
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: jNOSa01nV5HV259gj5UMM1Z5I91mJk/DXX2SysB/k2s=
Subject key identifier: 89:D3:2B:D5:6D:85:7E:92:42:1B:57:1B:DE:D8:7B:89:E3:DA:87:E6
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 019840CFD5AAF6E533B27720685FB0D3B840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 0295
Signing time: Fri 25 Jul 2025 09:00:19 +0000
Manifest this update: Fri 25 Jul 2025 09:00:19 +0000
Manifest next update: Sat 26 Jul 2025 09:00:19 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: 5W33m74/jeL2K/wvZXZTa89gtNL0jp9JQlo/bJz0orE=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:d5:aa:f6:e5:33:b2:77:20:68:5f:b0:d3:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Jul 25 09:00:19 2025 GMT
Not After : Jul 26 09:00:19 2025 GMT
Subject: CN=89d32bd56d857e92421b571bded87b89e3da87e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:48:6e:a6:d8:dc:8c:dd:52:2a:b2:fd:b8:
84:6f:4b:b8:90:8e:4b:d0:24:90:73:17:1b:af:98:
23:a5:de:5d:0e:0d:c5:f4:e8:90:c4:0f:08:a4:9c:
e3:f4:59:d9:3b:e9:de:9c:3f:b1:5b:6b:10:d1:27:
de:b9:e5:10:0f:dd:90:0c:5a:27:1c:52:58:33:d6:
ea:1c:d4:d7:82:26:bc:a5:a7:b4:b1:45:2e:cd:c2:
81:77:b8:ef:29:e2:b0:ae:fc:22:73:12:42:e0:eb:
c6:ce:e8:f2:f7:21:e1:f3:af:c4:84:3e:d4:60:26:
26:19:1f:a4:1e:83:35:80:e0:51:13:42:e1:84:51:
ae:69:15:b8:a0:9d:50:09:0c:55:56:ee:e5:bc:4c:
fc:ee:71:9d:3a:24:3b:38:94:77:c6:07:45:6b:31:
99:4c:f5:00:85:30:8a:7b:a8:ba:83:31:99:61:63:
4c:ab:37:15:31:c4:81:1d:4a:eb:b7:ff:fc:7d:18:
79:22:94:04:ef:20:93:02:8a:87:99:c4:a5:ed:dc:
b1:8a:b2:66:1c:0c:97:18:80:e4:aa:4e:96:8e:a1:
cf:9b:11:4a:6c:51:31:c7:37:84:b7:6b:57:a5:7c:
9b:cd:cd:c6:24:47:c0:87:1b:85:41:d6:e5:5a:aa:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D3:2B:D5:6D:85:7E:92:42:1B:57:1B:DE:D8:7B:89:E3:DA:87:E6
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:78:5d:19:c3:e4:15:9a:bb:1a:ef:ed:d1:56:30:20:18:8b:
a0:24:b4:59:70:38:54:39:2b:b2:6f:78:fb:a0:00:15:24:5b:
f1:10:e1:01:ee:0c:b9:4e:9b:cf:ce:21:9b:be:10:2c:ae:12:
0e:91:66:bd:9d:d3:1d:25:de:e1:9f:15:91:68:ca:7c:1a:e5:
b1:ba:96:12:cf:5d:d6:25:e7:60:56:3b:fb:68:f4:0a:2a:be:
a1:00:70:db:b6:4f:fa:54:70:e7:b6:68:df:66:58:23:97:0d:
c4:0b:aa:73:14:f3:d9:df:5d:01:6b:db:b2:ba:d5:5a:5f:7d:
5a:e3:fe:3f:c7:d3:37:52:37:96:6a:a9:b5:5b:0c:fd:cc:dd:
a4:1d:f0:a7:2b:2c:db:0d:35:1d:ae:9d:29:ec:49:d9:dc:58:
7c:3e:2f:3e:26:9d:cc:b4:d2:74:06:13:3b:4f:fa:ee:64:71:
81:2c:18:eb:d4:47:51:27:28:ba:c3:91:bf:51:6b:6e:62:c5:
3e:2b:b7:fd:2f:5b:86:d8:2e:18:da:af:f4:d0:3d:3d:d4:5f:
5e:1a:01:f8:f4:a4:1b:82:1c:27:b3:df:77:5b:9b:c0:b5:74:
65:68:28:bb:ad:5f:d2:c2:cd:b8:8c:1e:a0:33:74:1a:6f:6a:
ce:06:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:02:39 2025 by rpki-client