Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: EFu5x2aETQLpbCYZ9GimIWe49M4OlrtqRN2SymLtfO0=
Subject key identifier: B9:67:7D:17:B3:22:39:46:4F:12:D1:90:98:41:03:B7:19:BD:7A:18
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 01974D7BE71F66C0FCDF221C87F6EE7DFED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 039B
Signing time: Sun 08 Jun 2025 03:00:55 +0000
Manifest this update: Sun 08 Jun 2025 03:00:55 +0000
Manifest next update: Mon 09 Jun 2025 03:00:55 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: A5sM6CDbx1R5xtWOzMF4BCIzZsc0gwrIFOUUFRSC3FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:e7:1f:66:c0:fc:df:22:1c:87:f6:ee:7d:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: Jun 8 03:00:55 2025 GMT
Not After : Jun 9 03:00:55 2025 GMT
Subject: CN=b9677d17b32239464f12d190984103b719bd7a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:37:51:fb:3e:fc:3d:d9:45:45:d5:81:70:
0e:a7:c2:b0:95:a7:a8:ae:1e:4b:50:0e:58:e4:74:
0b:c5:8e:f5:d3:5e:a5:47:09:c8:af:4b:79:09:87:
61:b5:b0:46:8d:6a:b0:87:29:5f:a2:c5:61:57:73:
0a:80:1b:bc:19:18:b3:8e:54:de:bc:06:de:84:04:
b0:47:55:79:ea:a3:58:53:8f:5c:ed:b0:87:96:ba:
4a:47:23:1f:20:90:43:e8:51:1c:80:c5:dd:e9:e2:
35:85:cd:a0:97:09:f8:00:6f:16:63:62:f4:05:8f:
6d:f7:0e:2e:7c:eb:67:18:cc:c5:65:0c:9d:93:d1:
4a:cd:62:b1:fb:a9:51:f9:0f:68:53:93:09:4b:cc:
f0:10:9e:85:77:44:53:93:f0:ab:92:68:9c:49:63:
4c:5b:da:67:8a:8c:1c:03:b0:b8:36:57:f3:dd:17:
4c:c3:82:7a:5b:b4:44:69:93:5f:f8:e6:c0:97:fe:
90:6e:da:31:c0:7b:84:c9:fe:71:83:16:0c:28:04:
0e:27:c3:ab:0c:eb:9e:19:25:30:62:22:c6:94:7c:
d6:98:29:26:91:66:d9:74:fb:6e:5c:4b:c4:ac:54:
31:64:18:c3:a9:0c:ea:68:66:1a:c1:d8:ae:7f:c0:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:7D:17:B3:22:39:46:4F:12:D1:90:98:41:03:B7:19:BD:7A:18
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1d:f7:75:17:8b:64:5e:a3:0e:1f:51:8b:75:c2:4d:ce:17:
74:cc:55:96:3f:71:17:14:1c:9c:08:bb:22:38:dc:f0:29:b5:
e2:25:79:19:fe:d3:55:a7:c3:28:a7:c5:91:c3:da:3c:11:06:
c9:16:23:31:84:f8:f5:65:b4:f5:21:d1:16:e4:40:3b:02:20:
22:d6:99:a4:55:72:4d:5c:e1:8d:11:02:8a:98:f6:5f:5e:c3:
1a:8f:df:e0:6e:0e:b2:83:a8:36:fd:e4:c8:3f:0b:8b:bd:bd:
f7:cb:3e:1c:61:60:e1:c1:5d:7d:e1:f2:63:0d:7c:fb:a1:7e:
9f:78:fd:55:f7:fb:72:2f:de:02:da:ab:ec:e8:2d:de:6e:06:
9c:1e:6a:7b:a4:98:96:07:23:a2:f5:26:26:3b:48:02:cd:03:
75:02:05:ff:1c:6b:2c:6f:1d:98:3d:f1:23:b4:11:61:f6:d0:
c1:44:15:17:b1:69:49:d4:e7:1f:20:d0:87:bc:f9:91:f9:c4:
91:b1:d4:01:69:f6:ba:b2:a5:f6:1b:c6:22:b9:85:8a:bb:11:
ba:90:da:33:09:0a:9b:71:08:27:85:ec:ee:73:a0:5e:cf:3d:
30:b0:04:e7:f9:c5:8f:00:08:fe:b8:c4:13:89:b7:82:7e:41:
0a:d8:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:58 2025 by rpki-client