Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: Gdgh080IX3DeNsxjh/40//ZwJyG+AevyP6U3E2ARR+4=
Subject key identifier: 59:E1:C3:9F:50:5E:FD:3C:16:17:24:D6:E3:06:8D:31:71:44:97:D3
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 01984B8A56EF79E6323E28010564F71B86D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 11:00:14 +0000
Manifest this update: Sun 27 Jul 2025 11:00:14 +0000
Manifest next update: Mon 28 Jul 2025 11:00:14 +0000
Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: uQp1Cld9x9LBLvIhmZXCvP12SGsHDtariF2Db8dWmEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:56:ef:79:e6:32:3e:28:01:05:64:f7:1b:86:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Jul 27 11:00:14 2025 GMT
Not After : Jul 28 11:00:14 2025 GMT
Subject: CN=59e1c39f505efd3c161724d6e3068d31714497d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:43:b1:a5:65:70:89:a9:a7:58:69:9b:97:46:
38:30:dd:f5:6e:6f:b8:30:29:db:2b:a0:f0:62:92:
02:13:aa:0b:c3:90:de:0f:8e:12:ac:d7:ea:67:4a:
cd:96:0c:64:33:77:d7:c4:7d:64:80:87:27:9f:45:
2a:12:66:f2:bf:53:60:4f:3b:bc:de:7e:cc:39:b9:
b3:ce:fb:30:38:36:9e:ab:5f:52:69:a2:18:45:4c:
89:f3:bb:1e:3c:f1:bf:ef:53:23:65:71:88:32:1c:
24:3c:e3:f6:4b:bf:67:26:f3:12:72:ba:82:87:f9:
6b:29:33:82:d7:7b:f3:78:5b:42:8b:d3:9c:65:6e:
99:e6:b2:e9:d0:dd:9f:13:de:88:1c:e9:2c:ef:17:
da:5c:e9:b1:9b:e1:db:7d:d8:d2:17:a4:3f:67:9f:
4f:3c:ea:06:e8:b7:4a:f8:0c:bb:85:98:e1:d7:b4:
8f:62:9b:7d:39:ef:68:31:00:c2:1a:a4:3a:d3:49:
6e:1b:ed:14:ea:fe:5f:c4:3d:5a:af:3b:f9:26:42:
9c:3c:18:3a:6b:d3:c4:f1:ae:5f:33:7a:b0:42:a0:
c7:69:7d:01:84:3d:88:85:25:c4:f7:54:b3:1d:f3:
82:ec:8d:c2:8d:c7:41:f5:11:3c:ec:38:04:6b:2c:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:C3:9F:50:5E:FD:3C:16:17:24:D6:E3:06:8D:31:71:44:97:D3
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b1:0e:71:79:fd:6e:1b:6d:e0:4f:39:1c:d4:2f:27:77:0b:
2b:17:a1:2c:1b:63:cd:83:4c:f6:e6:6b:f7:8e:93:24:84:f7:
03:eb:ea:bd:65:4b:6c:12:53:3d:5d:65:67:67:ad:cb:d6:6f:
9f:28:bc:ce:9e:f7:d7:02:10:0c:bd:92:07:ec:d2:e5:54:e1:
cf:7e:7a:7e:06:21:29:df:b7:c4:0a:00:0b:9e:a6:7b:26:f0:
27:bf:51:ad:6b:a9:1d:1f:7b:e2:71:78:c4:d5:88:fd:dc:ca:
88:ec:b8:96:e5:af:29:4a:a6:14:16:3d:01:3f:d9:80:fb:66:
91:b5:95:27:69:13:31:7c:85:0f:31:0b:f9:e0:26:4c:e9:39:
be:02:35:a7:9f:e9:05:0c:98:0b:d6:04:0a:c6:23:3d:5d:11:
ac:30:8a:ee:88:4d:66:1b:8f:06:d6:a9:ac:60:73:6f:e2:cc:
d1:2d:06:1d:d5:09:ee:ee:91:d8:1a:a0:c9:b7:24:34:cf:a8:
e8:42:28:b6:7b:5a:af:8a:c4:06:05:45:1e:f1:05:44:ac:92:
56:48:0e:b6:e7:6e:7e:3b:54:0e:8d:2c:47:55:38:bd:d1:e3:
7f:63:09:76:ab:66:09:5e:f7:7a:1e:b0:4d:df:0c:ed:7d:5c:
a5:5a:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:03 2025 by rpki-client