Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: 8hOV56OTYfoUHfaQ28alWN+Fup1mYgI0OG2la7LIWjg=
Subject key identifier: C9:3A:AE:C8:9B:26:BD:13:A0:B5:0A:59:83:F8:56:53:FC:C0:ED:4A
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 019A72CA42115AFA1B4C0681DF5082C4F6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 03B8
Signing time: Tue 11 Nov 2025 12:00:49 +0000
Manifest this update: Tue 11 Nov 2025 12:00:49 +0000
Manifest next update: Wed 12 Nov 2025 12:00:49 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: 05DHLz4o+1xtYjRE8uqIFUtLdfqANJmcEUxUyev6NUc=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:42:11:5a:fa:1b:4c:06:81:df:50:82:c4:f6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Nov 11 12:00:49 2025 GMT
Not After : Nov 12 12:00:49 2025 GMT
Subject: CN=c93aaec89b26bd13a0b50a5983f85653fcc0ed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:1e:9e:c7:07:93:b8:76:fe:fd:1f:d1:a1:
a4:ac:51:c4:f4:d6:f4:b3:bf:bd:aa:94:48:73:23:
08:47:d6:1a:9b:23:d8:3a:c6:91:0e:fd:ef:3e:17:
6f:63:73:f2:6f:d9:06:96:a2:27:b2:33:49:28:96:
53:52:23:ac:1f:e1:77:d4:0d:d9:0b:0f:77:4d:52:
33:2b:26:36:60:52:0f:89:08:10:69:61:42:c9:94:
10:28:2c:61:6c:39:11:d5:da:19:7b:aa:48:b0:28:
e9:88:93:1d:7f:d9:5d:8a:17:93:5e:f2:69:f0:0f:
9b:9d:a7:88:a2:20:8d:2b:36:bf:07:1f:2c:a3:a9:
88:b2:41:72:3a:fb:98:c2:41:82:0e:b9:5b:d3:ee:
96:3c:27:00:ce:ce:e8:0a:4b:98:81:59:7d:08:97:
15:0a:ff:ce:f5:fe:3f:b1:77:2b:56:dd:e4:d5:97:
26:38:b3:aa:52:8e:38:5c:18:c7:f4:95:03:1c:e0:
fe:3d:37:2e:43:94:76:d7:42:9e:b0:1f:b6:09:eb:
13:dc:27:02:25:ad:31:a4:58:b6:74:47:42:55:ec:
74:0a:a7:d9:5e:12:b5:70:01:55:54:70:02:80:5c:
77:0e:09:c9:74:28:62:af:a4:12:99:e3:81:64:92:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3A:AE:C8:9B:26:BD:13:A0:B5:0A:59:83:F8:56:53:FC:C0:ED:4A
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:91:40:ea:b4:4b:aa:05:03:9d:52:bc:d0:3d:03:a8:8f:17:
6b:b0:58:0d:08:1f:65:77:3b:ad:39:6c:21:23:1a:7b:52:2a:
f0:7f:4c:ba:02:73:00:8a:df:cd:39:aa:c0:ba:52:8b:c6:dd:
75:66:ac:fe:74:97:c2:8e:8b:5e:cd:3b:db:e1:bf:bb:9b:63:
45:23:98:28:62:6e:0f:55:da:ec:69:de:e0:e7:ee:fa:af:35:
1d:99:3a:fe:ad:c6:16:63:83:26:f4:c1:40:82:ee:da:36:d6:
a0:e3:71:0a:dd:67:08:76:77:72:d9:7b:fd:83:43:d6:b0:64:
3a:11:8a:79:1d:91:6d:53:f9:b0:94:8b:00:77:c0:13:ad:21:
3a:69:3e:45:d6:2d:d0:0d:09:61:0c:30:df:eb:62:db:18:9f:
70:f6:e7:83:e8:88:e3:1d:b6:f4:43:ed:7c:28:1d:30:8f:7b:
6f:5b:d3:1a:6e:41:ee:b4:23:b5:b2:b9:4b:9a:62:36:18:71:
34:cb:b9:86:30:3d:65:f2:79:53:da:d0:07:4c:bb:c3:76:f5:
b6:bf:f4:2e:c6:4c:e9:42:3b:1e:35:a6:c3:4a:b7:88:de:19:
69:8a:89:c4:4a:11:6b:2c:10:e9:c6:c0:82:5b:77:80:c6:b7:
c6:8d:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:50 2025 by rpki-client