Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: sqOSkxCynmtTaoV0jZxKiuKxRoxb3vHEqsNjl4eBQaE=
Subject key identifier: 45:3F:82:14:E4:73:CF:AB:6F:D2:16:4D:AD:EE:45:6D:2F:42:A5:6C
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 01984B8A92801A982E1DAA97B5CFC9395A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0AC1
Signing time: Sun 27 Jul 2025 11:00:29 +0000
Manifest this update: Sun 27 Jul 2025 11:00:29 +0000
Manifest next update: Mon 28 Jul 2025 11:00:29 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: M2qfiHxlvyqX5khJIeCk4BAzw-M.roa (hash: 2wSt8AsR9BQPYP7f67EqXqK56sykUCRKKl1aHVsfKpw=)
3: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: DMWrja5pLWXWFEyy4tUQrkLaFi/r8SXupNTl3uKzXMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:92:80:1a:98:2e:1d:aa:97:b5:cf:c9:39:5a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Jul 27 11:00:29 2025 GMT
Not After : Jul 28 11:00:29 2025 GMT
Subject: CN=453f8214e473cfab6fd2164dadee456d2f42a56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:6c:c1:00:8e:0c:d7:c1:47:56:88:e7:5f:
4a:61:83:32:59:44:02:50:c2:b6:c1:c5:a9:e5:20:
12:da:84:4b:12:db:57:5c:10:57:25:bd:90:0c:06:
90:cd:ae:fc:8d:40:e5:41:9e:04:11:ca:a4:cf:75:
f7:f3:33:90:1b:8b:18:f3:6d:21:91:92:02:2a:53:
c9:52:39:f7:a1:40:33:70:6c:8a:06:e8:51:b2:cc:
37:ca:08:d5:ca:ac:e3:b7:b5:16:d1:27:ad:a5:41:
cc:92:7d:49:8b:19:e5:29:8b:a1:0b:ee:ec:2d:57:
ec:ec:32:3a:51:79:c9:86:0d:91:61:8d:66:55:da:
02:4c:a0:2d:33:f0:fc:27:8d:02:f5:32:ce:be:bf:
48:9e:05:64:f1:d6:b6:0e:ac:3a:dd:64:70:71:c5:
9f:cd:47:d9:f7:4e:41:f8:43:db:c0:7a:4e:1a:6a:
d8:c7:ac:6d:f3:15:95:2f:52:54:34:48:b1:f6:e6:
77:d0:92:73:e6:54:16:ae:ee:e3:2e:ed:1a:7f:79:
46:06:84:e9:ba:00:e3:a7:47:48:cb:a9:6d:38:ce:
36:b6:8f:02:f3:17:5b:03:f4:80:d3:50:4d:c8:14:
b7:18:cf:14:ba:5f:60:4f:6c:bd:48:9d:42:aa:49:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3F:82:14:E4:73:CF:AB:6F:D2:16:4D:AD:EE:45:6D:2F:42:A5:6C
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:2c:4d:f0:40:fb:04:bb:2e:42:b5:b4:de:51:dc:df:71:
62:4d:14:99:42:37:80:50:2f:ac:36:23:7b:30:01:8d:8e:e2:
e4:7c:92:65:30:bd:3c:ea:75:3e:cd:62:bb:27:66:43:f9:6d:
e4:89:22:0a:4e:2a:95:6e:76:c0:09:ce:c2:09:d7:08:86:7f:
75:d1:05:19:0c:1d:0e:ae:27:49:73:83:1e:ae:9d:dd:c0:a1:
51:4c:de:5d:c4:0f:55:81:e6:a3:a5:87:21:26:77:95:57:6f:
23:36:62:22:47:81:de:69:9c:b5:29:ea:e4:b7:c3:eb:80:c2:
5a:2e:3c:24:33:0c:f9:02:74:27:be:f2:12:7c:12:63:0e:a6:
76:fa:bd:d9:a2:9c:16:3a:eb:2e:34:f6:ef:80:d0:f6:c1:ea:
16:7a:c5:8e:58:8c:50:a7:be:65:4e:a1:d7:46:d3:66:05:96:
06:b0:88:61:f6:42:64:68:2b:a0:e3:42:32:90:ff:35:ea:b1:
26:42:78:09:c3:0c:41:31:35:db:f7:c6:89:95:26:55:8d:bd:
e7:93:e3:cc:4d:d1:0b:4a:a5:21:b6:49:c7:15:f5:43:6f:45:
77:46:30:5d:c4:4f:fe:34:7b:bb:6d:8b:69:d1:e5:03:5e:ba:
26:a2:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:03:32 2025 by rpki-client