Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: LQWp3z8wVOrcG0ohub6QfaKbaD4T7VmEQ6txlvIn4Lg=
Subject key identifier: A1:6E:F7:26:A0:25:D7:DF:56:07:6E:6F:30:41:66:96:CF:02:5F:AA
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 019A526350C9ADD91348F7CE3D8E016C1ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 05:00:31 +0000
Manifest this update: Wed 05 Nov 2025 05:00:31 +0000
Manifest next update: Thu 06 Nov 2025 05:00:31 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: 4onNOX3a50HVhbL5maks+58rnRXXkZiAzi9LycSkjGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:50:c9:ad:d9:13:48:f7:ce:3d:8e:01:6c:1a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Nov 5 05:00:31 2025 GMT
Not After : Nov 6 05:00:31 2025 GMT
Subject: CN=a16ef726a025d7df56076e6f30416696cf025faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:fa:06:e7:b1:d9:70:0a:69:b3:7b:3f:60:
2c:55:4f:5e:76:f9:72:94:90:71:3c:c5:60:09:1b:
c5:6b:06:ac:ef:b9:5b:58:af:f9:4a:b1:89:1e:e1:
c4:5c:5d:3f:46:8d:7e:ae:aa:a1:5b:68:7f:65:f0:
5a:03:57:55:f8:65:b5:2f:53:29:34:68:b5:f0:b6:
ee:a4:95:ef:28:12:de:78:2f:cc:86:bb:da:5a:51:
89:1d:f7:aa:38:4d:bc:d0:33:03:85:82:bf:33:86:
30:c2:ae:e7:3a:ba:40:40:fc:5d:e1:af:c4:c9:07:
c7:1f:b2:6f:10:22:c0:b3:2a:c6:ba:bc:25:56:95:
97:47:c6:d7:6a:da:70:35:2b:9c:87:b2:f2:37:09:
1a:25:7d:d1:6c:ba:28:99:93:23:3e:f7:6a:1d:1d:
53:1d:1a:9b:8b:4d:44:a1:5e:90:98:a8:d7:31:2e:
08:2f:4b:d3:fc:ad:18:f0:99:bf:a2:93:8a:b7:bc:
01:f2:23:4b:07:27:1e:17:7e:dd:cf:30:f4:89:05:
1e:df:25:e4:16:be:72:3e:e8:c9:2d:5d:c3:28:13:
e2:28:63:5c:ce:af:33:1f:f6:51:02:5f:c6:f4:6a:
58:f5:65:f4:bc:28:02:8a:a5:62:36:a3:9d:3d:88:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:F7:26:A0:25:D7:DF:56:07:6E:6F:30:41:66:96:CF:02:5F:AA
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e3:ba:f1:54:6d:e6:0f:9f:57:49:55:2f:c4:1c:43:72:46:
e0:0b:e3:5b:82:00:3d:21:70:69:ec:e7:8f:4f:7f:ee:18:01:
cc:51:37:15:be:f6:7c:42:68:d2:a9:7e:85:a1:b6:a1:af:8f:
ac:6d:d6:30:fb:ee:5e:ad:cc:6e:6e:49:c9:44:24:4b:0a:29:
1b:43:22:6c:71:6e:4f:72:26:34:9e:b3:5f:89:1f:f8:80:07:
d7:b9:d6:25:a3:c6:4a:20:8a:e7:2a:fb:33:38:e3:c5:8b:15:
8e:09:ed:a2:7f:76:72:c6:68:ab:0d:ad:83:5d:d4:1d:de:b5:
dd:40:f1:e5:0e:f2:cb:c1:01:2e:ad:91:be:ef:eb:bd:98:95:
44:4a:c9:bf:c4:9f:3b:a9:39:e3:11:b2:3a:ed:b0:a1:b7:f0:
4b:0f:fa:5b:24:56:d0:7e:1d:7b:0d:f7:68:f6:cd:5f:04:65:
d1:20:76:20:24:53:20:85:95:e9:a9:5a:1d:32:b7:0a:eb:4d:
b4:fc:05:ad:b3:0b:84:b6:6c:c8:96:01:58:0b:43:40:b1:cb:
ec:b9:cc:f5:27:be:72:86:e2:8b:01:96:f4:50:ae:41:b6:bf:
f2:03:66:2d:40:61:4c:a7:7b:e4:c1:a0:18:2c:8f:3e:92:2a:
72:b9:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:12:54 2025 by rpki-client