Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File: olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier: OxAq3QsutlUO2+P4uO1H36gmGBzqEdlD7Hz4Ko0kkaE=
Subject key identifier: 82:19:93:A6:28:9A:41:31:71:F7:0B:17:AB:D0:AA:B7:E3:D4:81:E6
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial: 019A71EEA6E207EF8EA0D6A1BE7D0D85D4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: mUrzBMiWJVI5YUFClewHx/eAMV3mAsmuvTJz6F5S4Yw=)
2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a6:e2:07:ef:8e:a0:d6:a1:be:7d:0d:85:d4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=821993a6289a413171f70b17abd0aab7e3d481e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:88:5c:0c:b1:ae:49:b0:23:24:9f:c2:c5:
26:37:19:6e:db:98:20:47:7d:ec:c7:8d:6d:d1:88:
8b:66:00:bd:d0:64:f7:fe:e0:a8:86:ce:a7:58:22:
f3:77:bb:a4:e8:bf:9b:98:e3:01:d2:bc:3c:a6:55:
4a:f0:74:75:cf:9c:a5:36:20:ae:4b:dc:3d:c8:98:
47:d6:3f:83:c9:2b:a6:dd:74:bb:16:b6:03:cb:63:
1a:45:af:ad:2a:a5:f2:7c:d6:3c:6f:da:ca:65:96:
0e:ae:b2:45:09:c1:c7:de:65:ec:bd:15:ed:1f:f4:
e9:78:7a:e3:c9:a5:fc:c1:f1:69:e5:33:3a:d8:67:
31:3e:d4:23:c3:2b:74:b6:a5:34:25:a2:73:80:bc:
6a:33:29:93:21:23:f0:e0:6a:3b:48:2e:a0:2b:85:
c4:a7:bd:fd:31:87:e6:64:ac:a9:51:ae:e3:37:81:
5b:65:69:1f:c0:1b:99:4e:5b:64:8b:1f:25:9f:19:
6d:b8:0f:b1:c6:0f:c4:c3:ec:29:68:46:55:42:fa:
87:0d:c5:cd:65:0b:29:7c:2d:33:db:e8:90:0c:f4:
d8:66:49:32:8e:5a:14:48:62:0c:42:fa:38:37:cf:
d0:7b:6e:65:ee:f7:38:63:56:48:bd:71:fb:02:20:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:93:A6:28:9A:41:31:71:F7:0B:17:AB:D0:AA:B7:E3:D4:81:E6
X509v3 Authority Key Identifier:
keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:33:05:08:f4:0e:69:64:6f:01:7a:62:c8:e7:97:5d:62:
f3:e9:7f:98:ab:00:6b:39:95:0d:1c:3e:49:8f:32:92:01:03:
76:99:77:27:8e:a5:b3:ad:a7:c0:7b:08:60:31:cd:fb:27:52:
ea:30:3f:83:5b:52:0e:b1:56:82:52:ef:bd:4b:1d:db:06:c0:
a3:fb:35:b8:b4:ab:af:95:71:b2:c8:6a:76:5e:f0:41:c4:a8:
04:de:5e:2f:88:d6:54:98:5f:0b:78:74:9d:d8:61:b3:42:b9:
24:d7:3c:70:45:a9:15:52:56:ac:57:10:e1:a5:a1:e8:0b:92:
e0:b9:1b:94:12:60:5b:d1:3d:83:8f:88:75:4b:6c:ba:ed:82:
7c:59:7c:44:55:10:bf:9b:fe:05:23:ed:cd:8d:7d:86:66:b3:
34:2d:1d:71:4f:92:27:4c:53:c1:d3:63:bd:4f:6f:e0:04:be:
9e:a8:25:bf:1f:3e:f8:33:72:fe:a7:94:97:73:d9:7d:63:a7:
10:22:9a:8d:6f:0f:4c:e6:14:62:b4:b4:93:35:07:c6:82:40:
38:ad:c6:0b:f8:3c:a5:83:fc:35:39:14:a5:8b:e6:54:c1:d2:
e7:a7:b1:c3:21:36:a0:12:cc:b9:4d:b9:ab:05:25:b2:ba:48:
95:a6:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:56 2025 by rpki-client