Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: +QyceYO9oxMMEFLCy2VnHr2Jc5TYk+nWw4w0TPmpqmU=
Subject key identifier: EB:BD:93:B2:5B:5B:72:E3:8E:F4:AD:79:98:5E:9E:4A:10:0A:1C:67
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 0199179AB6DB8026EBCA7520D37B4954345E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 0246
Signing time: Fri 05 Sep 2025 02:00:39 +0000
Manifest this update: Fri 05 Sep 2025 02:00:39 +0000
Manifest next update: Sat 06 Sep 2025 02:00:39 +0000
Files and hashes: 1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: LP1qn90pDU/C/IWnGWBbxZjSuXUrR8z6q9iBuva5qMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:b6:db:80:26:eb:ca:75:20:d3:7b:49:54:34:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Sep 5 02:00:39 2025 GMT
Not After : Sep 6 02:00:39 2025 GMT
Subject: CN=ebbd93b25b5b72e38ef4ad79985e9e4a100a1c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:38:dc:43:8c:43:01:40:a6:9c:19:d4:88:
08:6c:c7:85:cb:b5:fb:8d:b3:14:f1:d8:16:d6:f5:
45:aa:d1:63:42:6b:d9:1b:38:dc:d8:88:21:64:ca:
2c:40:e1:15:91:67:cc:9c:01:2c:63:24:a6:d0:ec:
ae:0e:38:ba:7d:ae:d5:02:f5:73:f6:77:e1:b8:52:
f4:c4:e7:76:7b:03:a4:f4:9c:65:b4:fc:0a:2e:65:
0e:62:fe:50:bf:ff:4f:cf:ab:06:80:07:02:4f:84:
d9:ca:42:1b:6d:9d:45:a1:dc:d7:d5:32:c4:f9:16:
2e:da:f4:38:61:4f:b1:a3:9b:f2:56:25:68:28:27:
63:5e:fe:be:d0:49:ae:9e:bb:95:6b:1e:c4:72:bc:
fe:3a:25:ad:5a:d5:69:30:2d:ad:54:96:65:55:da:
f2:21:94:df:fa:b1:99:67:1e:91:92:3d:b7:b4:05:
79:72:7c:71:f9:20:9a:16:4b:8f:9b:2d:66:1a:a4:
7f:9e:a7:68:46:28:dc:b7:aa:10:1c:03:2c:44:3a:
48:bc:ce:75:31:8c:c2:5f:48:3c:e4:4b:77:c2:fc:
c4:30:f8:4f:ec:a6:3d:1c:40:98:6d:d2:51:a3:0a:
83:32:64:e0:e0:4d:d4:4a:26:c3:a7:31:7a:50:db:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:93:B2:5B:5B:72:E3:8E:F4:AD:79:98:5E:9E:4A:10:0A:1C:67
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f4:9b:fa:28:cc:22:f5:3d:81:81:57:10:43:ea:f5:cf:eb:
2f:1a:a3:73:05:73:9f:8b:0a:5d:bd:0a:8b:70:23:81:8a:e8:
0e:51:80:59:bb:be:5b:a6:04:b5:77:d7:08:ee:9a:57:17:46:
f2:d6:44:e9:25:99:bf:f7:1e:70:69:5c:d4:02:1c:2d:e0:1b:
21:4e:19:1c:3a:21:55:f9:ee:9b:98:09:a7:0f:90:1c:47:6f:
72:32:09:b6:56:b9:0b:fa:43:3e:f6:0a:0e:9c:a4:0e:84:d7:
17:3e:18:fb:d9:8a:73:07:0f:e4:18:93:5b:57:10:ae:09:54:
36:0c:44:9b:ab:c3:ff:92:2a:9b:d7:83:c4:2b:86:21:03:4d:
4d:51:d5:63:dc:43:21:d6:de:8f:55:2a:d8:98:cc:99:7e:3a:
52:dc:2c:90:ed:54:47:da:ea:54:0d:bc:1f:54:1d:ce:f4:fb:
e6:27:e4:ab:b3:21:5a:69:1f:7b:cb:51:a2:ff:97:e1:fd:db:
f9:25:c6:76:c9:48:41:60:61:09:40:67:bc:25:97:26:d4:38:
e2:3d:3e:d4:b0:0e:27:5a:63:03:93:24:46:2b:ff:75:3c:0d:
9b:60:c3:c5:06:19:f4:3b:0d:ac:4d:27:1b:58:66:7d:3e:2c:
96:48:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:21 2025 by rpki-client