Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
File: OPp_x3GCjPs5cigk9_3z7cSzxSk.mft (raw, json)
Hash identifier: yRLWRW2o9+CSQ8YyUf70jSlnM8yEE/RH8A8T/oqojlk=
Subject key identifier: 4D:38:F4:EF:44:91:27:53:65:E6:60:9E:92:85:6E:7E:6A:10:4C:1D
Authority key identifier: 38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29
Certificate issuer: /CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529
Certificate serial: 0198A1965A1D75EBBE074B1EC4933A835D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
Manifest number: 24
Signing time: Wed 13 Aug 2025 04:00:41 +0000
Manifest this update: Wed 13 Aug 2025 04:00:41 +0000
Manifest next update: Thu 14 Aug 2025 04:00:41 +0000
Files and hashes: 1: OPp_x3GCjPs5cigk9_3z7cSzxSk.crl (hash: vt5ss+8OJuJRrteNNfQuaACN9YvplLvgDOlDgQKnej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:5a:1d:75:eb:be:07:4b:1e:c4:93:3a:83:5d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529
Validity
Not Before: Aug 13 04:00:41 2025 GMT
Not After : Aug 14 04:00:41 2025 GMT
Subject: CN=4d38f4ef4491275365e6609e92856e7e6a104c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:e1:30:2e:32:24:cb:cc:9d:54:be:52:b3:
6e:ec:69:53:eb:c4:ec:53:af:e3:b5:96:96:5d:06:
8a:47:c6:88:7e:93:cb:70:61:00:4e:bb:2c:07:75:
0f:ab:55:8f:8f:26:df:38:79:8b:45:ca:85:66:ad:
5b:b4:6b:29:21:4a:93:2f:77:b5:05:1c:78:79:72:
3a:da:3b:af:2d:94:95:ae:6b:32:ed:d6:62:17:52:
0e:d0:4c:44:93:39:33:93:1e:32:99:e2:42:bf:f1:
d5:54:1c:ad:e2:7c:f9:4d:fd:ae:5c:41:e2:6e:c1:
10:92:0c:11:78:6d:c3:ba:c2:92:a7:ad:26:fa:87:
92:d7:8b:fd:6b:94:c8:e8:11:0e:54:ec:3e:61:93:
90:f4:88:dc:57:94:b0:78:aa:be:5f:8a:f9:35:28:
c5:89:ee:ac:77:07:ee:4b:5f:1e:17:40:b2:88:d4:
b8:78:47:9e:31:93:29:23:66:01:2c:2e:05:73:59:
09:68:a7:c3:01:7d:89:12:f0:04:a1:a6:49:80:85:
03:aa:92:6b:88:5a:91:60:52:7a:fd:e5:63:bc:0d:
cc:ca:ff:4f:99:ee:49:77:8b:bd:f4:eb:54:6f:7b:
ec:74:08:44:77:d4:fd:d7:70:a8:d1:ac:22:45:02:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:F4:EF:44:91:27:53:65:E6:60:9E:92:85:6E:7E:6A:10:4C:1D
X509v3 Authority Key Identifier:
keyid:38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a8:ed:ff:b4:8c:c7:ed:1c:5c:b5:85:c5:d8:ef:2e:5c:82:
b7:ca:4b:be:1e:29:e7:59:8f:d9:32:52:01:d0:f2:24:bf:8a:
fe:c2:a3:66:34:ae:b7:7c:e0:ce:4e:dc:aa:f5:93:88:eb:74:
af:4e:80:eb:0c:07:1f:88:be:83:6f:df:a9:27:84:c2:6f:18:
fe:5f:47:08:75:ed:0a:ab:f2:d1:a5:69:3d:4c:e5:05:ed:bf:
41:56:dd:01:ee:b6:b5:99:25:03:30:14:c1:2b:83:53:89:46:
c3:9b:d1:e4:94:dc:51:8c:63:6e:b0:fe:20:f6:5f:01:9f:b0:
88:81:f7:f1:9a:2a:a2:bf:66:dc:e9:45:7e:4f:32:02:80:dd:
c0:ec:00:c8:0d:c4:44:5a:4c:7e:d4:92:c8:8c:2b:a7:37:ee:
f0:cc:13:12:b8:8e:14:90:e7:a8:34:90:07:12:68:c1:90:f9:
1a:67:4e:c7:c6:8b:30:28:e3:e2:1d:d5:21:e3:12:44:dc:41:
0f:18:27:b2:d6:5a:55:51:8d:73:ce:37:53:3c:3a:96:2c:34:
86:da:d7:c9:db:56:7b:11:b6:e5:43:1e:f5:2b:18:24:31:1d:
a0:71:ed:c7:c7:97:81:a6:40:b9:7a:0f:c2:99:af:1f:44:38:
a5:6f:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:33:52 2025 by rpki-client