Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: dfOATyMnNr4J/YjDYKz5/ZFxsmza/GYeJN7vpFGdsdA=
Subject key identifier: C9:3B:42:25:F0:13:8C:FB:40:3B:85:A2:39:D1:8F:A8:0B:60:51:72
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 01976EBE4776E6FD2CE2D0D1CA3950A07A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 016A
Signing time: Sat 14 Jun 2025 14:00:53 +0000
Manifest this update: Sat 14 Jun 2025 14:00:53 +0000
Manifest next update: Sun 15 Jun 2025 14:00:53 +0000
Files and hashes: 1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: k5BjfoJu4tV3CgOjDRn/+HVTl6jp/D8jVIP5TfaxRd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:47:76:e6:fd:2c:e2:d0:d1:ca:39:50:a0:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Jun 14 14:00:53 2025 GMT
Not After : Jun 15 14:00:53 2025 GMT
Subject: CN=c93b4225f0138cfb403b85a239d18fa80b605172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:cc:b5:5f:8d:69:91:40:af:3b:45:c3:a5:
33:32:f8:6c:0b:9a:e8:7f:69:9b:c2:af:69:5d:73:
fd:c1:55:6e:ab:78:72:a5:42:fc:f7:7d:1b:24:c6:
ef:18:32:74:24:36:82:7d:af:e7:8f:f2:01:1c:db:
0a:ce:b4:93:29:70:97:46:d0:5c:d6:ab:9a:18:3e:
43:6c:ea:a0:96:e9:63:4d:fc:15:f8:2c:50:d6:49:
39:be:5a:b7:f9:4b:66:38:7b:99:4e:00:48:eb:f4:
36:52:53:cb:9f:12:53:20:f9:ed:61:46:c8:31:ae:
23:a5:59:9b:3b:a5:32:74:39:59:55:62:6b:77:87:
fc:93:6e:6b:c5:03:87:ff:a8:7d:32:37:4f:f0:d9:
86:da:47:94:0e:71:9c:cb:64:2d:6e:bf:79:29:ff:
05:47:d8:e1:b1:be:0e:12:f8:26:d7:64:8c:b5:93:
52:ee:64:37:0b:96:9d:78:01:69:ba:22:64:ea:87:
e8:48:04:d1:54:5c:80:b9:db:a1:89:db:af:27:89:
6d:01:64:31:dc:2c:ca:4e:03:25:71:a0:e4:03:16:
f5:1d:0a:53:53:63:db:6f:47:1c:03:85:aa:98:98:
3c:a6:d8:15:59:b1:c8:f1:1f:10:02:1a:4b:00:c0:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:42:25:F0:13:8C:FB:40:3B:85:A2:39:D1:8F:A8:0B:60:51:72
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f7:2d:a0:65:fa:36:27:26:1d:51:49:3f:1b:69:c7:09:6a:
14:01:27:ec:52:70:6b:00:e3:69:71:e5:c7:fd:a5:37:af:51:
fb:eb:6d:a3:8c:5d:af:3d:46:3d:be:96:5f:8d:90:f2:f3:47:
d3:f4:7e:ed:4d:1f:97:58:65:24:cf:38:68:ed:b4:74:fd:38:
15:2e:b8:02:e9:da:99:e7:2d:b0:a5:9f:80:1b:9d:3c:da:89:
7f:aa:f3:ec:6a:a9:73:3d:3f:1d:7c:a9:e9:67:08:d7:f6:3f:
13:87:d2:0e:af:e3:65:a8:52:52:55:b8:3a:93:ef:c0:94:db:
89:7d:3e:2e:44:a5:79:42:4b:21:41:07:c7:8f:1b:b9:40:68:
1f:03:ca:fd:e1:cc:5a:b0:8f:a4:4e:68:ea:50:82:39:bb:e5:
02:b3:60:b4:4b:f5:24:a0:5a:6a:26:f1:6c:f0:a9:9a:30:bb:
ed:dc:51:2f:c5:21:fc:9f:93:2c:b8:02:9a:40:5d:c0:03:97:
b5:08:31:2f:35:87:33:bd:c9:9e:28:5f:ce:f3:b0:36:c9:6b:
79:15:ad:5b:30:74:d0:34:e3:20:19:fd:bb:04:44:65:50:35:
f0:17:fe:2c:df:ec:46:f0:d4:07:41:5e:9d:6a:07:0e:78:25:
a3:5e:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:48:45 2025 by rpki-client