0f:63:f4:a2:02:eb:97:
88:da:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 19:55:06 2025 by rpki-client