Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: E2xOFy3RHtFBwIucNBQY6gHd643xKpQ4wq1FfuFKYJk=
Subject key identifier: 33:FB:21:AA:BE:61:AD:A7:41:F0:2B:34:C0:4A:A7:EB:03:7C:51:24
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 019A7149F1A83C9E7AFFE32AFBE59237BF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: ZnNW4iLkc3lKA9M3Kkjzb+VVd47NQC6dLo4s+gXy/yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f1:a8:3c:9e:7a:ff:e3:2a:fb:e5:92:37:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=33fb21aabe61ada741f02b34c04aa7eb037c5124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:bb:f7:a0:e0:4b:f9:17:a1:fc:fb:0c:cf:
75:1d:79:ab:c8:af:ed:f1:88:2e:9b:fe:e2:47:b7:
4b:0a:9e:11:75:85:b6:9e:8a:66:9d:a4:c0:9f:84:
b7:42:c8:d1:e7:3b:5a:10:5c:79:ad:86:6e:35:d9:
c7:cd:0b:a5:d4:1d:37:9b:21:5c:2d:a3:80:db:75:
b6:d3:63:e2:0b:12:f7:7a:60:cc:76:01:2a:32:94:
69:6a:9e:5f:e5:2d:81:04:df:7d:48:04:1e:a5:93:
d2:43:01:8b:c2:91:5c:77:01:63:eb:1a:b1:44:b5:
61:52:1a:0b:7a:93:94:54:f5:88:17:b0:3c:b1:fe:
7c:25:37:e6:8a:81:d3:d6:5d:fd:bd:e6:d2:a4:d8:
3c:83:bc:b2:b9:75:12:ff:f8:89:ce:c3:b7:3a:d1:
95:fc:0b:79:2c:bc:23:87:47:99:12:6e:19:95:19:
c9:d4:b9:c9:75:bd:bb:2b:c8:23:46:5a:c1:c6:ab:
7f:99:d1:1a:c4:66:21:8e:64:f2:03:cf:40:a9:62:
8a:37:b9:3f:d7:d9:08:24:ca:6b:e3:f4:c3:8b:fb:
84:45:74:04:e9:45:77:84:e2:b2:f0:3e:54:0f:7e:
f1:0d:e4:2a:b4:2a:b1:58:18:67:23:bd:cc:f0:da:
0d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FB:21:AA:BE:61:AD:A7:41:F0:2B:34:C0:4A:A7:EB:03:7C:51:24
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f3:8e:81:d1:22:3f:b9:ff:2d:d8:54:57:7d:9f:b3:62:4a:
e2:d0:84:37:ea:8c:8f:ed:61:66:8b:30:17:13:5d:d4:15:4e:
7d:a9:03:1c:02:d8:00:de:02:0a:8a:18:fd:ee:ef:54:21:e2:
49:7c:71:68:eb:60:e4:f6:1e:4f:42:a0:ac:bb:33:f4:52:de:
7e:b2:98:dd:45:79:1a:54:0f:b4:9c:22:92:76:23:ce:95:8a:
e4:1a:d5:a0:94:f9:9c:22:93:ad:92:ee:14:d2:f8:f1:5f:26:
37:5c:14:76:92:c2:a0:de:35:2e:3b:2e:b9:6f:b5:5d:d7:87:
f7:d0:c0:cc:df:ad:2c:f4:4f:50:47:bb:71:ef:9f:53:28:b6:
a5:79:0f:e4:9a:29:3d:17:a8:9c:70:15:d1:b4:60:c7:db:da:
a1:f9:66:7b:0e:05:9d:a2:dc:a8:84:68:19:55:1e:67:50:b3:
a0:70:78:2a:aa:f6:0b:b0:dd:c9:ff:57:11:4d:66:51:34:0c:
66:a4:f4:93:db:12:ce:b6:39:62:94:9d:1e:26:a1:3c:a5:bd:
64:86:e4:f6:89:b8:4b:d4:d6:e9:0b:6f:f7:b1:ff:2d:ef:ba:
fd:83:e1:61:2c:eb:27:59:e4:a8:73:d0:5d:b8:0f:e3:77:0a:
18:49:66:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSfGoPJ56/+Mq++WSN78uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0
YzRiMWEwHhcNMjUxMTExMDUwMTAyWhcNMjUxMTEyMDUwMTAyWjAzMTEwLwYDVQQD
EygzM2ZiMjFhYWJlNjFhZGE3NDFmMDJiMzRjMDRhYTdlYjAzN2M1MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oG796DgS/kXofz7DM91HXmryK/t
8Ygum/7iR7dLCp4RdYW2nopmnaTAn4S3QsjR5ztaEFx5rYZuNdnHzQul1B03myFc
LaOA23W202PiCxL3emDMdgEqMpRpap5f5S2BBN99SAQepZPSQwGLwpFcdwFj6xqx
RLVhUhoLepOUVPWIF7A8sf58JTfmioHT1l39vebSpNg8g7yyuXUS//iJzsO3OtGV
/At5LLwjh0eZEm4ZlRnJ1LnJdb27K8gjRlrBxqt/mdEaxGYhjmTyA89AqWKKN7k/
19kIJMpr4/TDi/uERXQE6UV3hOKy8D5UD37xDeQqtCqxWBhnI73M8NoNiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP7Iaq+Ya2nQfArNMBKp+sDfFEkMB8GA1UdIwQY
MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct
ZTBkYzE4ZTg4MjI5LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5
LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvOOgdEi
P7n/LdhUV32fs2JK4tCEN+qMj+1hZoswFxNd1BVOfakDHALYAN4CCooY/e7vVCHi
SXxxaOtg5PYeT0KgrLsz9FLefrKY3UV5GlQPtJwiknYjzpWK5BrVoJT5nCKTrZLu
FNL48V8mN1wUdpLCoN41LjsuuW+1XdeH99DAzN+tLPRPUEe7ce+fUyi2pXkP5Jop
PReonHAV0bRgx9vaoflmew4FnaLcqIRoGVUeZ1CzoHB4Kqr2C7Ddyf9XEU1mUTQM
ZqT0k9sSzrY5YpSdHiahPKW9ZIbk9om4S9TW6Qtv97H/Le+6/YPhYSzrJ1nkqHPQ
XbgP43cKGElmQw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:54 2025 by rpki-client