Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: NRf4QQTfHrn761Mw6DZbd3HeHGHS75Lhl5FmSoYErms=
Subject key identifier: F4:7F:B3:F6:7F:AB:B4:7C:FA:D8:D2:F5:61:79:78:E4:2A:9A:90:74
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 0198548D86D10E72C8992CF83C7F2D86D910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 05:00:17 +0000
Manifest this update: Tue 29 Jul 2025 05:00:17 +0000
Manifest next update: Wed 30 Jul 2025 05:00:17 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: SJQN1kgn5Y5EwMfbgTwsRduU/kIA501R9Do1g5/5KVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:86:d1:0e:72:c8:99:2c:f8:3c:7f:2d:86:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Jul 29 05:00:17 2025 GMT
Not After : Jul 30 05:00:17 2025 GMT
Subject: CN=f47fb3f67fabb47cfad8d2f5617978e42a9a9074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:b4:a8:f0:c7:18:dd:9d:40:5e:55:71:89:
f2:36:11:ad:6e:4c:ac:7a:76:7f:67:e1:47:40:bb:
45:67:ab:96:b7:c0:e4:29:b7:f3:37:ea:5a:66:29:
86:7a:93:42:44:64:87:61:2e:5b:53:ff:41:d8:cf:
e4:b3:15:12:17:e4:81:20:a4:34:17:d6:a0:09:d9:
43:bc:01:3d:74:de:fb:bc:d5:58:e8:13:96:d1:d5:
94:cf:1d:19:c3:24:9a:9c:95:71:b6:08:bb:6e:af:
23:5d:4d:d5:c5:36:9f:ba:c7:e6:ff:6b:d4:dc:8b:
d0:b6:1d:fe:21:14:70:a6:21:2c:69:d8:0f:1d:00:
23:ab:41:ab:29:06:28:e1:0d:e0:ae:2a:80:2a:d8:
a4:8e:a0:22:57:24:79:84:67:94:86:53:a0:58:35:
bc:aa:0b:f2:04:1a:99:cd:4c:b0:ee:54:76:1d:9e:
71:3b:b0:d4:2f:3f:a2:49:6f:67:66:48:6d:17:9c:
7e:29:3d:b2:8b:d7:02:2d:c9:80:26:ce:92:a4:89:
37:40:06:19:cc:3e:bd:c2:41:9e:dd:76:25:c9:cc:
f6:0f:bb:b7:86:e1:56:7c:15:3b:0e:b1:ac:aa:e1:
f2:e6:4c:94:6c:8e:56:a0:f4:35:a4:4e:9c:e1:2b:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:B3:F6:7F:AB:B4:7C:FA:D8:D2:F5:61:79:78:E4:2A:9A:90:74
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:32:de:e7:17:c9:c4:84:b6:3d:27:b1:f5:e3:70:45:f7:d4:
16:86:06:33:6e:33:ed:94:33:f2:bc:62:e9:5d:38:5d:c3:6f:
7c:d7:bc:d3:c7:0f:9b:eb:e5:fd:d7:81:44:e9:61:09:0f:ed:
c7:b2:92:fa:20:dd:d8:07:d7:ff:7d:d5:e2:2c:c5:ea:a0:f4:
fc:32:d6:db:57:29:19:e9:a6:5d:b5:28:49:a4:8d:86:20:85:
af:6c:dc:73:93:e8:f0:c6:96:5e:f3:0a:0c:3a:2e:95:2e:49:
1a:9e:39:f3:f7:b5:6c:aa:7b:b1:19:73:6f:ca:6e:00:2c:f3:
fc:87:7e:6a:c9:1a:f1:b4:fe:b6:b3:f1:63:34:7b:2c:89:8c:
da:1b:9b:cb:d3:4d:7e:a4:4f:a0:a1:16:84:98:7d:f6:6f:25:
9a:7c:5a:ba:05:4d:7e:b8:e1:0c:58:d3:9c:76:90:67:39:4c:
96:88:37:06:42:06:c1:e5:0d:11:c7:e3:d9:9d:c6:b1:15:f5:
9c:3e:b3:53:97:f0:2d:b9:ce:1c:a6:bb:54:d9:1c:b8:8e:42:
5c:8b:a0:29:79:a7:3c:03:7e:e3:ec:96:91:cc:66:6b:7f:02:
b0:45:79:47:6b:82:f1:21:9d:ca:b5:3d:b1:fe:02:a6:0d:04:
e2:bd:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:25 2025 by rpki-client