Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: 8M8vZyH094Iu/5r2JtRF2/jbYDEt3VIorg9CHjNf/Q4=
Subject key identifier: 85:E7:FB:AC:61:45:A8:10:79:FF:91:4D:77:56:C2:68:1B:F9:01:F3
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 0197635EA32E36F3E0B10789D8EBB5300CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0B8D
Signing time: Thu 12 Jun 2025 09:00:35 +0000
Manifest this update: Thu 12 Jun 2025 09:00:35 +0000
Manifest next update: Fri 13 Jun 2025 09:00:35 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: unW8kCdbUvRl8NNVOvK8qFoGeC82nlgvwL+jzjKlOhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5e:a3:2e:36:f3:e0:b1:07:89:d8:eb:b5:30:0c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Jun 12 09:00:35 2025 GMT
Not After : Jun 13 09:00:35 2025 GMT
Subject: CN=85e7fbac6145a81079ff914d7756c2681bf901f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:89:a8:77:ee:21:41:42:ba:50:96:80:62:
c5:43:8b:ff:34:bc:c4:9f:01:3a:61:9f:03:45:c9:
8c:96:3a:d9:2a:b2:6c:94:d4:60:b5:6d:77:60:9e:
be:bb:92:75:ef:3a:63:06:5d:02:f4:12:8e:cf:a9:
e2:d8:bd:1a:36:07:21:e6:7e:29:0f:3f:65:3f:55:
61:e6:0e:a2:79:5c:74:db:4b:55:17:f2:24:ec:de:
8f:2f:ea:91:15:00:d5:cb:c1:d5:a1:22:b2:fd:6e:
1d:56:5c:6c:54:68:74:98:ae:65:15:2d:f4:38:53:
63:84:a6:b0:2b:6f:34:f3:79:13:2d:d9:65:01:f3:
fa:f8:65:c0:f6:4d:bf:82:56:68:83:0c:31:ac:03:
84:6a:b9:98:d8:b8:95:cb:53:c1:a0:e3:52:ee:b0:
91:fd:e2:4b:81:4c:68:f1:9e:d2:33:8d:83:60:3f:
e8:9b:3f:6f:c8:d7:47:56:1d:21:e7:88:ba:8c:1d:
65:bd:8f:35:19:c3:09:a2:75:e3:19:80:1d:e5:78:
0d:33:39:69:ed:87:83:89:25:94:10:a6:9f:af:81:
e9:93:82:d6:ed:c6:a6:05:ef:70:3c:4b:7b:09:2e:
58:13:40:b1:05:26:46:02:bd:7c:ea:d9:2f:ff:04:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:FB:AC:61:45:A8:10:79:FF:91:4D:77:56:C2:68:1B:F9:01:F3
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e7:6f:5c:86:69:26:3e:03:d6:8e:d9:e9:27:37:00:f9:38:
43:96:f8:bb:47:8a:91:cd:cf:76:27:23:3a:60:e2:2e:72:88:
03:74:ad:bd:c9:b6:e1:71:11:ad:3b:91:0e:ac:54:65:92:0a:
20:6d:65:45:fa:a9:e6:24:db:39:b1:82:80:ec:e8:1c:7d:fa:
48:92:c6:bc:93:83:f2:d9:09:d8:e3:29:20:80:0e:8f:a2:9a:
bb:13:96:ba:9d:46:71:37:f8:63:6f:74:2c:c3:38:30:bf:6a:
28:b6:f2:8a:cc:b9:e9:fa:0a:cb:19:57:6b:9a:b7:b0:83:6a:
97:25:d5:55:b3:fa:2c:c9:a4:1c:f3:ae:8e:7a:46:9c:12:36:
29:2f:91:5e:2c:f4:98:34:27:ed:02:31:11:89:04:cb:78:d0:
0c:92:dc:5d:6e:9a:04:4a:9f:ca:ad:1e:48:d7:c3:f9:a5:88:
26:b7:d5:9e:fc:bb:1d:57:28:d4:2f:b3:40:71:66:29:78:06:
34:b9:bf:93:54:bb:5b:23:ca:8f:fb:5e:b5:79:68:f3:1f:b5:
a8:05:a5:19:f2:01:b1:8f:7f:0f:c9:1d:c0:0c:09:4a:e7:f5:
eb:1f:49:bc:f6:1d:ee:a8:2d:d3:6e:60:a0:94:0b:88:7f:d7:
c7:5c:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:55:45 2025 by rpki-client