Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: vKP21NSK4rVKiad2icAERjsuH8P3L4ymUI/b8iTZZkM=
Subject key identifier: 39:C4:AB:2D:6C:73:89:20:51:A6:2C:9F:B6:4F:E6:A6:EA:F3:4E:CA
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 019748C369129E69022110AD9FABC554D9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:55 +0000
Manifest this update: Sat 07 Jun 2025 05:00:55 +0000
Manifest next update: Sun 08 Jun 2025 05:00:55 +0000
Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: Pz+qEhPXaxmrkukDNssk5Og+L5GPINEsQuS0z4MG5Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:69:12:9e:69:02:21:10:ad:9f:ab:c5:54:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Jun 7 05:00:55 2025 GMT
Not After : Jun 8 05:00:55 2025 GMT
Subject: CN=39c4ab2d6c73892051a62c9fb64fe6a6eaf34eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:cc:c9:58:d7:8c:34:81:12:10:35:f9:b0:
ae:de:c2:57:47:01:a4:8e:05:56:e5:3f:6c:2a:76:
01:55:28:7b:ce:6b:c6:49:8d:60:3c:1c:5b:7f:31:
42:b5:ef:16:ed:c6:22:b1:82:31:37:a0:66:1f:b1:
23:83:8b:6f:b5:fc:fe:14:4e:19:b4:fc:be:ec:f6:
f5:f3:32:60:16:dc:44:07:ff:7d:de:2c:0f:ca:5e:
04:e7:ad:2e:96:80:8f:c1:68:d8:de:05:8f:f6:6a:
a0:32:ab:73:96:d9:5d:4e:dd:ed:df:55:da:a7:36:
a6:66:24:df:eb:51:7b:dc:17:4d:07:ba:a6:45:c1:
c9:65:90:f2:13:55:ef:78:34:f3:85:92:b6:01:47:
03:bb:04:3d:7d:35:27:2a:c9:1c:1e:df:f5:0b:cf:
2c:a9:6f:18:e6:ab:d2:fc:d8:64:a2:cb:64:cb:97:
79:c7:d7:c8:db:93:24:3b:26:cf:94:87:52:f1:16:
df:51:44:d1:ec:f1:94:1b:25:28:7d:1d:51:44:6f:
7b:63:08:e9:a4:87:b6:26:80:07:d8:ea:bb:81:ab:
22:39:45:33:8e:fd:64:82:10:5a:d6:3e:82:17:3d:
6f:e2:86:df:56:65:72:2d:d3:64:55:5b:ee:ff:5d:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:AB:2D:6C:73:89:20:51:A6:2C:9F:B6:4F:E6:A6:EA:F3:4E:CA
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f5:de:d3:38:d9:da:bb:44:22:8e:66:19:10:0d:e7:e8:0c:
86:d1:60:db:5a:99:c8:42:71:c4:e9:15:c3:b3:c0:62:71:e7:
8e:3e:38:be:f5:b5:84:b3:45:76:14:10:d1:0a:4a:23:68:2c:
7a:37:24:db:f4:a6:3b:fd:a0:cb:0a:e0:f6:c9:4a:f0:40:bd:
cc:2a:9a:37:11:c4:37:f9:f3:2a:e9:c2:ed:f0:cb:b5:aa:2e:
4b:c0:74:44:79:ac:22:0d:c6:df:f2:8d:0f:d0:44:9b:6c:a4:
ef:84:3e:5b:78:66:61:2a:71:20:51:64:d2:9c:4a:40:d1:52:
0b:16:cb:63:c8:cf:2b:af:dd:b9:02:96:a6:15:fd:21:1d:8e:
6f:7b:48:de:97:28:00:65:25:50:76:07:90:32:58:50:ab:3b:
99:10:0e:d1:87:d0:07:4e:e6:81:59:63:66:36:d6:c5:07:33:
fb:bc:e4:49:e2:81:dc:c6:9a:f4:78:53:ca:94:48:60:81:9f:
85:cc:ba:dd:cc:d9:e0:52:c7:3b:3a:71:b9:62:62:0c:99:7a:
49:d2:7c:b4:64:30:df:24:d8:6b:fa:b7:92:b0:d7:fc:97:0c:
69:b9:9c:ce:72:bd:c3:d9:93:ee:8c:bd:bc:a8:3e:dd:13:ad:
42:41:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:22 2025 by rpki-client