Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: 7oa7Z5mpGt1nvPVUULyJ5+TI/jMU8hMeCyJSFJzvd4I=
Subject key identifier: 4E:B3:89:D3:69:EA:A3:06:CC:76:0F:2C:1B:C7:0C:34:F9:52:1C:3F
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 01975DCB406FE03039A28935F2F13B73D118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 07:01:30 +0000
Manifest this update: Wed 11 Jun 2025 07:01:30 +0000
Manifest next update: Thu 12 Jun 2025 07:01:30 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: pLdEKMVCZft8jsyz9V2q+w2+q7YInUo87P0DUFqSbbI=)
2: qGclPxhfh32KtuLneyqN4qho8W0.roa (hash: Hhh+blGm68/K3Y0iK4idov3LXxMurIpuJKDKpXuGS98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:40:6f:e0:30:39:a2:89:35:f2:f1:3b:73:d1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Jun 11 07:01:30 2025 GMT
Not After : Jun 12 07:01:30 2025 GMT
Subject: CN=4eb389d369eaa306cc760f2c1bc70c34f9521c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:eb:fa:93:69:a1:68:07:f0:98:99:8a:f7:
39:e6:a0:d6:3c:3a:d1:7c:de:4d:d7:2a:10:51:26:
2d:7f:e8:a6:96:b2:c8:3c:fc:75:a7:a1:73:e0:0b:
78:a8:9c:0a:26:a7:ff:e5:87:00:62:ef:36:2c:e4:
5f:2e:67:e0:76:e5:00:c5:8a:16:75:48:9b:da:2e:
d8:29:2e:e7:64:ad:8b:b3:ae:03:49:77:48:0f:53:
56:0e:e2:a7:3d:26:6a:03:fc:9f:77:28:35:f9:51:
ed:26:bc:1f:a6:bc:c4:3a:b8:0e:06:a4:b6:33:58:
31:5e:08:0e:07:e6:dc:e2:3c:42:44:91:1f:37:1e:
fb:fb:ea:1b:8f:b7:b5:95:9e:38:df:7e:1a:54:b6:
2f:05:21:55:b3:18:c9:d6:4c:09:93:a4:86:6c:65:
a1:8d:77:09:8b:68:79:50:c1:c0:63:ca:a2:b7:b3:
63:21:b7:75:22:96:23:34:5b:a1:58:87:35:e9:ae:
4e:6a:58:cc:f8:bd:20:98:f3:70:66:8f:57:1e:6a:
90:f0:bf:e0:c4:6b:1f:08:2b:83:13:c6:bd:89:18:
ae:bc:69:81:af:22:7e:77:9b:1e:5c:bc:15:dd:d7:
a2:56:09:b0:e2:1c:17:fb:43:90:46:c8:1b:99:1d:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:89:D3:69:EA:A3:06:CC:76:0F:2C:1B:C7:0C:34:F9:52:1C:3F
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:d1:7c:e5:9f:fe:76:c6:e0:f3:8a:07:70:a9:b7:59:cb:
4b:c1:d4:1f:60:37:e0:51:20:6a:01:33:98:d4:ce:dc:d1:94:
1f:20:ae:f1:42:d5:e1:fa:30:f6:a4:42:7b:90:69:cb:84:3a:
7b:51:3d:b4:ff:29:b8:61:4a:43:d0:55:ab:18:a7:77:79:3f:
e5:b8:25:69:34:3c:9f:d7:4d:00:58:f6:30:84:06:9a:b5:b4:
bd:37:57:aa:ce:95:23:5e:6a:49:a4:da:4b:47:4f:ab:fb:91:
6a:5f:17:16:57:31:53:7b:e5:18:27:bd:70:5b:46:3b:ac:b3:
41:25:80:21:ee:be:2f:48:9a:70:eb:6e:8b:99:39:90:38:af:
b2:8c:cf:6d:f4:ec:80:9d:0e:9a:8e:c1:5b:a6:71:94:3a:48:
dc:84:da:1f:ea:a7:f0:36:f0:6d:6c:0b:a3:5c:8a:16:aa:f5:
87:1e:b1:12:53:39:21:62:29:2f:b1:82:9f:bf:79:06:c2:7e:
1b:f2:c1:88:e1:30:d7:8d:f7:67:d1:66:a0:e9:50:a6:3e:8d:
12:85:ca:16:52:26:34:8b:57:4a:b4:08:c1:b4:17:1b:8f:e9:
1d:29:45:d3:e3:aa:11:d9:85:d3:d3:d4:51:f6:f5:0e:eb:a2:
48:e8:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:41:45 2025 by rpki-client