Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: xs6WGYu1BH3Q4Nq2hFYtQEzhNcIKKVZjBMmGTkmwL5c=
Subject key identifier: 59:80:04:31:79:69:9A:26:25:4D:C6:4F:18:93:EA:67:2E:AE:66:E4
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 019896A6FB9742F8C07380D1A97370FC28F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0C2C
Signing time: Mon 11 Aug 2025 01:03:02 +0000
Manifest this update: Mon 11 Aug 2025 01:03:02 +0000
Manifest next update: Tue 12 Aug 2025 01:03:02 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: ex8YXGg0bnpt5O4qKlaQRFwadsekmnV1ziQ1ShwlEgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:fb:97:42:f8:c0:73:80:d1:a9:73:70:fc:28:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Aug 11 01:03:02 2025 GMT
Not After : Aug 12 01:03:02 2025 GMT
Subject: CN=5980043179699a26254dc64f1893ea672eae66e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8b:89:3f:dc:29:3b:7c:47:13:27:d7:99:2e:
92:cd:e4:cf:76:d5:bd:48:72:dc:84:3e:00:a2:7e:
f0:1e:37:a7:a1:6d:68:68:17:dd:14:48:74:22:89:
99:e6:c9:ae:d0:1a:f1:50:9a:f5:6b:5f:7c:d0:d2:
fc:bb:8b:0b:8f:ab:02:92:f9:d9:83:25:11:40:77:
30:f5:9c:37:12:a4:32:0c:8b:61:2a:93:3f:ac:99:
61:99:3a:26:40:28:0e:0b:e3:59:70:f1:94:6b:38:
33:ef:b1:d6:94:f7:6d:cd:79:6f:56:2c:25:45:ae:
e2:56:99:93:fa:7b:03:f5:e9:a1:51:e3:a7:5e:92:
5c:2e:f9:31:5a:eb:80:62:c0:cd:a1:4c:07:71:34:
43:95:ab:f4:39:81:23:3e:f1:40:6c:1e:b2:bd:fb:
0f:3b:6d:2a:21:3f:41:7d:4e:3c:53:08:83:8a:e4:
2c:bf:bb:f8:af:fb:a1:44:c5:b9:34:22:ab:91:d1:
f2:1d:e3:1a:4b:70:be:f6:0d:b3:1d:71:5b:0a:42:
f0:c7:d4:9c:99:15:ce:c7:e5:8a:ef:38:69:94:a0:
fc:e8:2c:9e:b4:f2:4d:78:bd:3d:f9:40:d8:08:6d:
bc:64:1b:6c:f8:07:a3:fd:ea:b6:d6:39:4a:28:ae:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:04:31:79:69:9A:26:25:4D:C6:4F:18:93:EA:67:2E:AE:66:E4
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f2:ba:b4:a1:cb:ba:e5:e0:b2:c7:65:71:a5:09:87:74:36:
fe:66:dc:0b:01:f1:f6:04:ef:94:5f:d0:3d:06:18:1e:b2:c9:
6b:09:c0:83:a6:f1:fe:73:e9:62:73:82:bb:b8:a9:70:c7:de:
20:95:75:a7:94:f3:43:ff:cc:f3:80:d6:03:d8:ac:ff:86:4b:
f3:97:28:d3:55:0e:1b:45:4f:a4:84:8f:4b:3f:96:10:81:a6:
da:91:8a:b7:f1:d5:a4:2a:1a:42:99:0c:08:9e:ea:13:c1:86:
91:f5:16:78:f5:22:c4:b1:3c:e0:bd:45:55:74:7f:02:a4:57:
16:41:bc:d6:23:7c:65:b6:84:93:f3:4f:c8:2c:67:4f:fa:dc:
03:4f:a8:80:68:8a:8e:94:ed:50:e6:63:7f:b6:07:bc:3c:d9:
97:41:99:29:ae:ed:8d:62:2d:c0:1a:b0:80:2b:d6:4e:39:67:
9e:00:d1:af:9b:90:57:0d:7b:10:3a:14:a1:33:6f:43:43:ea:
34:e9:35:90:aa:dd:5c:2e:81:fe:8b:f7:86:a2:2a:06:49:fb:
9f:5e:64:35:02:d7:c6:bd:fe:da:ff:af:35:2e:e2:68:9b:96:
fe:61:8f:c0:1d:28:d6:4a:93:68:5c:84:cd:06:0a:79:4e:4a:
67:65:88:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpvuXQvjAc4DRqXNw/CjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Zjc0NmI4MWFlYzAwZTM2YjliY2I3YTA4NjQyYTY0ZTkx
M2RhNWIwHhcNMjUwODExMDEwMzAyWhcNMjUwODEyMDEwMzAyWjAzMTEwLwYDVQQD
Eyg1OTgwMDQzMTc5Njk5YTI2MjU0ZGM2NGYxODkzZWE2NzJlYWU2NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YuJP9wpO3xHEyfXmS6SzeTPdtW9
SHLchD4Aon7wHjenoW1oaBfdFEh0IomZ5smu0BrxUJr1a1980NL8u4sLj6sCkvnZ
gyURQHcw9Zw3EqQyDIthKpM/rJlhmTomQCgOC+NZcPGUazgz77HWlPdtzXlvViwl
Ra7iVpmT+nsD9emhUeOnXpJcLvkxWuuAYsDNoUwHcTRDlav0OYEjPvFAbB6yvfsP
O20qIT9BfU48UwiDiuQsv7v4r/uhRMW5NCKrkdHyHeMaS3C+9g2zHXFbCkLwx9Sc
mRXOx+WK7zhplKD86CyetPJNeL09+UDYCG28ZBts+Aej/eq21jlKKK49nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmABDF5aZomJU3GTxiT6mcurmbkMB8GA1UdIwQY
MBaAFDj3Rrga7ADja5vLeghkKmTpE9pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgt
YzIyMzk1Y2UxYmU0LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgtYzIyMzk1Y2UxYmU0
LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvK6tKHL
uuXgssdlcaUJh3Q2/mbcCwHx9gTvlF/QPQYYHrLJawnAg6bx/nPpYnOCu7ipcMfe
IJV1p5TzQ//M84DWA9is/4ZL85co01UOG0VPpISPSz+WEIGm2pGKt/HVpCoaQpkM
CJ7qE8GGkfUWePUixLE84L1FVXR/AqRXFkG81iN8ZbaEk/NPyCxnT/rcA0+ogGiK
jpTtUOZjf7YHvDzZl0GZKa7tjWItwBqwgCvWTjlnngDRr5uQVw17EDoUoTNvQ0Pq
NOk1kKrdXC6B/ov3hqIqBkn7n15kNQLXxr3+2v+vNS7iaJuW/mGPwB0o1kqTaFyE
zQYKeU5KZ2WIxg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:28 2025 by rpki-client