Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: Cq27TcTOPM3hfva5QA7rRGXWKcF+0I7Xop0fk7plaZk=
Subject key identifier: 2C:EB:64:48:80:A2:20:AC:40:0A:D3:04:6B:7D:FA:62:A3:C5:48:82
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019923D5B536E1A192CC033D147814BEABE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 04E2
Signing time: Sun 07 Sep 2025 11:00:32 +0000
Manifest this update: Sun 07 Sep 2025 11:00:32 +0000
Manifest next update: Mon 08 Sep 2025 11:00:32 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: W2BkEvVQHiuKYTwD6yJToka/CB5MVHC+G/2rQiCqh7k=)
2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:b5:36:e1:a1:92:cc:03:3d:14:78:14:be:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Sep 7 11:00:32 2025 GMT
Not After : Sep 8 11:00:32 2025 GMT
Subject: CN=2ceb644880a220ac400ad3046b7dfa62a3c54882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:4c:ab:ae:d4:7f:61:b2:74:fa:bd:02:c7:
85:bc:73:a0:ec:78:dd:ce:ab:fe:e2:f4:8a:95:90:
03:28:0d:98:bd:83:33:1c:4e:a3:44:e8:be:09:89:
6a:78:90:15:7d:9b:91:5a:84:c1:64:08:6e:2e:38:
db:f0:45:a4:5f:66:f1:39:0e:66:e1:08:50:dc:3e:
64:c5:8d:0f:69:c9:2b:32:6c:60:6a:10:d1:14:4a:
fd:77:59:23:f5:09:ec:b9:f6:a1:b8:a2:82:4b:8d:
6f:77:b5:cf:09:37:5c:d0:d0:b6:89:c1:e2:e9:29:
d1:9c:0d:da:40:de:50:4c:09:51:5c:11:22:36:ac:
0b:f9:42:c6:a9:2e:12:a1:0f:bc:3f:24:bf:54:50:
5d:94:89:b6:d4:fb:c8:55:68:35:b8:9a:d9:43:62:
c6:0a:44:c4:c0:8a:43:5d:3c:2c:1c:d5:22:3a:03:
85:e9:be:f5:a0:c4:a0:aa:f2:94:4b:68:38:e2:48:
fc:2b:1f:63:55:5a:10:9f:26:5c:33:41:7d:bb:92:
ec:ea:83:b0:0b:63:84:06:0f:3a:c3:c9:03:f4:9e:
71:90:9a:7c:6d:e9:41:90:a7:72:7d:7e:82:fb:60:
0b:96:5e:f3:dd:60:20:63:77:bb:3c:e3:02:a0:16:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EB:64:48:80:A2:20:AC:40:0A:D3:04:6B:7D:FA:62:A3:C5:48:82
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:19:54:0b:1b:3b:a5:29:a7:94:62:06:dd:7d:5a:06:c6:62:
ab:ef:83:58:bf:e9:ac:69:7d:01:fc:bf:f6:1d:58:37:84:72:
d5:20:49:ae:10:01:03:1f:86:6e:fb:66:0b:fb:4a:8e:c4:75:
af:94:c9:c1:08:1e:a7:7d:59:d4:ba:62:8a:2d:6b:33:2e:f1:
22:bb:61:4a:06:36:5f:f6:57:1c:a9:9b:e9:d8:95:a6:bc:d2:
1f:5c:50:41:8e:42:95:73:92:a5:80:81:0f:83:1b:7b:d5:21:
7f:ff:1e:32:16:e9:81:b4:c4:01:53:c7:3c:48:61:1c:06:38:
d6:57:0b:7a:b6:be:f4:bd:67:f3:41:3e:77:1d:1f:ef:1a:52:
33:6c:e8:a2:ff:57:5b:30:cf:dc:ec:e0:d5:ef:45:2d:a0:c7:
c6:58:ea:cd:d7:c5:da:b8:d0:4a:06:f9:4f:64:44:6a:53:5b:
59:a1:ae:1c:3c:ab:6a:03:88:f4:e5:6c:69:02:36:fe:61:22:
5c:4b:a2:52:9b:29:52:a1:b6:f9:4a:f0:57:92:ae:23:77:2f:
87:f1:2c:11:2d:25:c3:12:83:a4:10:89:8a:31:5f:dd:63:ec:
47:85:d5:97:89:fb:ce:fe:28:4d:d6:b0:3c:10:f6:13:92:79:
b3:4e:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:17 2025 by rpki-client