Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: OdFhs02yf41DTZZ2/bN6MT3aAMMm5561J0U0g9x+yVI=
Subject key identifier: B3:A6:12:12:48:A5:B8:3B:F8:BB:2F:F9:DB:3C:8F:BF:17:B5:4B:D4
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 01975422E190108067690AC41619259A6B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 10:01:01 +0000
Manifest this update: Mon 09 Jun 2025 10:01:01 +0000
Manifest next update: Tue 10 Jun 2025 10:01:01 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: VOrHRXGgfYhv7j96rpHDtrGkTDN3Eemg2j/VtDPiaVM=)
2: qGclPxhfh32KtuLneyqN4qho8W0.roa (hash: Hhh+blGm68/K3Y0iK4idov3LXxMurIpuJKDKpXuGS98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:e1:90:10:80:67:69:0a:c4:16:19:25:9a:6b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Jun 9 10:01:01 2025 GMT
Not After : Jun 10 10:01:01 2025 GMT
Subject: CN=b3a6121248a5b83bf8bb2ff9db3c8fbf17b54bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:a3:f4:1d:70:de:b4:f9:7f:74:a8:2c:13:
65:28:57:6b:81:51:e5:84:73:02:5c:fe:41:a5:40:
35:ff:0f:52:66:2c:69:25:f3:bc:e4:9f:2e:56:0a:
5a:5c:ff:0d:88:f8:4e:d8:87:62:7f:dd:f8:af:5e:
b7:bb:96:7e:a7:ea:5e:f0:fa:ea:1f:83:a5:a4:75:
77:63:04:82:da:be:e7:10:e4:d2:83:93:44:84:b3:
a8:f9:ba:8c:72:ba:8b:6c:e6:ac:82:11:76:aa:fb:
73:af:4f:c0:e9:60:a7:ca:29:a8:d6:92:b6:6f:82:
a2:22:c7:9c:90:2a:3d:07:01:c4:df:89:3d:06:13:
8e:a6:52:8f:91:b2:d6:f7:d1:c0:01:a7:b4:c5:8d:
50:5a:21:4a:e5:61:49:1f:58:be:97:55:3a:7c:82:
55:52:fb:94:1f:86:d5:ca:50:eb:06:b8:4c:3a:c2:
31:86:d9:e2:80:14:05:3e:2f:62:33:41:2b:36:af:
93:19:9d:57:55:5f:3a:56:9e:66:6d:b1:33:03:eb:
dc:34:c8:05:7f:7c:d1:eb:41:a0:c8:ab:e7:b7:30:
e9:d4:b5:14:44:f9:7c:0c:60:27:12:89:1a:6d:6f:
68:6a:d1:a3:dc:26:45:ce:0f:79:c9:bc:28:3d:9e:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:12:12:48:A5:B8:3B:F8:BB:2F:F9:DB:3C:8F:BF:17:B5:4B:D4
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d9:ad:2b:56:79:fb:83:a4:9f:3e:88:32:c5:a8:49:fd:7a:
14:4b:c3:c3:f1:e8:1b:6e:da:da:46:45:83:34:40:35:c0:f6:
23:d0:11:f4:56:4b:35:c3:c4:cd:ec:5f:77:71:f6:33:a8:21:
df:b3:0c:e2:9c:19:bc:1a:28:9d:1b:aa:9f:6a:39:c6:5e:8c:
48:53:19:3c:0b:6f:29:87:3b:00:a1:66:e1:00:8d:dc:38:08:
a7:1c:11:d8:07:4f:0b:62:42:ff:8c:fb:5f:44:c5:cf:84:07:
11:53:be:e9:d8:8e:6c:e1:f6:1c:64:37:a1:d0:8a:5d:9b:b5:
ca:28:96:b3:4b:50:45:78:3d:f5:05:d0:d9:74:88:bf:9d:35:
57:c3:72:ed:d3:8b:ef:72:b3:5e:68:26:a4:6c:ce:e2:e0:f4:
7d:ba:3d:76:d3:48:6a:2e:27:04:c0:95:54:f8:e9:61:b0:f1:
62:41:a1:4e:11:bb:40:b1:53:2c:ac:e9:1d:12:99:e4:f5:4d:
bf:d1:1c:c2:62:29:75:0e:0c:e5:01:d8:c8:c4:e5:5e:05:ad:
17:50:d9:0d:25:12:71:94:ea:95:1f:53:61:7a:ed:d8:8d:c8:
d5:f8:c2:20:32:e5:56:f5:e3:74:71:72:f2:6e:33:50:a6:cf:
0f:f5:f2:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUIuGQEIBnaQrEFhklmmtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy
NGIyOGQwHhcNMjUwNjA5MTAwMTAxWhcNMjUwNjEwMTAwMTAxWjAzMTEwLwYDVQQD
EyhiM2E2MTIxMjQ4YTViODNiZjhiYjJmZjlkYjNjOGZiZjE3YjU0YmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqmj9B1w3rT5f3SoLBNlKFdrgVHl
hHMCXP5BpUA1/w9SZixpJfO85J8uVgpaXP8NiPhO2Idif934r163u5Z+p+pe8Prq
H4OlpHV3YwSC2r7nEOTSg5NEhLOo+bqMcrqLbOasghF2qvtzr0/A6WCnyimo1pK2
b4KiIseckCo9BwHE34k9BhOOplKPkbLW99HAAae0xY1QWiFK5WFJH1i+l1U6fIJV
UvuUH4bVylDrBrhMOsIxhtnigBQFPi9iM0ErNq+TGZ1XVV86Vp5mbbEzA+vcNMgF
f3zR60GgyKvntzDp1LUURPl8DGAnEokabW9oatGj3CZFzg95ybwoPZ7SJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOmEhJIpbg7+Lsv+ds8j78XtUvUMB8GA1UdIwQY
MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt
ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw
LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotmtK1Z5
+4Oknz6IMsWoSf16FEvDw/HoG27a2kZFgzRANcD2I9AR9FZLNcPEzexfd3H2M6gh
37MM4pwZvBoonRuqn2o5xl6MSFMZPAtvKYc7AKFm4QCN3DgIpxwR2AdPC2JC/4z7
X0TFz4QHEVO+6diObOH2HGQ3odCKXZu1yiiWs0tQRXg99QXQ2XSIv501V8Ny7dOL
73KzXmgmpGzO4uD0fbo9dtNIai4nBMCVVPjpYbDxYkGhThG7QLFTLKzpHRKZ5PVN
v9EcwmIpdQ4M5QHYyMTlXgWtF1DZDSUScZTqlR9TYXrt2I3I1fjCIDLlVvXjdHFy
8m4zUKbPD/Xyxg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:46:17 2025 by rpki-client