Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: +Ygzbv7WEA/iu4FW8Zz8WhuSJ7V2RR4HcaGp5I993/w=
Subject key identifier: 7C:95:16:90:01:09:D0:EF:94:BE:E1:91:69:2F:24:97:07:EB:EC:FE
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01987D1C9F26622775DCDEEEC9DE652F3586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 02:01:24 +0000
Manifest this update: Wed 06 Aug 2025 02:01:24 +0000
Manifest next update: Thu 07 Aug 2025 02:01:24 +0000
Files and hashes: 1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=)
2: AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa (hash: KlOk/fF1w7EKHSk+04TQtjgBWQMEvMF/JZ8yxyO3hC4=)
3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: 4S/eoFuMbXfQZWsO1Zqh+aLURJVg8BjbgJYfmKGdozo=)
5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=)
6: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:9f:26:62:27:75:dc:de:ee:c9:de:65:2f:35:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Aug 6 02:01:24 2025 GMT
Not After : Aug 7 02:01:24 2025 GMT
Subject: CN=7c9516900109d0ef94bee191692f249707ebecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:65:17:88:7a:b6:ff:e1:71:09:06:ce:55:
da:38:29:e8:b4:6e:c0:65:36:84:a5:60:9e:5c:4d:
7e:cb:3d:65:38:5f:ea:e4:4d:e7:e2:75:16:2f:43:
69:d4:55:2e:e9:a5:f7:a3:d7:36:9e:eb:02:4b:44:
4d:be:eb:54:e5:1a:f2:d3:13:e8:ab:f1:c9:db:41:
d7:9b:f7:f9:cf:b7:5b:36:40:b4:82:fd:91:b5:b5:
57:4f:4d:48:c7:fc:95:15:1b:1f:5d:e7:10:6c:65:
ee:76:1f:bb:73:e2:09:71:9d:c2:40:ce:13:16:c8:
50:ee:f4:6b:4f:37:85:03:4c:ac:1e:47:7e:d4:89:
42:0f:d1:a0:56:9f:e7:52:91:47:78:ce:e8:a0:cb:
7b:37:b4:e0:e3:7a:6c:dd:92:8d:bd:4f:81:02:3a:
a7:81:e9:bf:78:d2:9d:9d:4d:ee:e8:b3:18:2f:d4:
c3:10:ec:c6:86:6c:43:c3:3f:18:72:5d:c3:c9:52:
b7:cf:b3:ea:7b:62:0b:89:26:a3:3e:a9:e7:5b:79:
74:0c:92:ca:2e:f7:ea:32:f0:72:ba:ac:fd:3a:58:
64:88:11:1a:a0:38:4b:17:a1:e3:04:b9:1d:49:c6:
3a:d1:2b:fe:b5:a0:2e:b1:49:fe:ef:ed:4d:3a:c9:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:95:16:90:01:09:D0:EF:94:BE:E1:91:69:2F:24:97:07:EB:EC:FE
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c4:db:68:b9:6e:73:66:f3:d4:7d:a9:df:01:95:0b:39:b1:
53:27:03:be:de:27:6e:96:54:33:9e:1d:c6:37:fc:14:d6:fc:
41:7a:6a:9e:d8:b6:94:7c:ba:a1:d3:c5:62:d0:08:c5:2d:ff:
64:6c:1a:68:df:8e:c3:47:55:b0:dd:3b:77:af:c7:29:ce:80:
71:48:b6:34:c1:ce:26:28:b8:21:54:c7:76:d1:a7:90:c5:c2:
59:74:22:36:c2:fc:2a:f7:00:b5:e8:09:78:09:94:7b:7f:d5:
48:44:b6:a6:fe:db:fe:6c:b6:82:98:35:85:11:bc:50:5a:5f:
ac:d3:aa:fe:10:0b:c7:f5:c3:4a:c6:35:5d:9d:90:29:52:1d:
52:0d:31:75:8f:69:ca:56:0f:27:77:e0:cb:f9:20:68:8e:53:
29:41:cf:4b:f4:fb:89:83:42:03:ff:c9:aa:ad:1e:e6:f3:22:
94:3f:3e:56:36:40:8e:29:6d:85:bb:b2:d1:97:ec:f5:df:30:
33:90:c7:70:ee:7b:1f:4f:49:e9:0c:af:76:ae:f8:55:d0:f4:
b5:66:e1:13:03:db:b3:e7:b8:0e:0e:30:57:9a:67:07:9b:01:
3a:c0:19:c6:e4:a2:38:7d:a9:06:f7:76:1a:f3:24:81:88:92:
fe:13:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:11:57 2025 by rpki-client