Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File: OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier: igRNtbJetUhkfNAP6/uGejZEOBxYvmfr9TiOwTL0XpM=
Subject key identifier: 9D:4B:8F:9D:9C:C7:C6:52:3F:9D:9E:48:8E:CE:B3:D5:1A:98:23:7D
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 01984250A15CD5513DB53D86C5DBF0CD9088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number: 0EC1
Signing time: Fri 25 Jul 2025 16:00:37 +0000
Manifest this update: Fri 25 Jul 2025 16:00:37 +0000
Manifest next update: Sat 26 Jul 2025 16:00:37 +0000
Files and hashes: 1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: svqAeSgMoErKeO0I0u2pxEQGjoI0rnYR4z7hC6DHmyg=)
2: T24Mb-6KOyII9Zj4ApmqBzXBKxg.roa (hash: l/FPlArXvYmwy1iwUTLkf9bdXt1EQpVFOKjPM76DwnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:a1:5c:d5:51:3d:b5:3d:86:c5:db:f0:cd:90:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Jul 25 16:00:37 2025 GMT
Not After : Jul 26 16:00:37 2025 GMT
Subject: CN=9d4b8f9d9cc7c6523f9d9e488eceb3d51a98237d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d5:b6:35:14:54:4f:f2:95:b9:4f:5e:13:63:
a7:9c:a1:dc:ae:95:8e:4a:fd:60:99:46:a9:57:a4:
1c:83:53:0b:2b:79:1c:e6:a1:ba:5b:fd:4d:9d:e5:
6d:73:54:71:1f:23:89:2f:57:51:c7:04:f1:44:ec:
d0:bb:37:05:b7:7a:94:ff:32:e8:1b:df:e3:82:ec:
bf:83:65:41:f6:03:5b:8a:78:67:8b:3f:95:29:a4:
89:e2:46:53:9a:f1:dc:c3:71:57:26:f6:41:20:f5:
2c:a9:5a:7e:64:31:ef:e5:1e:b4:36:26:3c:04:ed:
88:4f:ea:8d:47:d7:13:47:df:97:ed:58:66:9b:36:
10:b2:e2:28:49:03:56:43:38:52:c3:93:6f:e1:bf:
6f:10:f3:e2:69:79:cf:c9:18:2d:98:b0:87:be:d7:
54:3b:06:c1:70:e0:e5:e4:52:67:b9:f8:ab:18:04:
bc:30:da:f0:bb:71:74:ef:97:87:ee:d6:3d:54:f0:
1f:f0:4f:06:00:fc:d0:7a:6b:74:27:43:ad:61:f0:
59:33:af:3c:29:33:ae:af:e1:f8:9d:a9:2d:cf:3c:
1a:67:88:18:be:5f:5c:1c:05:57:4d:49:ae:9b:bd:
e0:07:51:db:59:8d:a8:05:34:47:49:7f:cc:22:4c:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4B:8F:9D:9C:C7:C6:52:3F:9D:9E:48:8E:CE:B3:D5:1A:98:23:7D
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cf:f0:61:4c:c8:db:d8:52:76:20:1d:e0:1d:b1:81:75:9c:
64:c0:d7:d2:10:ce:69:41:c1:6d:69:c5:99:60:33:cd:76:85:
19:f2:1b:7b:16:7c:c0:d4:e3:35:f0:68:3a:3c:c8:86:42:f5:
bd:9c:d0:e3:aa:29:18:b0:d7:f8:6b:b3:4e:7b:17:7f:bd:9a:
8f:71:65:e5:92:1d:5f:66:e9:2c:4f:67:3e:ad:bd:3f:32:71:
b6:98:ec:5e:69:e3:91:21:a6:d2:19:8e:dd:84:3b:cd:44:a0:
54:4f:15:25:11:9c:5a:cb:62:55:07:f5:95:1f:21:27:9f:5d:
78:6d:c1:98:0f:34:2d:f5:05:93:18:67:5f:29:36:a2:b8:80:
0d:d0:23:25:58:0c:c1:9b:66:30:ec:35:ed:47:f8:35:75:ff:
63:1a:d3:9c:82:eb:04:4e:0f:4f:19:be:c8:28:35:85:4f:2d:
9b:28:9b:e4:22:a7:10:38:69:3a:79:01:31:52:ab:01:f3:72:
62:aa:29:aa:c8:ab:97:d5:61:94:d6:28:8c:3c:b7:0c:2a:db:
37:f5:de:98:ae:21:ba:d1:e1:99:c6:bb:12:4f:e5:d6:d8:a5:
78:48:d3:a6:b9:da:87:0a:e4:af:03:cd:77:aa:58:73:ee:18:
2b:5d:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:42:45 2025 by rpki-client