Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: s5e3j+fGM3K0HcmJSi1JdAP8MiK2gs9MKKUWIlsDBTI=
Subject key identifier: 8D:C4:E6:65:D0:61:FC:E6:E5:F8:36:EE:EE:74:75:55:E7:B7:E3:71
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 01985231604C5CF94A3574691EB4927C9D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 0422
Signing time: Mon 28 Jul 2025 18:00:24 +0000
Manifest this update: Mon 28 Jul 2025 18:00:24 +0000
Manifest next update: Tue 29 Jul 2025 18:00:24 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: F1BVPiecxzqwTR8BAQS5DLIhaS4UV5GZNK8PAwfSG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:60:4c:5c:f9:4a:35:74:69:1e:b4:92:7c:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: Jul 28 18:00:24 2025 GMT
Not After : Jul 29 18:00:24 2025 GMT
Subject: CN=8dc4e665d061fce6e5f836eeee747555e7b7e371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:a8:8d:80:67:d5:38:48:3a:5e:1d:ab:ec:
0a:1f:82:7a:4b:e7:f1:59:f5:8d:67:57:3a:7c:d3:
e6:1e:dc:c2:d1:7a:59:f6:ff:1b:6e:6e:cc:d4:2f:
8f:ff:2a:4c:2a:10:70:62:ed:82:29:71:0d:0f:61:
5f:fa:16:ff:ab:5c:e9:d7:ad:6a:0c:ba:32:c6:12:
0d:98:a7:17:1c:bb:e8:de:ab:d8:5f:c1:28:36:c5:
2a:87:87:a8:72:54:ba:f3:11:21:25:5b:71:ed:4e:
fe:78:b6:f3:21:e4:62:4f:8d:59:d5:73:fb:42:39:
05:9d:63:42:44:0f:77:33:15:24:ab:e7:c8:bb:5a:
f8:18:55:a2:ed:b8:8d:57:10:7b:8c:63:86:93:a7:
d0:fd:f1:0e:a0:ca:61:37:b0:f3:f5:3e:49:01:b5:
bc:9e:99:bb:58:1d:9f:6f:97:ba:31:61:f6:2d:c6:
c1:f2:73:c8:1b:e0:e6:49:c3:01:fb:94:e1:94:51:
33:e0:df:f3:cd:10:fe:8e:a1:ea:f1:f6:a5:01:c1:
6d:72:cc:65:09:c1:36:c1:a5:46:57:5a:d5:29:c7:
0b:cc:65:84:7a:f6:9d:46:e3:12:1d:a0:8d:45:6f:
ae:cc:e9:ab:c0:98:68:bc:37:9d:c1:f3:e5:b1:79:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:E6:65:D0:61:FC:E6:E5:F8:36:EE:EE:74:75:55:E7:B7:E3:71
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:32:17:ab:8c:3a:a1:67:b2:44:33:df:4c:5a:73:7a:69:eb:
1b:5f:6c:7d:63:92:6a:cb:21:dc:4a:a8:73:bd:74:44:b4:24:
c9:37:c4:32:73:de:bb:21:c0:b2:11:67:d8:e1:48:18:af:15:
06:7b:f8:90:98:03:d4:bd:15:b5:d7:56:fb:6b:4f:03:68:36:
c9:22:ed:e3:65:58:9f:c9:36:51:c9:b3:a3:69:ad:28:6a:f4:
a0:ad:df:61:a6:da:49:22:5f:81:3b:87:39:e4:56:8c:02:97:
de:b7:52:08:34:a2:af:24:53:ba:e2:a0:66:2f:7f:6b:af:8f:
43:8c:a4:0a:e5:ab:ee:fe:14:c4:56:8d:4f:24:81:20:9e:ef:
b9:da:61:48:d9:44:72:46:f0:1c:12:c8:d6:63:9f:32:37:a5:
dc:9e:93:c8:b9:dc:74:f0:e9:e4:67:f1:c3:d3:f9:1f:81:70:
70:e9:57:8f:91:3b:cc:29:dc:a2:7e:1b:9b:bc:db:38:ac:c6:
1c:32:00:a2:56:3b:9f:bf:5a:96:a4:8f:29:2f:ed:d0:81:c0:
67:b7:b2:20:db:3a:64:39:62:b3:fd:e4:81:d5:fd:aa:49:a9:
07:02:60:34:1a:39:ee:5b:f6:75:cb:22:39:c6:e6:1d:c9:9c:
ee:ec:7b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:26:48 2025 by rpki-client