Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: c3Pv+sAxhjGDYQgoPknvG0rerD9iig6Hc4Nvf/gyYtQ=
Subject key identifier: 47:F7:7C:57:6A:5E:8A:A5:16:32:0A:57:DD:A0:96:B2:AF:E1:0A:32
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 01985CB5FF17192C6F3D0D06584271FDCD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0C0E
Signing time: Wed 30 Jul 2025 19:01:27 +0000
Manifest this update: Wed 30 Jul 2025 19:01:27 +0000
Manifest next update: Thu 31 Jul 2025 19:01:27 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: Rnqj64qWTmsC/xulHfcfuK5iUC3V95Fasd6IuQ2WpGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b5:ff:17:19:2c:6f:3d:0d:06:58:42:71:fd:cd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Jul 30 19:01:27 2025 GMT
Not After : Jul 31 19:01:27 2025 GMT
Subject: CN=47f77c576a5e8aa516320a57dda096b2afe10a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:ec:56:77:60:81:43:19:9c:bc:2d:a3:b2:
4d:5e:23:b9:68:4e:dd:ea:53:ad:29:70:85:45:11:
d1:74:43:76:c4:b9:92:f6:6a:8d:ad:b9:96:3d:5c:
43:ee:b9:46:38:72:8c:81:77:80:76:2b:9e:49:b3:
5e:16:04:ef:94:ee:e6:92:bd:6e:52:cd:76:0b:f6:
14:28:39:25:84:d5:d8:da:c0:68:88:b4:f2:26:25:
78:ca:2b:d4:07:be:3f:5f:07:53:e7:fb:a8:bc:76:
c7:20:bf:69:61:91:0e:93:1a:86:53:8b:12:e7:bc:
d9:da:d9:f3:f7:5d:c8:66:3c:da:e3:c1:d2:b6:61:
90:07:87:77:b5:64:a1:f7:ed:ab:b3:ad:1b:f5:89:
f1:ee:26:4f:59:89:a3:e1:aa:ce:ef:b1:e5:df:cb:
e9:98:1d:98:b3:17:f1:9c:50:65:db:eb:6c:84:3e:
b2:23:ba:a0:ee:6e:ab:97:15:e2:0a:5c:ab:8e:27:
9c:70:e2:a6:d9:b5:2d:60:4e:e7:4a:11:ab:0c:d3:
b6:47:c7:3c:e3:db:cf:6c:21:78:cd:6d:43:35:26:
45:6e:f3:4a:2f:8f:ce:83:f6:72:7b:58:e4:7d:fa:
37:43:c0:60:8c:1a:0a:6b:65:a3:87:5d:dc:5c:77:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:7C:57:6A:5E:8A:A5:16:32:0A:57:DD:A0:96:B2:AF:E1:0A:32
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5d:47:fb:10:3f:cf:54:3b:57:88:d1:05:df:ac:96:39:69:
a1:24:b7:dd:2d:c5:fd:d8:d6:b6:61:78:20:c8:f1:75:5c:3d:
5f:b6:3c:4f:22:e6:84:29:0f:9b:6c:4b:88:e4:d2:ee:30:d0:
2d:3f:b4:71:05:76:aa:6c:d9:ff:84:a4:c0:67:21:48:f7:9d:
fc:cd:b9:88:a5:ed:a0:91:8b:34:fc:0c:9a:81:ee:9e:b0:0e:
a0:1d:2b:0b:5a:e6:ef:0b:82:ba:2e:6d:71:d0:09:07:ab:25:
c1:ff:df:dc:5e:cc:a8:64:4f:2b:30:99:fc:8d:42:38:0c:3b:
fc:7e:21:15:8d:22:33:73:48:0f:58:84:a9:98:16:1f:fd:e9:
f6:fb:31:41:30:82:53:90:07:10:e3:44:7f:b6:88:40:86:6a:
8f:70:df:1c:c9:a0:a4:1b:37:6e:60:a7:0b:8c:1f:6c:c8:81:
a8:8e:ef:ce:fe:27:fd:f3:19:92:16:23:db:bc:63:ae:fe:4c:
22:62:96:c7:f6:ec:5e:70:99:40:04:6a:b0:de:54:54:7a:dc:
df:f5:2a:b8:9e:3c:ea:bc:8f:c3:9e:3c:7a:a9:ed:c4:5b:50:
f8:4c:63:b7:15:9f:65:46:b9:d0:a8:ca:62:96:11:99:38:cb:
17:c8:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:55:11 2025 by rpki-client