
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: zQ97Z+s3SqqDkjBR/S31nlLlIFzGBLcpbacgxGQq9R0=
Subject key identifier: 1E:AA:E3:DF:3D:77:6E:F1:3D:89:07:8B:85:91:6B:52:FE:83:0A:CA
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 01987F0AAB7E0F336B1DDA18BC41700A7FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 01F7
Signing time: Wed 06 Aug 2025 11:01:02 +0000
Manifest this update: Wed 06 Aug 2025 11:01:02 +0000
Manifest next update: Thu 07 Aug 2025 11:01:02 +0000
Files and hashes: 1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: QKWmEEoWEQ4MHxmQFPW8SbLlRdGfa+vwEaOhLE4zEMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:ab:7e:0f:33:6b:1d:da:18:bc:41:70:0a:7f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Aug 6 11:01:02 2025 GMT
Not After : Aug 7 11:01:02 2025 GMT
Subject: CN=1eaae3df3d776ef13d89078b85916b52fe830aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:76:c2:5b:74:53:d1:fa:d3:f4:e3:7a:e8:
ae:d0:03:a0:aa:52:6c:6a:a9:1b:0b:ae:60:dd:b3:
f1:e8:22:5f:a3:52:7d:4f:33:99:96:cb:32:e6:dc:
f3:35:ec:90:38:e4:fa:ae:54:a9:8d:91:bf:55:dd:
f1:e2:60:94:b6:9a:85:fa:bd:36:8a:14:95:06:16:
19:4a:47:5e:b5:cb:04:e2:d2:07:3d:5d:fc:f0:27:
e4:6b:b6:14:44:8d:54:1e:02:bc:ee:c6:20:55:d4:
f4:33:36:90:db:3a:4c:53:22:dd:9d:09:56:28:11:
43:de:30:13:41:cc:1d:aa:9b:ca:3e:08:c9:16:a6:
2d:cc:e7:0d:73:cf:31:b1:7d:79:eb:2d:95:53:bc:
49:d1:56:23:0d:02:2b:a0:ce:3f:f8:ca:27:d6:03:
ae:a1:49:a4:27:83:30:b7:28:c2:75:db:9d:9c:85:
29:d4:ab:d7:04:bf:99:3c:aa:fd:0e:e9:a1:b7:08:
7c:85:11:b7:25:5a:a0:29:92:71:1f:1a:79:53:e0:
a3:9e:15:34:89:04:f0:65:92:fb:18:37:16:1d:70:
15:db:8a:38:24:97:26:46:7e:f7:5e:8c:5a:09:60:
93:a3:4d:8e:52:9d:bf:a6:22:93:36:86:4b:ff:c1:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AA:E3:DF:3D:77:6E:F1:3D:89:07:8B:85:91:6B:52:FE:83:0A:CA
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f7:64:c1:9a:ff:13:d6:b5:5f:6e:bd:70:7b:41:9e:a7:e5:
b7:ae:c1:18:40:a9:d7:f9:0c:7c:37:d9:36:75:d8:35:bb:4b:
a1:bc:8b:3a:0e:dd:51:ee:58:39:90:d5:23:20:8d:17:67:9a:
cb:33:e5:fb:8e:45:47:09:97:47:66:12:15:6d:8d:4a:7a:3d:
70:be:41:f9:fa:e6:72:5f:e0:ed:31:36:ce:39:01:d6:2a:5c:
70:5b:1f:07:ee:f8:7b:2a:d5:4f:01:2a:99:21:00:40:0d:50:
bf:8c:0e:be:ab:8d:61:83:99:f4:b3:73:29:bd:2c:40:ee:8a:
88:d8:eb:4d:c7:3e:71:29:7e:d3:d2:e5:05:6c:6a:5f:f4:12:
78:60:25:c7:7a:ae:4a:a7:5e:25:e0:41:be:f6:df:a2:8f:a3:
54:46:e2:76:d0:87:f2:90:b1:25:34:7d:fd:87:0b:d3:a5:e8:
0b:6d:b6:1a:08:82:cb:4b:ec:47:b6:b3:b9:80:af:31:d4:2d:
3c:1c:de:7f:fa:be:de:94:c6:b8:11:a5:14:01:e1:50:b7:fe:
d5:ba:9d:18:a3:50:09:85:10:52:7e:3c:f7:cc:39:ae:16:91:
b9:fb:81:6b:9e:6b:1b:29:47:42:34:fe:f7:a9:74:34:f3:d2:
fe:ca:92:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/Cqt+DzNrHdoYvEFwCn+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTc3YzFlNGU3MDEzOTkyZDRjNGQwZjMzY2NkNzcyZmFj
OGQ5M2IwHhcNMjUwODA2MTEwMTAyWhcNMjUwODA3MTEwMTAyWjAzMTEwLwYDVQQD
EygxZWFhZTNkZjNkNzc2ZWYxM2Q4OTA3OGI4NTkxNmI1MmZlODMwYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSF2wlt0U9H60/Tjeuiu0AOgqlJs
aqkbC65g3bPx6CJfo1J9TzOZlssy5tzzNeyQOOT6rlSpjZG/Vd3x4mCUtpqF+r02
ihSVBhYZSkdetcsE4tIHPV388Cfka7YURI1UHgK87sYgVdT0MzaQ2zpMUyLdnQlW
KBFD3jATQcwdqpvKPgjJFqYtzOcNc88xsX156y2VU7xJ0VYjDQIroM4/+Mon1gOu
oUmkJ4MwtyjCddudnIUp1KvXBL+ZPKr9Dumhtwh8hRG3JVqgKZJxHxp5U+CjnhU0
iQTwZZL7GDcWHXAV24o4JJcmRn73XoxaCWCTo02OUp2/piKTNoZL/8Gl5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6q4989d27xPYkHi4WRa1L+gwrKMB8GA1UdIwQY
MBaAFKKXfB5OcBOZLUxNDzPM13L6yNk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQwNzItMzJkZC00MzJkLTllYTIt
MjYzZTQ2NmU0YWQ2LzEvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82OWQwNzItMzJkZC00MzJkLTllYTItMjYzZTQ2NmU0YWQ2
LzEvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPdkwZr/
E9a1X269cHtBnqflt67BGECp1/kMfDfZNnXYNbtLobyLOg7dUe5YOZDVIyCNF2ea
yzPl+45FRwmXR2YSFW2NSno9cL5B+frmcl/g7TE2zjkB1ipccFsfB+74eyrVTwEq
mSEAQA1Qv4wOvquNYYOZ9LNzKb0sQO6KiNjrTcc+cSl+09LlBWxqX/QSeGAlx3qu
SqdeJeBBvvbfoo+jVEbidtCH8pCxJTR9/YcL06XoC222GgiCy0vsR7azuYCvMdQt
PBzef/q+3pTGuBGlFAHhULf+1bqdGKNQCYUQUn4898w5rhaRufuBa55rGylHQjT+
96l0NPPS/sqSFw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:19 2025 by rpki-client