Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier: MRUoq3RDiR3WM4Ldm0s+gCoshZmQYvlo5O8qGT+jaAo=
Subject key identifier: D8:C4:C2:CD:16:91:68:61:A4:27:F6:B8:F0:1B:82:F4:7E:BE:CD:29
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 019922FA3D7DA8A04BAD401652CAF5674953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 07:00:49 +0000
Manifest this update: Sun 07 Sep 2025 07:00:49 +0000
Manifest next update: Mon 08 Sep 2025 07:00:49 +0000
Files and hashes: 1: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: 1xM5S4EwP9u4wm6u9qg2zqBO3OSOU17FLY3G71riYXE=)
2: Vpoq5ZpSGDP-ZXCmZlKnhArAK_Q.roa (hash: 38YyvusiUhw1DBRUCOnZouY1Y0JBlQCEkMbtx6PZeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:3d:7d:a8:a0:4b:ad:40:16:52:ca:f5:67:49:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Sep 7 07:00:49 2025 GMT
Not After : Sep 8 07:00:49 2025 GMT
Subject: CN=d8c4c2cd16916861a427f6b8f01b82f47ebecd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:cc:0c:91:5b:1f:99:1e:90:b0:a5:18:ff:
0b:a1:67:c5:ef:a5:3c:2c:16:74:20:8c:cd:27:c7:
ae:51:93:8e:45:46:d2:e3:92:ee:4d:eb:dd:da:30:
64:b6:d2:83:ef:42:c8:41:53:d3:6b:e5:e6:1d:25:
5c:8d:cb:04:80:5a:0a:41:3d:46:cb:b4:68:bf:51:
bd:18:fc:c2:9f:f9:0a:53:a6:16:be:c1:40:2a:22:
f2:55:0d:e0:9c:65:ce:95:56:48:8d:7f:7e:5f:04:
54:52:20:e4:d3:92:e3:00:9a:9d:d9:73:76:ad:da:
c2:ac:d4:19:b7:38:76:94:af:79:68:1d:fe:14:da:
3c:1d:85:a4:52:bc:6a:24:c1:44:31:04:f3:bb:21:
48:ab:50:71:e7:fa:92:79:b0:7a:5c:44:d0:9c:38:
aa:83:45:bf:68:7e:67:a6:16:eb:af:63:d9:65:a9:
d8:bb:8a:f8:be:69:e8:8b:1e:af:c4:8e:9f:b6:65:
e0:f2:c1:ce:6f:de:e1:70:7c:4f:1e:50:1d:28:f7:
fa:f7:33:7a:34:31:a2:87:1e:db:27:8b:50:56:03:
d6:f1:22:8b:80:66:e0:fa:6e:26:a3:02:dd:53:86:
c1:e6:ec:12:62:b8:0c:ab:2e:3c:3b:37:3d:5a:86:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:C2:CD:16:91:68:61:A4:27:F6:B8:F0:1B:82:F4:7E:BE:CD:29
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7e:18:ec:53:23:ef:62:d1:11:f7:1c:9e:53:55:7b:03:e3:
60:8e:25:d0:66:77:93:f7:4c:9f:88:d1:ce:a8:f8:27:d3:25:
79:19:bf:4c:ed:37:58:dd:7d:5d:de:d7:fd:67:ac:47:59:5e:
13:95:04:4b:ab:6b:d4:53:9d:b4:e5:9c:52:a4:7f:b9:f3:ef:
34:2b:f9:62:8d:17:ce:fe:d5:22:21:6f:be:dd:9a:3b:d6:5f:
08:35:f8:9e:de:0b:78:74:5a:b1:09:42:43:db:c1:60:77:df:
72:1a:bd:76:a5:cb:2e:95:64:fa:52:8e:76:3b:0f:c9:10:03:
cf:02:43:92:a5:f9:9c:b1:61:09:8f:f7:29:58:e3:62:8e:d8:
69:55:6d:44:a6:d3:b9:24:4b:97:94:53:f2:d7:ee:38:55:ab:
45:82:b7:86:a5:a3:ce:ed:65:ef:47:d2:b0:b0:a0:2a:28:7d:
cf:2f:eb:a2:f9:e8:04:5a:e0:c3:14:88:be:65:6d:21:75:c0:
df:cb:6e:74:7a:86:f7:61:9f:81:29:bb:6a:04:3a:b2:91:b3:
5d:e8:ca:1e:f5:b8:c7:60:e4:f9:43:5a:eb:c1:49:b5:88:be:
da:3e:d8:c6:56:69:65:69:88:ba:36:eb:57:ab:ac:dc:2f:4e:
75:14:b1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+j19qKBLrUAWUsr1Z0lTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjIzNzk4YjY3MzkzZTQwMzllM2Y5NTU1ZTIxNGQ2NzM3
YzEzNTEwHhcNMjUwOTA3MDcwMDQ5WhcNMjUwOTA4MDcwMDQ5WjAzMTEwLwYDVQQD
EyhkOGM0YzJjZDE2OTE2ODYxYTQyN2Y2YjhmMDFiODJmNDdlYmVjZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTbMDJFbH5kekLClGP8LoWfF76U8
LBZ0IIzNJ8euUZOORUbS45LuTevd2jBkttKD70LIQVPTa+XmHSVcjcsEgFoKQT1G
y7Rov1G9GPzCn/kKU6YWvsFAKiLyVQ3gnGXOlVZIjX9+XwRUUiDk05LjAJqd2XN2
rdrCrNQZtzh2lK95aB3+FNo8HYWkUrxqJMFEMQTzuyFIq1Bx5/qSebB6XETQnDiq
g0W/aH5nphbrr2PZZanYu4r4vmnoix6vxI6ftmXg8sHOb97hcHxPHlAdKPf69zN6
NDGihx7bJ4tQVgPW8SKLgGbg+m4mowLdU4bB5uwSYrgMqy48Ozc9WoaC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjEws0WkWhhpCf2uPAbgvR+vs0pMB8GA1UdIwQY
MBaAFDjyN5i2c5PkA54/lVXiFNZzfBNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQt
NzMwZmNkMGU1ZGNhLzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQtNzMwZmNkMGU1ZGNh
LzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh34Y7FMj
72LREfccnlNVewPjYI4l0GZ3k/dMn4jRzqj4J9MleRm/TO03WN19Xd7X/WesR1le
E5UES6tr1FOdtOWcUqR/ufPvNCv5Yo0Xzv7VIiFvvt2aO9ZfCDX4nt4LeHRasQlC
Q9vBYHffchq9dqXLLpVk+lKOdjsPyRADzwJDkqX5nLFhCY/3KVjjYo7YaVVtRKbT
uSRLl5RT8tfuOFWrRYK3hqWjzu1l70fSsLCgKih9zy/rovnoBFrgwxSIvmVtIXXA
38tudHqG92GfgSm7agQ6spGzXejKHvW4x2Dk+UNa68FJtYi+2j7YxlZpZWmIujbr
V6us3C9OdRSx2g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:30 2025 by rpki-client