Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
File: dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json)
Hash identifier: aUsaIscn/o3Wmvdcq8mW/kKyYO4rxOZidROuil9TCpo=
Subject key identifier: 16:4C:A8:F1:56:F0:0E:B0:1F:F4:FC:1B:C0:41:64:FD:B9:13:54:D2
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Certificate issuer: /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial: 01984777F2426B36FF8F0FF65D1F750AE543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
Manifest number: 0990
Signing time: Sat 26 Jul 2025 16:01:39 +0000
Manifest this update: Sat 26 Jul 2025 16:01:39 +0000
Manifest next update: Sun 27 Jul 2025 16:01:39 +0000
Files and hashes: 1: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: uDZ9GPO9TnRJHvvd59fOBkPcncHnOsLsAit5IQTx8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:f2:42:6b:36:ff:8f:0f:f6:5d:1f:75:0a:e5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
Validity
Not Before: Jul 26 16:01:39 2025 GMT
Not After : Jul 27 16:01:39 2025 GMT
Subject: CN=164ca8f156f00eb01ff4fc1bc04164fdb91354d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:49:f7:f0:78:ba:32:61:74:e2:0a:62:41:
c8:7a:a5:da:e0:17:5e:05:12:cd:8c:b8:c3:d1:96:
20:66:c2:a6:39:56:16:4b:3e:84:95:8e:15:fa:ca:
99:2b:da:25:49:fb:fd:6c:b6:c9:ac:8d:d0:b2:ae:
6e:d6:50:14:34:cf:54:06:d9:24:1c:5c:36:93:3f:
bb:7e:7d:e4:63:a3:25:b8:00:27:2c:50:d5:24:fb:
89:3b:fe:73:de:2b:ca:e8:e1:ac:38:ec:d0:a7:92:
d9:d1:9d:b3:bc:81:63:4f:27:32:f6:62:e8:a6:d7:
59:b7:58:f0:bd:e9:f6:9a:5a:ee:66:ec:32:84:e1:
13:f2:74:78:ab:6c:54:c2:f4:24:2e:52:63:fc:a8:
ee:f6:8d:03:db:ab:a9:db:65:8b:ee:79:9e:b1:84:
b9:fe:3f:99:a0:77:c9:ba:23:45:fd:fe:a7:50:c2:
15:d7:4d:4b:be:f0:ef:87:1f:e0:b5:b2:22:df:f3:
53:70:f5:1b:45:ee:fb:3c:4f:37:ee:2c:5f:ec:b5:
bd:84:11:e0:76:26:e1:cb:70:5d:81:af:b6:7d:e3:
ff:18:04:7c:65:6f:44:eb:4e:af:b9:a0:96:c8:5f:
87:06:5a:42:28:85:2a:c7:c0:86:4f:57:d1:37:f9:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4C:A8:F1:56:F0:0E:B0:1F:F4:FC:1B:C0:41:64:FD:B9:13:54:D2
X509v3 Authority Key Identifier:
keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:af:ac:83:3c:2c:3a:6e:2d:ce:6d:54:d7:80:a7:47:09:3f:
81:60:30:7e:e5:05:ee:84:aa:46:79:84:e3:8d:af:5f:09:d0:
09:58:c6:b2:38:61:11:f2:f6:d1:5e:f3:a7:56:e7:97:60:fc:
70:dc:6f:10:60:a4:b8:33:d6:01:e8:d5:aa:63:04:b8:ad:0f:
51:a7:be:66:4f:ef:0c:fe:27:82:d9:06:f5:d2:2f:1b:f4:75:
bb:af:93:c4:d0:9e:99:c9:31:46:6c:06:14:cd:77:25:89:99:
3d:31:45:b0:e6:90:14:27:92:f1:a7:39:3c:91:6d:3a:4e:94:
27:b3:6f:71:d6:f7:62:51:00:9e:d5:98:75:4b:8b:90:6a:1e:
26:32:8c:ae:a2:82:cb:b9:49:b5:51:40:a8:5a:fc:98:06:a2:
c1:44:0a:ae:45:b8:fd:a0:14:65:ca:23:76:e7:e9:87:19:e0:
82:8a:cc:fb:e5:3f:d8:3d:36:2d:64:9f:69:b4:c7:ab:61:11:
77:cf:67:3d:46:fb:90:fb:b7:4f:40:cb:25:1c:19:a9:0a:2d:
da:a6:4b:8e:c9:21:64:2b:97:e6:33:5e:91:73:c5:84:6c:5d:
13:0f:93:59:4f:13:d8:22:f1:f4:3d:2c:51:46:b5:b3:d5:f2:
8a:6c:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:58 2025 by rpki-client