Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: JtyirkQfCw0ktT/OuKuqb8MjKK1304y4jiAuKxQ1xwQ=
Subject key identifier: 81:BC:B3:AF:32:53:95:08:B7:87:F6:CE:29:89:56:D8:E2:54:A0:FC
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 019A4D3CF57790465CC681B8FCB64AEB5BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: ORp/dMnk789939u2pjS8YJ/m92wuQLcaP318NZdJ4+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f5:77:90:46:5c:c6:81:b8:fc:b6:4a:eb:5b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=81bcb3af32539508b787f6ce298956d8e254a0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:78:c2:64:0f:14:85:bc:bc:be:30:5c:1c:
49:73:01:19:2b:a5:16:8f:ec:ec:5e:fc:b3:4f:60:
67:0e:91:e6:7a:33:e9:bb:9a:3f:d7:4b:fa:71:b0:
47:eb:e9:92:9a:3d:47:10:50:e2:7e:70:8e:f6:f7:
c6:23:cc:cb:8e:b4:ba:77:11:99:30:db:48:fa:4b:
2f:fd:14:aa:13:5a:0c:a9:74:32:1a:d8:64:b4:a1:
6e:7f:83:b2:71:7e:e7:48:97:92:5b:ca:0a:32:84:
12:50:4a:1d:88:98:36:4f:d5:e1:a3:22:5a:7a:d0:
ef:6c:c8:30:79:9d:dc:f8:dd:4d:68:d8:10:9b:85:
6d:3b:9c:20:1a:6d:11:6d:b5:a5:ec:eb:26:58:a6:
53:ef:35:53:7b:84:59:ec:29:30:c8:9b:7f:c2:da:
cb:9d:dd:7e:d8:bf:9e:c7:27:19:f6:b9:8a:48:92:
09:17:f4:b6:c6:72:1f:2f:10:39:53:2d:6f:68:1a:
47:20:df:70:66:dc:72:7d:14:48:3e:d9:8a:05:cb:
ff:03:38:71:ab:53:c2:2b:c3:3a:dd:f2:de:dc:25:
89:f0:bf:3d:1a:83:eb:4d:65:77:53:30:95:0c:a4:
09:50:9f:4f:03:64:8e:89:c6:b0:b1:4e:dc:54:bf:
d9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BC:B3:AF:32:53:95:08:B7:87:F6:CE:29:89:56:D8:E2:54:A0:FC
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:af:8e:8f:ff:de:ba:69:65:8d:ad:78:29:bb:a1:da:2d:c6:
31:31:6c:d2:9d:d0:c9:ac:53:52:99:6f:92:b5:19:36:91:fd:
b3:21:5a:39:6f:75:0f:2c:c2:30:65:05:21:77:95:5c:10:fc:
44:b5:d9:8c:59:5d:6e:26:1d:eb:92:68:f9:c7:f1:18:ec:8d:
16:c8:9b:f1:83:ce:94:05:f9:3e:41:4b:de:4b:f1:25:ab:43:
11:26:a3:83:1c:ce:c5:a9:62:33:a6:b8:7a:9e:71:ed:2f:57:
c5:c5:a0:b3:8c:ef:02:d1:b5:d5:46:e0:ae:e7:c9:22:c7:e9:
bc:39:51:ab:47:3e:77:54:c8:4b:09:9f:a2:34:c0:e7:79:34:
30:63:54:e8:96:8c:6e:cb:30:76:83:21:11:b4:a4:eb:d8:16:
ba:f7:f0:ea:6e:50:b8:c4:91:6f:ea:4a:28:b3:2b:13:dd:21:
a1:df:0c:8d:74:31:60:d0:4f:25:4c:b4:10:6a:fd:6a:9a:d5:
d5:0b:79:be:fc:f6:96:75:eb:a1:d9:f2:98:c4:25:d4:8a:74:
36:bf:b1:e4:96:a3:b0:a7:22:21:bc:f9:01:53:1f:78:a3:1a:
a9:11:d8:6f:1a:d7:0e:a6:97:a8:ff:78:db:c9:67:58:fd:4e:
07:12:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:52 2025 by rpki-client