Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: qkAS1uN9MQIQgwB/0KLcF9gElpxzSCLFWQVVCkD+9uE=
Subject key identifier: 58:71:82:D0:B0:4C:17:CC:63:B8:9D:2D:EE:30:5A:F9:F0:7B:6A:D5
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 0199228C5C74DDFB962B1EA56E05CC6FA3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: Ef4eUhMlI8w5mA8diUYW9m/W863SuB2ehW3NJgy8EGg=)
2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5c:74:dd:fb:96:2b:1e:a5:6e:05:cc:6f:a3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=587182d0b04c17cc63b89d2dee305af9f07b6ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:27:f1:3d:69:e4:ec:05:dd:5b:2d:38:d1:
cf:85:19:ec:c8:06:64:9c:3f:02:a2:54:52:11:8b:
3f:5d:f4:ec:80:ac:a4:a7:1f:63:7a:d2:32:f0:a0:
f9:e7:4c:b8:18:5b:67:93:80:3e:c0:2c:39:16:eb:
d1:d1:5a:89:92:d1:a1:ba:65:8e:6d:6d:c5:69:15:
2d:47:e9:cf:33:76:ec:34:bc:53:65:c1:7e:04:df:
1c:1a:e7:64:92:22:cd:d1:53:bc:1e:b9:fb:e4:78:
35:55:8d:eb:ed:4d:e2:2d:11:c8:4c:49:27:cb:ed:
ee:af:f7:0f:f3:81:ba:38:89:da:88:87:a2:75:67:
28:3b:f4:7b:b7:1f:eb:a3:65:56:d6:81:97:13:5f:
30:3f:a9:8a:ec:6c:95:17:7e:d3:f4:15:6f:e0:5b:
8e:4a:64:c5:b6:bb:ff:b2:54:34:b7:84:37:38:42:
d8:e4:e8:47:65:ab:97:4d:45:31:4c:cd:03:6a:aa:
46:1b:83:47:2c:3c:45:bd:ee:13:53:8d:e3:6f:1b:
34:43:f4:b2:48:1b:63:b7:26:ae:9f:d8:aa:35:83:
fd:e5:63:a5:a9:be:c0:57:b7:cf:e6:0f:86:b8:77:
e9:36:aa:16:6e:94:b5:1f:e9:a6:da:c6:5e:5f:1d:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:82:D0:B0:4C:17:CC:63:B8:9D:2D:EE:30:5A:F9:F0:7B:6A:D5
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1e:70:46:e4:42:e1:91:7b:9c:0e:56:3e:c7:1b:0e:a3:1b:
78:6d:13:fb:06:01:df:31:42:80:03:c2:ff:65:13:77:73:0d:
3a:da:1b:b7:ca:c3:cf:b6:e0:29:85:89:55:00:a4:28:86:4a:
31:91:d6:9a:51:0a:83:43:dc:80:c8:5a:70:d6:83:bf:29:04:
76:d3:c9:54:23:87:55:63:40:49:d0:3b:b0:a7:77:38:3d:da:
e1:e2:09:67:dd:19:10:95:ee:06:2e:11:95:44:36:8a:ac:53:
c5:3b:c9:56:51:29:99:fd:71:8d:77:53:13:73:f1:e9:58:96:
a4:c8:de:e6:59:a7:9f:ec:d7:43:e0:e3:d7:76:b8:b8:7c:66:
f1:3e:ea:13:ce:52:55:d2:a2:bb:ae:dc:1c:57:05:ac:d5:08:
68:5f:1e:47:a6:26:3d:c3:b8:0a:fd:e2:38:50:64:a6:18:fb:
14:3c:68:28:19:85:1a:fa:65:65:57:9c:7c:6f:e8:1a:d4:f9:
45:cb:ec:08:c0:26:ca:5c:97:e8:99:88:9b:20:30:cd:33:3d:
a5:6d:d1:27:53:eb:93:4b:58:c1:c6:17:73:05:e8:ef:9d:d6:
6f:ff:99:62:0f:3d:76:03:b2:5a:23:fc:70:cd:a3:95:20:7b:
bd:c5:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:47 2025 by rpki-client