Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: u4UoDQjYufNo2iH+Wv+97sljvHuaBVVMa5sy8E3O1Lc=
Subject key identifier: 18:3B:95:B8:C9:1D:B7:56:37:42:62:58:6E:96:B5:32:B8:64:63:30
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01993A944BBD4FD057AC4448E5AE6D095149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 13A0
Signing time: Thu 11 Sep 2025 21:00:21 +0000
Manifest this update: Thu 11 Sep 2025 21:00:21 +0000
Manifest next update: Fri 12 Sep 2025 21:00:21 +0000
Files and hashes: 1: E-sPwJOQBd-RIkOlcyoHZN39RXw.roa (hash: 1XB1ZcUKn7+rqyC0cHDZNJSDJUAF1wFLAbWbYXLu4oU=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: +Jok4qqsgmVFo82eT2bH2wO9+W5tMnvo3WNXXjoExkQ=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:94:4b:bd:4f:d0:57:ac:44:48:e5:ae:6d:09:51:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Sep 11 21:00:21 2025 GMT
Not After : Sep 12 21:00:21 2025 GMT
Subject: CN=183b95b8c91db756374262586e96b532b8646330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:77:59:d7:f8:4f:9a:b7:fe:c1:4b:fa:dc:
3f:6d:88:5f:1e:aa:02:8f:1e:b4:50:5e:a0:69:6e:
5a:c1:bb:73:ec:b1:8f:30:dc:82:78:88:30:5e:ca:
5f:cd:1a:14:ea:38:9f:3e:f1:be:0e:c8:01:3a:44:
02:e2:e9:51:68:e4:9c:00:64:5d:ac:00:ef:87:b4:
54:cb:a7:36:83:a5:6c:15:06:8f:cd:b7:7c:bb:84:
fd:2f:9b:21:df:e5:29:05:e5:b0:8e:c8:d5:7f:5f:
a5:ef:24:b9:96:92:51:01:d7:69:2d:bc:c6:a9:73:
0c:de:2f:09:75:92:49:2e:53:dd:e0:f3:18:28:2b:
79:64:19:63:97:d1:ce:9d:0b:0d:b2:f1:5f:68:08:
47:9e:12:7d:76:4d:31:98:2e:75:f3:20:a4:b0:6b:
c4:d5:ea:ec:e1:6b:e7:b9:88:c7:31:af:63:d9:7d:
1f:cc:a2:ce:30:f8:2d:0e:61:3c:83:c6:15:85:5e:
8f:db:c6:50:83:c9:ce:59:bb:40:fd:b5:7a:82:04:
1e:53:1c:69:c4:db:94:a2:f8:b0:5d:79:a5:b7:00:
f7:28:7d:9c:68:89:f0:73:a1:b7:55:f5:e8:c9:2f:
0d:1e:28:56:df:7e:98:96:a5:9e:95:13:1f:ec:a3:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3B:95:B8:C9:1D:B7:56:37:42:62:58:6E:96:B5:32:B8:64:63:30
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:53:86:79:73:32:ab:44:38:80:b0:a3:6b:aa:61:f5:d2:9b:
1d:e1:c6:36:fe:6a:ea:94:0c:fa:f7:1e:95:43:7e:bc:71:8e:
65:04:5e:dc:4f:41:cf:72:8e:06:94:6d:1b:f9:4a:f9:23:ca:
9b:eb:5d:d3:96:03:0d:c1:92:65:22:b3:2c:db:56:0c:07:67:
77:55:d2:ab:de:c5:73:bc:8f:4d:e4:0a:90:c1:0e:04:ff:f9:
2f:81:ad:bd:4a:92:90:e8:53:af:aa:19:59:f2:19:c4:0b:36:
ad:bb:63:30:eb:0e:e0:01:c1:4d:1b:f7:d5:0a:8d:ce:89:75:
4d:07:5e:d0:60:81:91:40:6b:6c:4e:70:c7:c9:1c:71:15:90:
3a:d6:01:ef:05:a7:e6:f1:03:4a:74:9f:e8:6d:ac:ba:50:f8:
55:27:0d:0b:f7:90:2c:ec:c3:44:f5:c3:3f:cb:5c:04:8a:e9:
7a:e0:75:c2:05:ee:3d:c9:c9:8b:aa:61:f7:73:6c:fa:ad:ae:
f4:0b:2f:e7:8e:87:43:b0:56:a4:93:ff:31:cc:d1:6c:3a:36:
56:3f:53:80:4d:6c:bf:cb:85:4f:ae:4c:10:91:b4:76:b3:32:
b8:b8:25:89:68:14:c6:d4:04:59:b2:c1:4e:49:ba:b8:90:8b:
ea:42:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:42:59 2025 by rpki-client