Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: vuZQ4/siweITVI5uEURCEgaF7kUcxAUhbO5fh6cx/yw=
Subject key identifier: 7A:70:4E:79:1E:B1:ED:61:C6:CD:26:BB:D1:29:32:EE:6B:EF:13:D8
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 019A4F9980F7618E307E7C6F46512663971D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 16:00:51 +0000
Manifest this update: Tue 04 Nov 2025 16:00:51 +0000
Manifest next update: Wed 05 Nov 2025 16:00:51 +0000
Files and hashes: 1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=)
2: GAcb3_GTi9es4ti94Ex9da8Yuuo.roa (hash: hXt1K6MNNmm3FVbMZur0tZVjSZe1csXYHc6pvZG31yI=)
3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: QkihFGBJxxuEMcYd7il2o/3EsCjPoZhRkNa4WpFcDVI=)
5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=)
6: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:80:f7:61:8e:30:7e:7c:6f:46:51:26:63:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Nov 4 16:00:51 2025 GMT
Not After : Nov 5 16:00:51 2025 GMT
Subject: CN=7a704e791eb1ed61c6cd26bbd12932ee6bef13d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:0d:0e:3e:87:71:73:7b:d4:15:5a:1d:ba:
30:b7:e8:8e:9d:f2:4c:af:7b:5a:87:6e:2d:5a:94:
3f:05:bf:b5:d2:96:e6:dc:6b:d1:d0:4d:56:f8:6e:
38:9f:f6:e5:13:51:ef:c2:f9:0d:ac:d8:84:a5:b7:
04:f3:7b:9d:b6:44:94:4d:ff:9a:e9:f6:bb:3a:fb:
f1:f0:7a:01:ff:59:3d:33:ee:6d:02:23:51:d8:1a:
0b:44:1f:55:27:22:3c:ec:7e:9f:bd:57:ad:67:da:
7c:87:8a:5b:b7:ae:7c:b4:5d:1a:b4:92:18:ee:3f:
ad:12:a6:74:5e:01:d7:cb:f3:2a:45:11:f5:57:9a:
03:71:60:bd:9c:95:b5:5c:f8:61:f5:37:d5:ef:29:
9f:9c:f8:b4:20:ee:87:1d:fc:97:a9:e5:de:49:50:
6f:50:1e:a9:a9:a7:d1:3c:8e:e4:13:f2:a2:5f:07:
65:46:8d:95:2d:f5:16:9c:af:bc:07:e8:e6:56:99:
b4:a0:3c:90:2d:ac:56:3a:5a:a6:57:e9:c7:69:23:
e3:ab:a7:60:86:ee:b6:51:54:d3:25:73:12:80:7b:
ae:2b:04:ed:93:11:15:2b:a2:2d:4e:92:8b:a6:98:
e4:d7:9c:8b:a3:fa:ef:78:4c:59:c1:87:b6:f3:86:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:70:4E:79:1E:B1:ED:61:C6:CD:26:BB:D1:29:32:EE:6B:EF:13:D8
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3a:17:f6:59:da:34:ff:96:5e:7d:2a:36:f4:7a:90:da:25:
51:c4:67:0d:51:90:0d:3b:7c:56:41:eb:d0:55:12:a9:57:03:
21:e8:2c:98:75:b8:28:3e:ba:6c:74:ce:41:3f:53:f0:e5:8e:
8b:e7:10:bf:11:a4:80:b5:a7:4d:f1:6a:50:ea:14:a4:9d:85:
2e:b5:f1:3b:3a:c0:a7:a9:07:dc:11:c0:64:8d:b0:de:9f:47:
3d:b2:03:fd:40:17:3c:64:2f:bc:0b:f7:50:d8:03:83:c4:af:
3c:77:ed:a6:c5:21:e5:89:9b:04:6b:03:ca:e2:73:3c:68:dd:
f0:e0:0d:1a:f2:be:cb:8c:03:ce:b3:ba:24:e0:a2:c0:78:d3:
95:fe:05:92:c6:a4:5c:95:e2:24:c3:87:20:f5:ce:dc:7e:fa:
4b:c6:22:51:4e:c1:bf:9c:40:30:28:2e:4b:32:23:76:be:93:
7a:ca:64:4b:78:ed:f1:fd:81:5f:8e:09:d7:56:da:31:82:26:
c3:f6:dc:a4:25:b8:ac:8e:5b:1d:bc:ba:57:22:e9:e0:1a:dd:
40:81:6e:62:51:56:ef:2b:12:30:a6:f7:c1:85:89:b5:af:a1:
c6:b7:03:d4:ca:95:68:47:e7:b1:f9:69:bf:f2:60:1a:c6:a9:
f7:2c:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:33 2025 by rpki-client