Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: /PTdEb9WvakSKAGooo13ZOPPfI7b+njkNPWoFTPrBjw=
Subject key identifier: 5A:B0:4F:37:84:C0:16:D1:D6:C6:48:A1:B5:F7:C4:87:C1:37:C9:AD
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 019895C9355A5565498824E9C1EF3EF317D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 0445
Signing time: Sun 10 Aug 2025 21:00:48 +0000
Manifest this update: Sun 10 Aug 2025 21:00:48 +0000
Manifest next update: Mon 11 Aug 2025 21:00:48 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: pfxLeBMK0tICWQi0Demxdh5db8gyf7ejb4LNLDWgGMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:35:5a:55:65:49:88:24:e9:c1:ef:3e:f3:17:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: Aug 10 21:00:48 2025 GMT
Not After : Aug 11 21:00:48 2025 GMT
Subject: CN=5ab04f3784c016d1d6c648a1b5f7c487c137c9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:b6:8f:3d:b9:22:ba:d5:01:7d:de:24:f4:
c3:7c:2b:e2:ae:6c:ca:d4:9b:b1:49:d8:31:a7:ef:
42:e4:42:68:e3:c8:45:aa:cc:bd:d0:b3:ee:d9:30:
f2:f5:12:af:63:e5:d2:d6:5f:b2:40:e3:1a:24:e6:
73:a3:22:cc:89:be:45:49:ac:8f:1b:13:89:f2:f9:
88:f0:e6:4f:51:29:28:94:b8:d3:ec:44:5c:78:86:
62:a5:ea:fd:9e:af:fd:09:8b:80:c3:f2:fa:f3:fa:
09:6d:fe:7f:15:00:19:25:ac:ec:f5:9e:3e:e3:70:
9a:fc:9a:ef:bf:f1:d3:34:ce:c4:1c:8c:11:b7:ea:
bc:3c:10:9d:a6:77:b5:c8:6f:bf:e4:7a:70:2f:8c:
f0:d2:ba:70:96:fb:6b:de:c6:a8:da:8d:97:b3:b4:
c1:ec:c4:bb:ab:bf:8a:aa:01:b8:bb:8a:89:ff:88:
13:47:a3:34:4c:e7:16:bf:ed:28:1c:34:ee:a0:53:
74:bd:23:a8:8c:69:a3:05:f2:54:c5:7d:4e:c1:6b:
07:71:34:41:3f:50:ef:d6:3a:8b:63:b8:9f:27:a0:
25:87:c3:9f:88:a0:7b:68:d6:ba:67:3d:d7:78:89:
86:c7:45:a5:b3:5c:fa:d4:50:ef:35:92:94:73:16:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B0:4F:37:84:C0:16:D1:D6:C6:48:A1:B5:F7:C4:87:C1:37:C9:AD
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:92:df:43:43:7d:de:84:8b:33:2d:d3:c9:1c:72:c6:83:a1:
54:ef:90:28:6b:bb:e3:95:62:1f:3b:03:b6:09:fa:1c:51:05:
0c:d5:f1:cd:81:e3:e5:07:c4:1d:80:70:cc:3f:d3:63:e4:17:
74:b0:ea:52:b5:4f:dd:94:fb:cb:fd:b5:fd:aa:dd:de:f6:45:
0f:66:09:c4:25:d6:bf:3f:78:e0:87:9a:af:4d:b2:73:c5:ad:
eb:6b:fd:72:1a:3a:0e:52:7e:e0:ba:6a:95:ed:75:c7:49:49:
fb:7a:6f:df:eb:c8:58:97:00:68:9f:65:53:29:c3:82:57:28:
bd:6f:9d:ba:2f:15:ed:45:dc:e9:8e:5f:bf:0e:e0:47:cc:7a:
ca:c1:94:56:7c:b2:cf:71:09:93:8d:a7:6e:46:b4:76:f4:a5:
15:4f:5a:db:d7:b2:57:33:03:73:9e:49:b1:8a:e8:54:96:cc:
16:b3:57:d9:2d:0f:46:6c:9e:bf:33:e5:9f:2f:d0:de:2b:b2:
4d:fe:d6:a0:78:75:10:f0:34:3e:73:c8:8c:59:b0:a8:a0:e9:
8d:ba:88:22:b2:bd:d5:2e:a6:d1:c9:7d:66:cc:8e:1c:98:f5:
2b:64:90:f3:ab:e8:14:94:3b:a3:02:cf:e5:54:a5:55:2e:90:
1f:6a:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:21 2025 by rpki-client