Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
File: OPp_x3GCjPs5cigk9_3z7cSzxSk.mft (raw, json)
Hash identifier: nVJqUfJAYH1XqAlyacvNDWs5swWg+oOKVaeUP3KwSD0=
Subject key identifier: A3:BF:5F:67:2E:7C:B8:FA:21:C8:81:F0:A9:8B:4D:8A:28:F9:E3:8A
Authority key identifier: 38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29
Certificate issuer: /CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529
Certificate serial: 019A73010AE3A899F307C356F9BB1A3B49A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
Manifest number: 0115
Signing time: Tue 11 Nov 2025 13:00:39 +0000
Manifest this update: Tue 11 Nov 2025 13:00:39 +0000
Manifest next update: Wed 12 Nov 2025 13:00:39 +0000
Files and hashes: 1: OPp_x3GCjPs5cigk9_3z7cSzxSk.crl (hash: h70WwL6+ZkLSGCpS9nhX0hVYnymrMH0mhzAnn/qtFPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:0a:e3:a8:99:f3:07:c3:56:f9:bb:1a:3b:49:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529
Validity
Not Before: Nov 11 13:00:39 2025 GMT
Not After : Nov 12 13:00:39 2025 GMT
Subject: CN=a3bf5f672e7cb8fa21c881f0a98b4d8a28f9e38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:c7:34:f5:3c:59:1d:c9:f3:8d:c6:fa:4e:
49:9e:e3:31:dd:f1:58:f1:4f:41:14:82:bd:1e:34:
fb:dc:c0:41:12:34:17:a7:09:69:3e:ec:de:8d:32:
45:d8:a9:8c:97:32:8e:dd:c3:02:9f:0c:0b:28:1e:
bd:1e:17:91:ef:f6:3c:39:e7:70:f9:37:d0:b9:57:
e7:d2:8e:eb:f0:b8:65:02:ff:aa:a1:9e:a9:35:38:
7b:20:7f:f5:56:a4:35:8c:7e:3a:b8:7d:44:db:a5:
05:9c:ae:04:22:5e:66:9d:5f:39:88:38:d0:f3:02:
6f:23:e9:d7:cc:5a:e9:4a:83:1b:8a:7d:08:e0:58:
3c:02:b1:04:27:19:05:28:d6:35:b2:92:2c:27:66:
2b:36:84:c6:76:33:89:c2:b8:21:b2:2d:b3:02:5a:
c4:86:7a:b5:93:e3:a9:9b:f0:b9:41:8f:78:c2:cc:
f6:7f:48:2c:bc:aa:ff:a4:1f:5c:5f:19:88:f6:10:
87:56:33:24:98:fe:29:66:e4:b8:17:ec:ad:28:6b:
3e:c3:49:50:9b:c9:09:3b:4c:24:6b:7c:95:63:8d:
ed:65:df:cf:df:d9:dd:27:1f:ea:95:7d:ed:3f:33:
e0:82:86:ab:47:e7:0d:d6:02:8e:af:e0:bf:a5:14:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:5F:67:2E:7C:B8:FA:21:C8:81:F0:A9:8B:4D:8A:28:F9:E3:8A
X509v3 Authority Key Identifier:
keyid:38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:d6:bd:a1:34:4a:2b:91:bd:93:e0:a9:77:08:fd:a1:02:
8c:05:97:68:5d:ae:e2:e3:58:de:b2:11:a4:10:e2:a8:d7:85:
3e:7c:aa:dc:f0:4b:e0:d3:43:7d:f4:54:c3:a1:b0:3d:24:db:
30:d6:cb:01:68:9c:ed:ef:62:44:26:d3:c0:32:54:98:d2:97:
a0:00:4e:d9:52:a1:68:d1:96:d8:bb:fe:19:93:ca:d0:6b:b1:
98:c4:8f:66:3a:48:cf:9c:00:af:e0:fb:c2:f2:a6:a4:22:1c:
37:41:33:46:81:03:4a:fb:dc:28:e8:0e:c2:b0:b6:b7:d0:9a:
2c:95:00:70:e8:80:ad:87:90:09:32:56:c9:8d:9b:61:55:f2:
98:16:1a:ca:a1:ba:21:99:18:9e:2a:7f:99:d7:63:9d:4f:59:
0d:64:41:bc:cb:51:49:d1:7e:80:2f:4c:fd:e5:c3:aa:a1:1d:
6e:72:d4:f4:cb:9c:86:a6:60:22:10:a2:51:8e:3d:e6:47:46:
04:cf:87:5a:49:13:54:f8:88:44:c8:a9:d6:6d:63:fc:a8:61:
fe:83:36:25:0a:1b:6f:33:9c:52:99:e2:5c:e7:37:48:0d:1c:
93:7c:61:ff:d1:f6:08:37:09:cf:80:e0:e7:eb:6c:27:1e:1c:
95:91:0f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:17 2025 by rpki-client