
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File: olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier: WUjLyFPV7OD2qQ1nqH4YWXNNqw/2DH9i8WobVEq3qxo=
Subject key identifier: 90:7B:55:5F:FC:D8:12:81:23:C0:3A:B5:82:E8:29:EF:E4:EE:81:DB
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial: 01985155B474F722289B585AB0A791C1991B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number: 1000
Signing time: Mon 28 Jul 2025 14:00:27 +0000
Manifest this update: Mon 28 Jul 2025 14:00:27 +0000
Manifest next update: Tue 29 Jul 2025 14:00:27 +0000
Files and hashes: 1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: yBwuOp0waJcRZjIY1Nk/t6VJ0qkA6mIJ5aU/RJQVytA=)
2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:b4:74:f7:22:28:9b:58:5a:b0:a7:91:c1:99:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
Validity
Not Before: Jul 28 14:00:27 2025 GMT
Not After : Jul 29 14:00:27 2025 GMT
Subject: CN=907b555ffcd8128123c03ab582e829efe4ee81db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:14:24:17:df:b4:89:8c:ba:a3:41:d1:31:
27:5c:54:4e:da:79:81:8f:5b:f3:66:4c:d3:42:00:
4a:59:07:31:00:d2:1c:65:28:0f:1b:50:aa:1c:3c:
98:7d:6e:07:76:1f:44:0f:56:f7:b5:e6:d3:21:55:
ce:70:55:7f:c3:32:56:cf:f1:e4:5e:64:fb:21:68:
8b:ae:b1:74:78:43:9d:c8:5b:ba:22:18:99:52:da:
88:f6:c6:47:47:78:69:6e:cb:a8:36:16:7f:03:e6:
a4:e4:3d:77:35:35:3f:a0:f9:7d:09:3a:ef:04:64:
e1:10:d3:b8:13:be:6d:1a:da:af:16:ac:96:0d:ab:
a2:7c:91:25:41:41:6c:01:bb:85:09:43:84:ba:ff:
dd:c3:a8:66:0d:66:6e:f2:84:a0:49:8b:d2:65:7e:
47:b4:97:b6:42:26:a8:3b:14:6b:fd:3c:97:d9:a2:
78:80:e1:af:c6:71:c1:ec:fa:8c:de:f5:9d:9a:d3:
8a:4d:da:b3:48:91:1a:4e:fa:c6:ed:bb:ba:f3:d1:
51:cb:28:c4:94:ba:9d:95:15:80:d2:5e:eb:47:74:
c0:28:eb:f9:73:e2:cf:ff:36:b4:33:9b:b4:b9:14:
40:f1:7b:6d:be:ed:f1:1f:0f:9a:50:8e:9e:e9:b8:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:55:5F:FC:D8:12:81:23:C0:3A:B5:82:E8:29:EF:E4:EE:81:DB
X509v3 Authority Key Identifier:
keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1b:01:37:e3:ee:e2:6e:7d:a3:96:62:10:0c:17:b8:c6:03:
d6:77:4c:03:ce:33:8f:09:82:6a:d8:13:c6:98:3b:fb:ab:b9:
cb:1d:cb:a8:63:ce:d9:1e:da:f0:54:17:66:87:bb:ed:63:7b:
93:06:e4:c1:83:e9:ae:db:26:e7:1d:4f:59:84:24:c7:c6:b1:
91:bb:bd:66:66:32:d6:e8:3d:44:6b:0e:76:2d:d6:14:a5:6e:
9c:d3:e5:11:43:3a:5a:ed:6e:aa:c7:8a:3d:fa:61:c6:44:60:
78:da:ed:1e:dc:76:2b:3e:17:cd:86:79:d9:ec:bf:cc:87:bd:
80:49:a0:f3:cc:6f:dd:4e:33:3b:7a:a1:ba:b1:2a:9d:d0:51:
e2:ca:ee:d2:ff:0d:c5:e0:cb:22:37:97:02:fb:26:3a:0b:3b:
07:13:13:dd:62:51:31:84:5f:f1:bc:02:4b:30:41:ce:41:a9:
34:6e:87:11:fb:22:b8:8f:45:1e:26:2b:5e:59:a0:57:ef:3b:
8d:08:56:a6:93:10:07:35:9f:0f:4c:23:a5:36:4f:6f:2b:33:
c1:43:b8:37:87:07:e1:1b:8a:82:88:4f:f8:f2:41:2d:0e:35:
23:58:2a:e6:29:c9:4a:77:ce:cc:d9:c0:61:78:83:2d:cf:eb:
c1:5a:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:12:16 2025 by rpki-client