Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: XdVyZhDJ8glWoFEmH+JbUfzZIxHRLm2xr3SIbzWMZ4A=
Subject key identifier: 1A:7B:52:24:8C:BA:F1:82:FD:DA:9B:4B:68:15:1A:DE:C1:89:A9:87
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 0199FC8F6011DB238859EC2303F70B236B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 075B
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: wvpPpFseAJOXa8u4b8Ur111xbCMVuLWYNBImWxEqycU=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:60:11:db:23:88:59:ec:23:03:f7:0b:23:6b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=1a7b52248cbaf182fdda9b4b68151adec189a987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:98:a0:eb:34:03:3a:ae:a8:be:51:63:b1:
3c:62:26:0f:ea:50:6f:07:82:89:3e:18:49:29:4b:
fc:13:29:96:90:20:52:8f:3f:3a:aa:04:dc:ff:82:
72:cd:2f:78:74:65:f4:85:09:87:ee:41:4e:77:4d:
2c:19:be:d8:e6:86:30:85:b3:4b:b9:bd:c4:35:5e:
3c:b6:c0:aa:63:93:8d:ee:45:c5:a3:d3:05:90:e3:
c5:62:bc:eb:74:a4:44:dd:18:3a:d6:e0:a7:89:2d:
b7:13:90:76:1f:5e:44:df:f8:f1:43:43:9e:12:d2:
2a:49:61:33:27:8b:76:8e:0d:3f:ae:d2:5b:94:0b:
57:24:d3:67:df:72:0b:d7:81:56:fb:58:ff:b9:3a:
42:91:75:c1:67:77:60:f7:99:5d:92:79:ee:fd:62:
bb:c4:1d:a6:09:be:b8:38:f4:b5:a9:ac:32:c4:7d:
d3:3e:86:48:e9:80:68:21:99:e7:22:80:e2:d6:5e:
ac:ba:8e:f4:1f:2c:a9:6a:95:b9:ab:4b:87:d1:9e:
de:c3:85:4c:bf:f3:8a:43:2e:6d:2c:33:cc:fc:cb:
1c:db:81:da:04:25:57:f3:55:7f:2a:9e:f9:b5:67:
0e:75:28:af:f1:c2:97:0a:27:ae:39:f3:e1:6c:28:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7B:52:24:8C:BA:F1:82:FD:DA:9B:4B:68:15:1A:DE:C1:89:A9:87
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ed:fb:68:cd:52:60:98:fc:c9:2a:af:dc:e6:c6:04:91:cb:
33:bb:e8:9f:c3:15:fe:33:26:34:8d:a4:d9:f1:cf:3a:cb:02:
97:a4:65:1a:16:89:23:6d:42:a1:93:0d:db:a7:9a:c7:ae:63:
fb:25:17:29:8c:e5:33:62:45:92:78:16:10:ce:17:f9:ce:1e:
4c:a8:98:55:9a:14:23:32:2a:63:aa:6f:3c:ae:9c:d5:d3:ec:
db:cd:12:30:c3:61:dc:4f:09:2c:ed:45:09:8f:e2:b2:e7:20:
aa:5a:71:56:09:fd:a5:47:a2:25:41:a8:d2:b7:b1:b4:d4:28:
1c:ee:c1:fb:8f:68:29:74:ff:d8:65:4e:88:80:5a:21:03:f1:
a0:1c:f6:b9:d6:cf:8c:c5:1a:8a:61:3a:66:44:33:2a:be:14:
b1:56:62:65:6a:71:39:8e:f5:10:2f:12:19:70:c3:52:fb:6b:
e6:13:1e:8b:b7:f7:a7:0d:e0:23:fd:28:89:bf:f3:6f:8c:18:
ae:fa:80:96:48:a2:3b:a1:98:04:c0:cf:f9:e3:60:33:ac:71:
b8:b1:c5:fd:96:c5:f3:74:41:ce:e3:86:94:c4:a8:c6:48:36:
70:89:50:f7:aa:81:d4:00:bb:50:ff:7f:61:4f:10:32:3f:f7:
86:f0:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:07:09 2025 by rpki-client