Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: VUGjN1jzKNAQ2mUXt7yfhQG47VUKzgaBVBeTpI6kGAE=
Subject key identifier: 7A:A9:74:99:A5:69:BE:68:FD:3A:F5:14:94:1D:A7:F7:35:33:89:83
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 01974E209BA97D5C382A2A06626F33FE43B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 06:00:49 +0000
Manifest this update: Sun 08 Jun 2025 06:00:49 +0000
Manifest next update: Mon 09 Jun 2025 06:00:49 +0000
Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=)
2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: r8ahiO2rJVN+p4QFcfjxQ4f0ggAjK6giql2GwaLjFBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:9b:a9:7d:5c:38:2a:2a:06:62:6f:33:fe:43:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Jun 8 06:00:49 2025 GMT
Not After : Jun 9 06:00:49 2025 GMT
Subject: CN=7aa97499a569be68fd3af514941da7f735338983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:aa:b3:e4:51:50:9d:0f:c8:fb:a7:eb:76:
4e:49:e7:2e:85:9b:5e:87:11:1f:78:fc:59:2c:15:
79:54:93:2f:b9:2c:b1:8f:7d:5c:e5:a8:26:51:1b:
ed:de:fc:e1:37:de:3f:94:0d:12:c8:8c:77:54:44:
16:1f:89:71:d4:03:b6:88:85:61:8c:2e:87:18:31:
75:dd:a5:e4:9d:63:b2:20:d4:95:62:2a:1f:c6:77:
79:0c:d9:b7:48:7d:44:f2:7c:e1:4f:e5:70:f3:00:
14:b9:1c:f0:da:d6:49:cb:99:30:20:68:af:65:bb:
c8:5d:d3:83:ce:74:eb:90:fb:0b:75:59:9b:b2:17:
9c:34:55:8f:d9:56:82:c0:ce:60:38:ba:e9:ec:4e:
2f:f4:ed:c5:fe:23:34:b3:b4:8c:b4:12:37:c1:78:
27:b6:43:2d:0d:a6:4e:fe:12:7b:57:93:5b:c4:f9:
ca:42:6e:f3:a1:4c:38:91:51:ef:db:f7:df:9c:f2:
8b:f7:a3:43:66:ed:b2:27:57:f2:04:64:8d:99:0f:
52:16:35:56:fc:41:79:67:e1:2e:1e:38:1e:a6:f2:
7c:b8:33:93:54:5f:a8:f2:f4:87:66:5e:be:4b:26:
b3:bf:39:ab:5d:ec:63:67:18:a9:c5:cf:45:c3:63:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A9:74:99:A5:69:BE:68:FD:3A:F5:14:94:1D:A7:F7:35:33:89:83
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6f:49:91:fb:10:68:ef:17:87:1b:79:e3:98:df:e5:5f:f8:
2e:03:13:63:57:c0:2e:d4:45:f4:2f:3e:a1:84:94:e5:7f:f2:
3b:32:1c:95:c3:87:b6:9c:7a:4f:fe:60:af:56:83:49:7e:0e:
62:01:41:52:d8:f8:53:a3:a5:82:a9:5d:e5:a9:9d:25:64:26:
04:1e:f5:67:be:3a:32:82:27:1d:2d:d5:28:ed:05:cd:45:57:
45:f8:62:e2:83:fa:c4:9d:55:e1:bb:d0:87:74:9f:8f:ed:10:
8b:31:e8:48:b8:68:66:b5:17:21:04:05:21:57:6f:c3:01:ab:
6e:a9:08:43:01:6f:40:9c:0a:78:af:e3:4c:e2:0c:16:89:b5:
5f:ff:69:7b:66:2e:b0:c0:0a:a9:d9:44:90:05:ba:d7:2d:53:
31:5a:7f:3d:fc:af:62:3b:e9:36:c7:8e:7b:44:90:0f:d1:4b:
05:3f:6c:5d:4b:5d:d6:7d:d7:fd:a8:a0:ca:cd:ca:7e:0e:95:
b1:3f:e9:39:61:1c:41:da:bb:b1:ee:dd:ee:38:cd:93:dd:8f:
9c:26:85:c9:c1:37:0b:12:ca:ef:fc:79:0a:0a:20:1b:13:c3:
6f:a4:5d:37:57:ae:4a:04:8e:c2:dd:4a:02:87:2a:29:78:f0:
d2:a7:a2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:02 2025 by rpki-client