Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: yuYKcDz3MNks2LT/UKz4szMhLJOzcXRNlxWHbBamqSg=
Subject key identifier: BF:15:C2:DD:B7:86:9A:93:20:E7:F0:12:DE:9A:71:1F:28:11:CE:DB
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 019A71EE87B9D28AEFAE274C4041A1C170DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: gtP3jYwF9CO+AmO2/kaPcJjJsP991dG2WXEKBTFs5b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:87:b9:d2:8a:ef:ae:27:4c:40:41:a1:c1:70:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=bf15c2ddb7869a9320e7f012de9a711f2811cedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:e5:52:14:f1:02:1e:19:10:32:09:3f:8d:
06:bd:45:0a:be:f4:34:47:bd:94:a8:c1:75:58:c3:
eb:66:68:e3:13:08:83:bd:85:3f:95:b9:51:28:0f:
f7:27:32:7b:fc:18:8c:49:99:2f:c8:a9:c5:3f:08:
af:61:1b:d1:b4:09:ce:b1:60:09:3e:8b:3c:84:44:
8b:c8:8a:91:05:35:5f:16:83:46:0d:2b:2b:fd:34:
6d:a9:26:2a:d6:7e:92:57:3b:c4:5d:70:85:f9:dd:
58:30:e7:5c:62:7b:18:55:66:46:98:48:74:5b:f1:
1d:cc:b5:5d:55:65:cb:d1:2e:90:4a:af:9a:65:77:
63:ca:da:92:5a:f4:e7:1d:a7:25:5a:6d:2e:b4:16:
a2:04:dc:30:98:66:8f:f2:02:5c:0a:4a:b9:a7:2a:
3c:66:ff:9e:a6:bc:98:8e:ff:1d:c2:1d:01:c3:28:
84:08:a1:4f:51:24:f1:e6:c4:84:af:ee:e9:5d:5d:
e6:63:a9:8e:0b:8f:18:10:e8:34:fc:05:ec:20:3a:
44:60:68:25:25:84:41:39:a5:10:04:a1:bd:13:6c:
2c:30:5b:02:c7:cc:51:3d:a2:7f:bd:12:6f:df:0f:
1d:89:0e:ec:59:31:1b:41:cd:e7:b0:d5:1c:1f:23:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:15:C2:DD:B7:86:9A:93:20:E7:F0:12:DE:9A:71:1F:28:11:CE:DB
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:b8:c6:67:65:09:7f:3d:71:68:b7:cf:fb:f0:b5:3f:60:
3a:42:3c:56:d3:e8:54:55:26:13:9c:0e:4e:01:fb:fb:cf:6e:
d1:3f:29:cb:25:91:a8:82:b7:fb:d9:61:54:01:be:85:c6:13:
b8:69:99:da:de:c3:75:42:ef:4b:8b:6b:4b:7f:c8:9e:b3:f9:
b4:c0:4a:45:37:eb:b8:93:e9:cd:9a:d7:c6:ae:0a:c6:1e:f7:
16:1d:4d:5f:9c:b8:3a:c8:4b:61:e9:94:e0:1a:c5:d1:8e:38:
40:a6:42:3c:b1:61:17:40:f2:c9:60:3b:fc:c6:9c:aa:7d:1f:
b5:d7:fa:4e:12:cd:3f:cb:43:40:96:f5:ac:a0:b2:a5:87:ec:
d0:12:d6:25:bc:2e:ab:be:89:df:3e:72:f3:2f:46:5a:17:cd:
da:b6:b4:96:3c:47:18:e3:98:85:8d:19:a1:20:96:a9:c2:8a:
0a:4a:5b:52:e2:e5:90:31:b4:79:6a:31:dd:1f:bb:c5:c2:f2:
2f:ab:0f:c0:cd:ae:cf:99:e5:b0:a6:2b:7b:77:b3:87:5d:07:
db:99:a8:3a:f7:4f:1d:9e:8f:99:50:50:88:93:35:ab:98:1d:
07:87:e5:c2:84:4b:88:f9:f7:2d:39:b8:fb:15:24:58:fb:0f:
f2:88:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:41 2025 by rpki-client