Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File: OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier: modmwRiIpOwqCMs0EdwFbcWNkvIJTw1i8LSKJ3jR2H8=
Subject key identifier: 37:9A:3D:61:56:10:82:22:A7:DA:DA:3D:34:BD:0E:0A:E1:70:C5:5E
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer: /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial: 0198530DE5D15B95D3A79592DD5B0CD83770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number: 0924
Signing time: Mon 28 Jul 2025 22:01:16 +0000
Manifest this update: Mon 28 Jul 2025 22:01:16 +0000
Manifest next update: Tue 29 Jul 2025 22:01:16 +0000
Files and hashes: 1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: H2XfyTVQWlglyn9PEpOYCSrVGQdtnesblXoOfE47ncY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:e5:d1:5b:95:d3:a7:95:92:dd:5b:0c:d8:37:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Validity
Not Before: Jul 28 22:01:16 2025 GMT
Not After : Jul 29 22:01:16 2025 GMT
Subject: CN=379a3d6156108222a7dada3d34bd0e0ae170c55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:95:d6:16:f6:52:21:56:f8:a2:81:a8:ed:
9d:b0:e0:2b:15:41:b3:23:02:be:88:16:6f:eb:c2:
95:1f:f7:c3:9e:4d:07:2d:ca:ad:4a:1c:11:a9:cb:
6d:1c:04:55:f8:7e:e2:93:c2:b2:e9:8e:2c:1a:45:
c8:b0:01:97:cd:58:aa:b0:82:22:c4:bb:76:99:6d:
27:3c:01:e6:19:a7:17:f3:d6:74:9d:41:89:a6:ca:
2d:0b:5b:b4:2a:34:ff:e2:ad:6a:93:39:ae:5b:98:
0d:72:fd:1d:a9:82:ab:c9:17:00:53:11:33:3f:3a:
4e:7a:c9:6b:c1:cc:29:e0:f2:d1:d1:5f:52:f3:40:
1d:be:90:20:62:c4:00:64:23:25:9b:0b:12:92:01:
c3:57:24:ce:48:12:ad:b4:ec:a5:23:1a:10:33:7a:
ff:23:d7:94:a3:a3:45:5f:15:dd:2e:ed:fc:07:e8:
43:76:82:b2:31:85:96:2f:09:32:53:a7:91:43:75:
43:ed:66:43:2e:a1:74:4f:28:3c:5d:85:e0:62:c4:
74:21:5f:0a:d6:24:85:1f:cd:50:dc:08:7c:1f:b1:
49:18:21:ae:be:04:b6:87:5a:05:e5:d8:41:dd:35:
bb:f0:0c:da:36:55:06:2a:4e:25:f5:92:3d:a8:14:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:3D:61:56:10:82:22:A7:DA:DA:3D:34:BD:0E:0A:E1:70:C5:5E
X509v3 Authority Key Identifier:
keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:83:7f:64:5e:40:73:85:a6:f0:de:23:11:c5:25:ce:77:f4:
9d:9d:2a:0b:bc:9e:6e:90:08:75:60:75:b4:da:ed:1c:19:91:
df:9a:a9:5f:f7:fc:b0:a8:d4:78:c7:91:87:a6:0d:f3:eb:65:
48:f0:61:6a:d6:79:17:c4:9e:c1:6c:5a:9b:89:e1:5b:49:d3:
59:db:b8:da:0c:b9:e2:a5:2d:2e:70:2d:ce:58:07:48:62:ca:
d2:45:e8:c8:5c:e8:e9:49:58:d2:dd:e8:85:33:a6:dd:e1:c1:
57:b8:ad:4d:eb:3f:4f:c2:dc:b3:f0:a5:6a:e9:a7:72:bf:89:
fc:7e:1b:f8:00:34:df:22:26:e7:6e:dd:d3:53:9d:c7:ba:5d:
54:d7:62:c1:15:80:cf:f8:4d:9c:ce:b2:1c:7f:a7:08:4c:a4:
98:cc:c3:72:aa:36:bb:84:1a:c8:53:69:0d:ed:8e:96:57:c4:
ef:22:c2:11:42:7a:26:67:8c:20:a0:f7:44:49:ab:ca:f7:c7:
9e:36:88:ed:76:e0:03:8b:da:b7:4d:7d:15:c6:e2:93:6f:f3:
cd:51:d3:da:96:21:3b:40:d7:3c:eb:dc:1a:e1:22:19:9b:9c:
07:d9:b6:ed:58:fe:e1:27:67:a5:b2:27:58:66:50:1f:54:c5:
2b:e4:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:46:04 2025 by rpki-client