Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: 902q+QWtCnk8d4HVJP4cx+RjRRJP1IJca3Y8v96pkrA=
Subject key identifier: CB:E7:96:EA:4A:F2:62:2E:5C:10:ED:83:6A:91:F2:BA:C5:2E:82:43
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 01995378FCCA1F18F591307E8A543236CBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 168C
Signing time: Tue 16 Sep 2025 17:01:01 +0000
Manifest this update: Tue 16 Sep 2025 17:01:01 +0000
Manifest next update: Wed 17 Sep 2025 17:01:01 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: FjSBU43QwUedGexuj9BHA2B/jh6xXC1FvnhB6T0zVhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:78:fc:ca:1f:18:f5:91:30:7e:8a:54:32:36:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Sep 16 17:01:01 2025 GMT
Not After : Sep 17 17:01:01 2025 GMT
Subject: CN=cbe796ea4af2622e5c10ed836a91f2bac52e8243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:f1:96:cd:6d:19:9e:de:20:f1:85:77:b9:
7f:94:54:75:73:19:f4:58:1c:2c:ae:8a:04:d4:2b:
bb:e8:27:fe:a0:11:b6:f7:a2:d3:4f:5f:0d:7b:e9:
62:a1:90:55:b1:59:f7:24:e1:b9:ca:fd:2f:f0:47:
1c:06:dc:aa:bd:ff:2e:db:8b:f8:8e:9b:9c:d6:a1:
d1:12:55:0b:54:8f:2c:2c:24:54:4e:01:17:90:b5:
e9:b5:f1:fb:25:47:b9:0f:4f:94:6f:a1:56:53:b4:
b8:c9:24:96:eb:02:9c:d8:97:d8:b3:71:5e:69:b7:
86:d8:d9:8d:f3:e0:fd:d5:b0:8b:46:b5:be:5f:99:
70:76:3b:a5:37:0d:f3:47:21:de:ef:02:79:41:15:
a8:48:3a:ec:a3:d2:78:36:f7:cd:a5:f0:2e:f8:0d:
a9:da:03:c7:1e:d4:9f:87:12:e4:eb:bc:bf:28:1b:
a7:75:40:e7:cb:66:e9:11:6d:c7:94:cc:aa:1b:d7:
78:82:71:aa:04:03:26:5d:cb:3f:fe:0c:17:64:98:
2d:49:98:a1:eb:50:24:19:3f:74:bf:03:fa:66:bb:
e3:10:af:4c:6e:d3:58:77:28:61:fc:e1:b5:ba:58:
38:98:6f:02:52:84:4c:18:95:99:2d:9f:11:55:85:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E7:96:EA:4A:F2:62:2E:5C:10:ED:83:6A:91:F2:BA:C5:2E:82:43
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:e4:cc:9a:90:0d:5d:42:be:75:35:dd:7f:7e:cd:f6:08:
c3:95:c2:87:d6:96:0f:3c:dc:26:5b:f7:6d:b6:bf:b4:bf:8f:
c7:ca:22:f3:6a:dc:62:4c:1e:10:7a:22:cb:d9:fe:5e:16:52:
f6:7b:cc:6b:44:1d:46:fd:ec:82:3e:fe:9f:0d:d5:a0:8a:ce:
f5:3c:62:fe:33:96:89:8e:81:e4:c0:6c:25:e5:01:f1:78:a0:
d6:83:78:56:09:58:95:24:4a:e0:70:08:ef:be:f5:a0:d3:9e:
09:40:1d:64:d5:54:e0:c6:12:5b:a8:05:6b:be:7e:0a:e2:a7:
38:ab:68:1b:5a:68:6d:23:65:d8:61:91:8a:e7:18:2d:32:92:
49:6d:5a:a4:de:ff:ef:64:0f:78:17:6d:dd:15:f2:92:d1:aa:
89:18:b2:b0:a3:7e:63:3a:4c:12:17:ce:82:27:39:f6:81:fe:
a1:f1:e9:04:07:21:60:34:7a:2b:d5:20:4e:b4:03:30:46:35:
26:e0:61:82:be:94:6c:d8:dd:eb:ac:8c:bb:6d:fc:3d:ee:8f:
4c:f6:b4:8f:fb:d0:fa:f4:02:48:00:76:fe:d3:6e:4c:01:a3:
5a:f6:e3:2b:ec:28:54:77:71:b7:28:24:d1:0f:c3:d0:8a:46:
e0:7c:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:29:44 2025 by rpki-client