Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: R5vyausYioS1DFXQ2gJmnLvXBkJ4rYV+SsAfi+VHXsc=
Subject key identifier: 48:1F:E2:C2:FA:38:B3:8A:F3:C6:7D:C6:3B:4E:A6:53:B6:06:B1:B5
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 0198462D34C2367DBCFE7875BA8DB49FC9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0678
Signing time: Sat 26 Jul 2025 10:00:24 +0000
Manifest this update: Sat 26 Jul 2025 10:00:24 +0000
Manifest next update: Sun 27 Jul 2025 10:00:24 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: qBC+/gCFOw86yenLt7oV5zVPgKf5PLCg/hbNOMWK5YA=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:34:c2:36:7d:bc:fe:78:75:ba:8d:b4:9f:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Jul 26 10:00:24 2025 GMT
Not After : Jul 27 10:00:24 2025 GMT
Subject: CN=481fe2c2fa38b38af3c67dc63b4ea653b606b1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:54:8a:2b:7c:39:26:56:33:54:5a:7c:be:
bd:bc:ef:cf:b7:93:d4:82:4a:00:2f:0c:0d:06:89:
79:1a:e6:96:53:60:8b:74:ca:55:51:e5:f2:34:05:
25:49:77:de:ec:2c:78:62:7f:c3:f8:fa:37:24:2f:
fe:cf:a7:c9:c3:10:81:f1:a6:50:45:bd:81:ee:77:
69:68:08:d7:97:aa:1f:9b:2e:1e:05:6e:5d:d1:ef:
f7:32:87:47:39:2a:5a:d1:c2:46:96:c7:02:f8:41:
ee:e1:d8:78:d5:43:ea:b6:09:36:a4:f2:d7:e7:e0:
7b:c7:fd:1b:94:2a:13:f2:00:04:ca:1c:1d:b2:8c:
f0:68:c1:72:e0:63:cb:b1:72:09:f5:83:7c:f2:e6:
97:3c:c3:78:ef:9b:76:5d:d7:13:c9:ec:b7:60:6e:
44:42:ac:92:a4:6a:bf:e2:66:8c:7b:a6:9f:8b:ba:
69:f3:c4:75:3a:38:6e:f0:43:94:44:bd:8a:00:fc:
b2:8f:6b:27:c2:44:9a:dd:d5:78:3f:10:b4:22:db:
08:48:0b:4b:cf:0a:6d:5c:14:fd:f4:2f:a3:b5:4f:
2a:12:80:be:dc:4c:3b:70:a6:b6:70:57:bf:d9:19:
e9:a5:37:1f:9e:c3:a1:4f:12:25:f6:4b:68:c5:2c:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1F:E2:C2:FA:38:B3:8A:F3:C6:7D:C6:3B:4E:A6:53:B6:06:B1:B5
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8a:22:6b:2d:22:74:ff:08:bc:1b:52:7d:b9:44:e5:5f:64:
c2:66:f5:f9:6e:74:b1:8c:30:78:90:8a:c0:55:57:6b:e9:5b:
ed:e2:99:5a:8f:4b:88:84:4e:26:1f:45:ae:8f:73:35:b7:45:
12:43:b4:e8:00:19:2d:93:dc:77:e6:14:38:59:fa:5c:ba:ac:
f2:a6:a4:16:8c:35:9e:73:5d:85:e4:c9:02:9e:6b:00:4b:0a:
0a:5b:bb:f0:a9:21:9d:fb:f1:63:56:0c:db:87:33:ab:3e:4b:
20:ea:ed:c0:a4:04:66:e1:c1:59:e5:f8:f9:eb:0a:50:23:73:
b2:4a:bc:52:23:1b:f5:08:92:9d:d3:7f:46:6c:20:6d:c2:7d:
f6:d2:34:a3:cf:33:9a:7d:5f:83:2b:4e:ed:00:92:d7:c9:93:
a8:2d:e0:e0:ec:6d:8b:5a:ce:80:80:54:5f:6c:45:63:b2:b3:
69:7e:34:bd:5d:7c:ac:93:45:a5:a8:ce:14:7e:c3:15:a9:a6:
12:06:b3:07:5b:ae:7a:69:ea:67:df:29:e2:88:9e:44:ef:9f:
1c:6b:f6:20:e0:46:c2:3f:92:ed:97:11:a2:15:b1:4a:4a:a7:
ad:5f:b1:25:5d:ed:a5:e0:2a:97:3d:59:f7:07:ef:9a:20:e1:
57:31:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:13:51 2025 by rpki-client