Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: xNnbLgKFP21x3ah7cBTXp0O656UARilF1GDiz8bH6Z8=
Subject key identifier: D1:BA:82:6B:20:58:1B:D4:0B:29:6E:E1:B1:C4:4B:5D:A1:F8:B5:58
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 0196778C9F2F77EC0C0D5A4EC7D2CD7D1F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 14:00:26 +0000
Manifest this update: Sun 27 Apr 2025 14:00:26 +0000
Manifest next update: Mon 28 Apr 2025 14:00:26 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: OyqGaMCD9P9FXvnKJYWYNEFctCp2xXqvsnhvwc3s4tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:9f:2f:77:ec:0c:0d:5a:4e:c7:d2:cd:7d:1f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Apr 27 14:00:26 2025 GMT
Not After : Apr 28 14:00:26 2025 GMT
Subject: CN=d1ba826b20581bd40b296ee1b1c44b5da1f8b558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:3e:37:a0:bb:0c:14:30:d3:fc:07:d7:aa:
73:41:4c:e1:39:5b:7b:e8:fe:11:ff:83:88:4a:d6:
60:15:0b:ce:56:e9:c0:68:be:6b:33:4a:33:cb:96:
d1:76:d5:11:91:c5:a6:3e:d7:d6:aa:cc:d9:de:e0:
b1:a3:00:a1:55:c9:4c:bd:63:d3:7a:26:34:62:55:
fc:ed:35:9f:34:ae:bc:4b:b4:2f:93:a8:0b:af:f4:
f5:18:fc:13:b6:55:b5:87:53:7f:ba:9d:6b:3c:66:
ef:03:43:36:c6:5c:6b:33:99:7e:8e:ed:c3:16:dd:
51:d4:b3:f3:b7:b1:91:12:ed:31:4c:9c:5d:1c:41:
27:e3:af:1a:4d:af:f3:79:d0:2a:a0:74:2b:8b:49:
f6:13:bc:5b:ca:1d:19:b1:be:f3:fb:3c:ab:2e:4b:
ea:11:cd:a6:ee:ab:02:26:67:51:8a:d2:74:a8:72:
95:cf:7e:bc:38:a8:f1:70:04:f8:7c:6a:9a:77:3b:
d9:9a:bf:ae:ac:ec:bf:6c:32:97:64:7d:b8:71:3e:
73:51:fe:c0:37:e5:25:97:e1:f5:33:b6:8d:b5:3b:
5f:3b:42:9d:1b:66:67:f6:38:07:9b:73:0c:94:cb:
d9:54:e9:4c:ae:d5:1b:ab:90:c5:c6:85:19:da:25:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BA:82:6B:20:58:1B:D4:0B:29:6E:E1:B1:C4:4B:5D:A1:F8:B5:58
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:e9:d0:0e:26:37:d2:54:81:40:f6:59:ce:e4:86:1b:dd:
87:ef:af:1c:fd:aa:56:b5:98:30:c5:1b:85:6e:9f:08:31:86:
05:b5:35:82:e1:d1:56:0b:67:31:93:d8:ad:b1:3e:64:3f:67:
3c:bb:a7:f9:6e:0c:64:74:ea:8f:01:c5:bf:4c:32:8d:d8:8a:
c5:e7:23:f0:cc:e6:34:0f:09:91:bc:95:72:77:b1:43:6a:be:
4f:63:e5:31:68:c1:b9:e3:70:17:39:a6:d5:a6:6b:d7:b4:9d:
97:83:1b:3b:20:17:52:4d:e8:26:62:5b:b5:59:b8:98:eb:9e:
f7:d3:af:ba:2f:bf:5f:dc:5b:7e:b3:6c:a0:6c:4a:58:08:69:
e4:e6:49:c1:69:65:d2:44:5f:54:0f:8d:9c:1a:2f:5b:0f:70:
66:1a:cb:50:56:7d:d8:19:2d:d4:11:51:e6:c6:60:95:b2:05:
b5:11:1a:ba:53:59:1b:69:dd:32:50:b2:da:3a:c2:d1:64:b3:
36:3e:38:14:74:f6:ae:48:07:10:98:5e:44:91:64:62:e0:9d:
5c:c9:3d:f3:1b:fd:b0:02:78:0f:57:5c:3f:8b:2a:92:eb:54:
ad:2a:02:36:e8:c8:e3:7c:f5:2d:99:68:9b:44:d2:07:0a:a4:
9c:47:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:38 2025 by rpki-client