Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
File: OPp_x3GCjPs5cigk9_3z7cSzxSk.mft (raw, json)
Hash identifier: 6N5lkZQfijRjZNP6zBcTT+LxuUFvoKVCUZgYEz48ibg=
Subject key identifier: 5C:C1:BC:8D:3F:55:76:FE:4E:D8:2E:D8:37:07:6E:FF:08:22:04:32
Authority key identifier: 38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29
Certificate issuer: /CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529
Certificate serial: 019922FA0A0E595ADE2614F458FDEAA23BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
Manifest number: 67
Signing time: Sun 07 Sep 2025 07:00:35 +0000
Manifest this update: Sun 07 Sep 2025 07:00:35 +0000
Manifest next update: Mon 08 Sep 2025 07:00:35 +0000
Files and hashes: 1: OPp_x3GCjPs5cigk9_3z7cSzxSk.crl (hash: 1qe+9xUdJ0VLIUK5z44eEvvaSGtFB811p5UihmUJ48I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0a:0e:59:5a:de:26:14:f4:58:fd:ea:a2:3b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529
Validity
Not Before: Sep 7 07:00:35 2025 GMT
Not After : Sep 8 07:00:35 2025 GMT
Subject: CN=5cc1bc8d3f5576fe4ed82ed837076eff08220432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:9b:53:15:b0:19:48:ee:75:5f:05:ee:ab:
6d:6e:e2:69:07:28:7f:f7:48:33:5c:6b:5c:7d:3d:
d0:0a:13:4f:06:a5:62:4c:11:71:7b:1d:b6:5d:00:
d4:b5:ae:65:3d:11:83:d8:23:0a:a3:70:86:a2:45:
0b:0a:c7:ca:dd:de:42:4b:91:88:15:11:3e:56:1b:
9e:02:74:23:c8:e9:d6:58:c9:a0:9f:17:99:28:fb:
7d:78:7d:3b:26:f0:b4:dc:54:d3:73:3e:06:6b:4f:
ed:a6:ce:dd:3b:47:b4:9a:9e:cd:0e:78:6e:28:44:
b1:ab:53:f2:d4:f8:1a:dc:2f:7e:ac:45:6e:dd:b6:
4d:85:6c:c7:f0:7f:8f:be:be:aa:b8:c5:d7:bb:d9:
2f:bf:4b:fe:6e:96:0c:05:b8:f2:1e:ac:ef:c8:5a:
ef:09:bf:10:16:7d:fe:aa:6b:1a:1a:76:74:57:1c:
45:88:7f:4f:6a:41:9e:86:12:bf:d2:34:22:94:ec:
06:07:3d:31:21:45:d1:8a:e4:1f:fe:b3:0e:3e:17:
ea:c9:bb:4f:c7:a2:f8:b5:e3:27:98:10:be:43:d1:
32:bb:d6:d2:32:08:3e:ff:39:05:0c:0a:8b:15:56:
f0:4c:37:e0:a8:4b:70:44:a4:69:1c:de:16:c8:92:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C1:BC:8D:3F:55:76:FE:4E:D8:2E:D8:37:07:6E:FF:08:22:04:32
X509v3 Authority Key Identifier:
keyid:38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:e0:39:b5:db:a5:d7:75:04:dd:dc:ae:31:9f:59:cd:b7:
25:dc:81:6d:e2:15:d9:f0:13:11:7b:eb:0b:2c:6a:60:22:23:
44:77:db:46:20:24:fe:ce:46:85:f8:a0:48:13:2b:cb:81:d6:
23:86:89:9f:e2:a9:f1:25:bc:d9:fe:d6:d4:66:71:36:19:00:
80:7d:8b:0c:3b:d7:44:06:20:6d:ae:af:75:32:2e:8e:ad:3d:
f7:48:ce:ac:a4:bf:a9:de:9a:a4:c4:34:d0:c0:29:1e:f7:cf:
7b:d4:e2:92:f5:47:40:e0:ee:44:28:ba:78:a9:be:24:cf:c5:
96:e1:8d:57:5d:19:91:1d:c9:3d:80:57:f3:4d:f4:4b:d9:d3:
3b:f2:6a:6d:eb:64:b0:bc:7c:6f:c0:40:fb:dd:39:29:8d:8b:
fb:cd:fc:db:cd:9f:a0:cf:1d:56:75:1b:25:98:41:61:99:7b:
78:ce:ba:bf:c3:e7:48:a5:e3:be:40:3c:b0:6c:40:32:b4:ed:
f0:2d:e5:1c:2b:24:c4:2d:16:27:54:68:ba:e1:df:3b:a6:69:
9b:3f:6d:ac:c4:b2:bf:66:8d:c6:27:29:49:30:c6:d8:90:77:
84:4e:ee:d1:38:63:29:d0:c4:c7:42:1d:f8:52:2e:1e:2e:8e:
61:ea:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:22 2025 by rpki-client