Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: d7badKHrej0ekzIbjOb/XBNq3j6zTTqPGdb7nlPtBj4=
Subject key identifier: F2:42:69:0A:31:73:C8:2B:D8:FD:ED:F4:01:BB:18:13:0A:37:C1:A5
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 019A4E865F58B63C247F90C89F6FBB8D7B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 02E7
Signing time: Tue 04 Nov 2025 11:00:20 +0000
Manifest this update: Tue 04 Nov 2025 11:00:20 +0000
Manifest next update: Wed 05 Nov 2025 11:00:20 +0000
Files and hashes: 1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: LDMN0/vXo0OHsuwBoXxnOUK4ASGOCx1C8XhRBdEl1yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5f:58:b6:3c:24:7f:90:c8:9f:6f:bb:8d:7b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Nov 4 11:00:20 2025 GMT
Not After : Nov 5 11:00:20 2025 GMT
Subject: CN=f242690a3173c82bd8fdedf401bb18130a37c1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:dd:8c:75:13:04:06:3b:eb:64:cb:69:ad:
db:b6:7d:46:c6:c5:28:a0:67:bc:11:84:32:b5:3c:
44:97:e9:2c:52:e5:3b:be:f5:7f:10:ed:2d:f7:8e:
b0:92:d3:6c:b8:2f:e5:64:23:d0:29:1d:6b:8b:b8:
11:72:f3:72:0b:9e:28:a6:16:ea:96:b0:6f:7d:26:
1e:39:2b:9c:5b:68:07:ca:57:45:cd:1d:70:6e:f7:
81:0d:34:01:26:42:a2:d3:02:f9:3f:f5:a4:37:be:
32:f6:1d:ab:ba:c0:77:57:b9:68:d1:1f:82:f5:c2:
15:b7:ac:14:b8:fd:84:e7:85:dc:85:e9:06:d1:4b:
45:0d:31:4d:59:cd:58:d0:96:2a:2d:99:a8:2a:d8:
64:32:a6:d3:70:72:f8:b7:91:55:cb:9b:97:87:74:
15:4a:93:bc:51:3c:e0:81:1e:54:2d:4a:53:73:20:
23:a7:19:d5:cf:30:1b:06:40:70:c7:fe:3f:cd:3c:
6e:81:33:f0:c6:ee:3f:34:46:b1:e2:9b:d4:43:48:
db:1c:d2:33:03:1a:4f:d1:60:1b:24:0c:77:5f:82:
a7:c2:6c:48:05:0a:11:9d:91:8f:50:80:c7:01:0f:
02:81:5e:cc:59:6e:e0:3a:d6:eb:96:98:9c:cd:9a:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:69:0A:31:73:C8:2B:D8:FD:ED:F4:01:BB:18:13:0A:37:C1:A5
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ba:28:8d:aa:19:7c:66:fd:35:a1:c8:03:37:c0:4f:96:a7:
b5:19:4d:a7:fe:c6:fe:5d:7e:1f:a0:68:94:31:78:fc:cd:b7:
d6:ec:cd:2e:ca:55:ab:dc:22:8e:22:8e:51:89:a3:35:43:b0:
e6:1f:96:64:4f:f5:8e:2b:e5:cb:f6:f5:97:53:19:c9:60:e5:
1a:27:4c:aa:65:02:17:11:8b:bf:3f:50:6b:07:b6:a1:35:f4:
9a:17:ff:22:76:af:a1:6b:d1:3c:e1:3a:0b:24:e1:85:fc:23:
7b:d1:40:18:41:b6:dc:43:0d:d1:4e:01:c8:05:a4:1f:8b:1a:
c1:8e:a5:bf:3f:bd:d3:ae:cf:19:62:b3:91:54:93:f6:f8:56:
c9:83:49:13:e7:e6:0e:7e:f8:51:49:5e:12:c9:86:8e:51:2e:
b6:93:98:e3:6a:60:3c:a4:80:5d:a6:78:5d:13:7a:a9:ee:ea:
c3:e8:94:60:00:23:aa:0c:84:7d:0a:67:90:54:9c:65:ff:aa:
c7:0f:a7:59:8d:57:75:4c:6f:95:c0:67:a9:1f:4d:c7:d4:e8:
fe:df:e9:54:3e:c4:2e:7a:e6:73:8b:2d:35:c7:4d:7d:a1:17:
88:d3:10:54:50:ce:82:fb:39:25:65:48:ec:d4:2a:a0:8f:1b:
8a:bb:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:22 2025 by rpki-client