Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: 0qxZQJ6GEJQ9vcy3kWgGZQag2r3OCTJHgfirooe1vDA=
Subject key identifier: 56:71:56:C0:B5:82:05:D7:19:E7:54:87:CD:EA:2C:E6:D3:DB:20:95
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 019A7149B65DCF2B21BAEF7A79F8CE011144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 02F9
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: PBvxF2I6sijHs9LR34Zl3qDbYBueAEL5vHSqSciExr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b6:5d:cf:2b:21:ba:ef:7a:79:f8:ce:01:11:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=567156c0b58205d719e75487cdea2ce6d3db2095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:b1:86:bf:6c:e2:2d:0e:db:15:ca:4c:34:
fa:5b:18:a1:c6:10:21:54:05:ba:ae:60:56:04:ac:
cf:e8:86:86:30:72:de:c6:00:c0:7e:c4:75:8a:ba:
f8:15:fd:dc:9f:91:96:13:a7:28:70:89:7b:98:d7:
42:dd:0d:09:f4:c8:66:bd:33:c9:ca:19:7c:1c:74:
28:2b:ba:d2:14:a0:99:5a:51:16:29:02:25:d4:ec:
d8:9c:9e:90:2b:4a:e4:88:23:e2:71:e6:0e:1b:72:
9f:ea:4e:63:3d:80:e3:3d:df:d2:49:db:f4:b2:4f:
3a:27:1a:ce:94:45:0d:e5:4b:4e:ca:46:6f:bf:88:
b6:1a:0a:40:84:a9:fe:e2:98:5d:9a:08:38:e3:89:
83:32:1c:9e:51:9a:30:73:64:f7:56:12:b7:f1:44:
dd:45:d6:27:02:0c:d3:8c:21:a7:10:4b:2e:6c:94:
a6:8b:86:39:71:ec:12:68:4f:fe:72:3c:c8:9c:e5:
c0:ff:64:86:bf:91:29:aa:e5:95:b2:17:ca:58:ff:
eb:28:9d:66:89:06:fe:22:2f:d8:36:74:32:d0:6b:
ff:a4:5c:3c:42:ce:08:cb:1b:d1:8b:a9:69:52:43:
a0:31:33:f7:e1:88:a8:02:97:79:d8:fe:77:1a:04:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:56:C0:B5:82:05:D7:19:E7:54:87:CD:EA:2C:E6:D3:DB:20:95
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f7:98:ea:11:01:68:65:0c:c9:c8:bd:29:5f:33:75:2b:c1:
33:a4:81:91:83:91:2b:36:75:5c:f2:82:99:fd:a0:22:eb:97:
78:d4:c5:e7:4c:a1:1f:68:49:38:0b:5d:ae:8b:60:82:93:25:
9a:c0:86:cf:46:70:6f:fd:81:c4:17:b3:fd:85:b0:3a:d6:b8:
42:75:d8:b7:37:bd:a3:81:5f:8e:0c:e1:89:0a:40:8f:6a:ab:
f7:11:ca:bb:8a:89:f3:8d:21:1f:86:2f:e1:96:db:87:77:62:
e1:f1:58:f1:86:41:9a:1f:4c:a4:97:34:d0:7e:3d:ef:af:f9:
04:2d:80:a9:f3:72:29:bc:16:f0:6b:c4:89:ae:1e:42:6f:99:
f1:0e:1b:b7:55:a1:ce:26:45:ab:18:05:c9:ab:b5:f5:30:cd:
2e:28:3e:90:58:89:70:78:c8:fd:a3:83:33:3c:19:6b:af:f7:
8b:f5:34:d5:dc:7b:7a:62:85:a9:0e:ae:15:e2:b3:5c:56:df:
91:3b:14:23:d3:d2:9e:91:61:02:8f:85:52:c1:ae:e4:52:52:
3a:67:98:c5:a9:a0:c4:e6:1b:5d:79:72:18:bc:14:b0:4c:a3:
a2:cd:2e:ca:1c:18:07:80:5d:a9:5c:53:cc:0c:48:23:66:7b:
13:76:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:43 2025 by rpki-client