Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: +2JNmCAHs6/uBYZYXnWRZdFUIT5pCQAN2B6X4ek1Fck=
Subject key identifier: F0:1A:DA:30:8C:B9:BA:57:C7:E1:B6:95:A3:EF:73:00:10:5E:20:BF
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 01974BFBA961FEC4C9A7908208FE38A893B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 20:01:13 +0000
Manifest this update: Sat 07 Jun 2025 20:01:13 +0000
Manifest next update: Sun 08 Jun 2025 20:01:13 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: Yku5qrcwGWxCzKLovKvSqYo/eyg7CL1e7hMBKx8j4M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:a9:61:fe:c4:c9:a7:90:82:08:fe:38:a8:93:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Jun 7 20:01:13 2025 GMT
Not After : Jun 8 20:01:13 2025 GMT
Subject: CN=f01ada308cb9ba57c7e1b695a3ef7300105e20bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:61:97:2c:36:1a:6b:9f:a6:58:91:c4:18:
b8:45:f2:f7:1a:e2:50:8e:f5:d3:43:00:3a:26:0a:
ad:b3:4d:9b:80:38:7c:6e:79:77:cc:36:a3:19:fb:
b9:00:81:97:60:9b:e9:7e:49:e9:c3:ea:0f:61:22:
46:03:de:29:48:47:75:e1:bc:8c:2d:c9:9b:24:76:
63:b3:4a:aa:91:dd:5d:31:29:a3:64:fa:32:e5:23:
a7:fe:af:bc:35:11:bf:a2:e1:46:e0:7c:67:3f:fb:
66:24:ac:05:89:6c:fd:79:75:d7:22:5d:f4:0c:9a:
8e:09:64:d8:04:48:36:2e:8e:e0:25:b3:d3:42:73:
a6:2c:b1:88:1f:2a:1e:c2:d2:12:32:11:2f:48:30:
d8:fd:24:8e:1b:b3:56:9b:6d:62:d9:30:f0:4f:f8:
d9:02:10:5e:47:8f:b3:a7:62:96:45:5e:b2:3d:d8:
7a:69:42:90:23:98:a5:ec:47:3e:2c:be:36:45:2b:
52:82:7d:76:c6:be:ec:a5:5a:e6:8d:63:ea:b4:f0:
a5:2d:44:05:14:fc:65:2a:05:69:8d:c3:3e:d5:7f:
6a:e2:c3:9a:19:be:d1:0d:75:f9:1a:34:dc:ea:26:
05:e9:f8:1b:16:35:a3:18:e5:db:8f:7d:96:01:ef:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:DA:30:8C:B9:BA:57:C7:E1:B6:95:A3:EF:73:00:10:5E:20:BF
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1d:9c:1f:2d:a5:0f:0c:40:c1:9e:0c:6d:91:38:5c:2f:ba:
01:32:d5:2b:cb:92:0b:39:00:d8:61:d6:48:6a:be:ca:5a:22:
25:5a:75:c8:d8:fd:3a:91:d9:18:2f:54:4f:da:39:5d:88:99:
60:0c:9f:f0:41:7c:e4:28:b0:76:83:7c:a6:cb:22:8f:99:0b:
fb:9e:d0:93:aa:86:6f:47:00:00:98:01:5c:8e:ab:e2:ac:63:
16:27:44:5d:9c:15:dc:25:ca:d9:d7:e5:f3:b7:e7:7e:b3:1f:
39:94:eb:91:99:8e:3e:65:f8:2a:8b:86:5a:37:81:51:54:99:
55:8c:76:94:73:c0:e2:1a:d4:6e:d4:3b:0f:b7:c6:46:c3:ea:
77:e7:94:19:d8:de:26:ba:0a:c7:80:28:20:a1:08:21:01:b2:
80:47:ab:e3:1c:da:33:23:7e:2f:0c:48:2e:8c:fb:fb:a0:98:
42:f2:81:96:aa:b2:cd:d9:ee:3e:91:38:a9:5e:55:a4:7a:21:
70:e3:74:0c:29:c2:08:89:c9:d4:1b:05:5d:87:46:29:7b:4e:
c1:6e:01:a9:14:56:01:3e:95:3c:e9:e6:85:71:70:1c:a9:ee:
ce:35:63:5d:64:00:1f:d7:fd:63:0e:9e:52:88:04:09:4f:60:
70:f8:2e:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+6lh/sTJp5CCCP44qJOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0
YzRiMWEwHhcNMjUwNjA3MjAwMTEzWhcNMjUwNjA4MjAwMTEzWjAzMTEwLwYDVQQD
EyhmMDFhZGEzMDhjYjliYTU3YzdlMWI2OTVhM2VmNzMwMDEwNWUyMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRdhlyw2GmufpliRxBi4RfL3GuJQ
jvXTQwA6Jgqts02bgDh8bnl3zDajGfu5AIGXYJvpfknpw+oPYSJGA94pSEd14byM
LcmbJHZjs0qqkd1dMSmjZPoy5SOn/q+8NRG/ouFG4HxnP/tmJKwFiWz9eXXXIl30
DJqOCWTYBEg2Lo7gJbPTQnOmLLGIHyoewtISMhEvSDDY/SSOG7NWm21i2TDwT/jZ
AhBeR4+zp2KWRV6yPdh6aUKQI5il7Ec+LL42RStSgn12xr7spVrmjWPqtPClLUQF
FPxlKgVpjcM+1X9q4sOaGb7RDXX5GjTc6iYF6fgbFjWjGOXbj32WAe/TsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAa2jCMubpXx+G2laPvcwAQXiC/MB8GA1UdIwQY
MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct
ZTBkYzE4ZTg4MjI5LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5
LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh2cHy2l
DwxAwZ4MbZE4XC+6ATLVK8uSCzkA2GHWSGq+yloiJVp1yNj9OpHZGC9UT9o5XYiZ
YAyf8EF85CiwdoN8pssij5kL+57Qk6qGb0cAAJgBXI6r4qxjFidEXZwV3CXK2dfl
87fnfrMfOZTrkZmOPmX4KouGWjeBUVSZVYx2lHPA4hrUbtQ7D7fGRsPqd+eUGdje
JroKx4AoIKEIIQGygEer4xzaMyN+LwxILoz7+6CYQvKBlqqyzdnuPpE4qV5VpHoh
cON0DCnCCInJ1BsFXYdGKXtOwW4BqRRWAT6VPOnmhXFwHKnuzjVjXWQAH9f9Yw6e
UogECU9gcPguaw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:45 2025 by rpki-client