Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: 2Q1vKxLCES1LXxlm8tE8w0SSBcko9EqPvJ+l/b7ShbA=
Subject key identifier: 79:B1:FC:5E:C3:38:05:61:A2:48:EB:D1:A9:B3:2E:6E:DC:57:86:FE
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 0197499ED8C673B7E65B73D71AB5408B9708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 0215
Signing time: Sat 07 Jun 2025 09:00:36 +0000
Manifest this update: Sat 07 Jun 2025 09:00:36 +0000
Manifest next update: Sun 08 Jun 2025 09:00:36 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: fPorKGF6rZTiRPHipyYiidQ/RqM0j93EBvpLcU9AXvQ=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d8:c6:73:b7:e6:5b:73:d7:1a:b5:40:8b:97:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Jun 7 09:00:36 2025 GMT
Not After : Jun 8 09:00:36 2025 GMT
Subject: CN=79b1fc5ec3380561a248ebd1a9b32e6edc5786fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:70:ad:71:b0:e1:2f:15:9d:c7:d9:dd:55:
98:6a:a3:a7:9a:d7:ff:9b:ea:d0:8d:3d:c4:81:33:
3a:3e:9b:4e:0f:50:2e:26:af:9e:63:c8:24:a2:54:
90:fc:0f:60:43:a8:cb:44:20:9d:b3:d6:95:9c:fb:
65:68:98:a5:e2:29:a2:55:1d:df:96:ab:eb:ff:f6:
70:98:01:db:bc:e9:6b:d2:23:df:21:6f:87:36:31:
93:25:99:9f:f8:a9:cd:e4:6f:25:52:b7:54:32:c0:
a5:7a:c7:ee:6c:8e:45:33:d5:7d:b1:9f:31:db:eb:
58:96:91:62:7d:ad:a2:d5:17:f7:f3:e8:20:20:01:
9d:a9:c0:de:38:b8:24:f3:6f:72:9d:07:fe:6a:55:
a0:8f:af:a1:6e:f4:c9:cf:5b:2b:11:52:c3:bd:bf:
97:04:d4:59:1d:57:41:8d:c5:61:98:f2:32:ae:2f:
8b:46:c8:03:17:e0:32:4f:bc:76:4a:cb:a5:55:83:
b0:f4:99:97:98:ae:7f:25:67:93:4a:30:03:b7:8e:
01:85:62:6e:1c:6b:4f:49:c9:39:39:62:bd:ab:6e:
9a:1c:84:7e:59:bd:3c:63:b9:68:9a:75:e5:b5:7e:
2d:e3:67:0b:d8:9f:69:40:dc:8c:3a:3d:a9:1a:34:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:FC:5E:C3:38:05:61:A2:48:EB:D1:A9:B3:2E:6E:DC:57:86:FE
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fe:64:e4:a7:6f:f6:af:94:90:82:0c:79:4a:fc:f8:91:0d:
5e:3f:5c:f1:1b:8a:af:81:17:84:7f:5b:5e:11:50:10:d3:6d:
2f:21:50:cc:7a:3a:0c:e1:99:7a:70:5d:a8:23:40:47:df:19:
e6:3d:a0:12:51:48:85:09:48:60:d7:6c:db:44:3a:e3:59:bd:
28:57:e9:67:17:c8:13:77:91:ba:4b:83:f0:fb:f3:16:e4:4e:
73:20:15:ec:a3:5e:06:f3:3c:53:ce:9f:01:1c:8e:46:4c:07:
37:19:80:b3:72:55:51:83:27:f2:e8:39:1b:5b:f2:a6:71:d5:
2f:3c:94:41:09:0b:ae:e1:ea:2f:ea:16:15:1e:ab:ac:f8:ed:
8f:bc:fd:1d:c6:a6:87:28:e2:77:1b:47:cd:8f:ac:22:62:5b:
93:d6:0a:0b:2f:5b:d3:f2:34:b1:2f:04:8c:db:dc:a8:be:96:
d5:0a:99:18:19:14:02:b9:5a:be:a2:99:66:43:25:3a:4f:6b:
62:81:3f:8a:f6:dc:30:a1:ca:0c:e0:21:cc:c5:45:e0:78:5b:
2c:be:7d:37:43:e5:98:e5:09:db:fd:b9:08:23:2d:e0:4c:24:
ad:bf:e3:e0:bb:0d:ab:3a:29:12:03:7f:e7:14:41:49:94:3c:
1c:23:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:51 2025 by rpki-client