Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: 2JSzH9/HZbeFGbdXXUqCUr7ZBh5hNue9+BK2uw64g3k=
Subject key identifier: 01:90:06:10:D0:AE:34:35:67:35:5F:9B:32:63:6C:93:56:1B:97:CC
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 01975D93714CDDC603EE1A74B01929DF5FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0B8A
Signing time: Wed 11 Jun 2025 06:00:33 +0000
Manifest this update: Wed 11 Jun 2025 06:00:33 +0000
Manifest next update: Thu 12 Jun 2025 06:00:33 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: ppvofiNLswjzZj3R+gnTcFuZffmD71Z6tuLn86LT5gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:71:4c:dd:c6:03:ee:1a:74:b0:19:29:df:5f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Jun 11 06:00:33 2025 GMT
Not After : Jun 12 06:00:33 2025 GMT
Subject: CN=01900610d0ae343567355f9b32636c93561b97cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:55:e0:0c:45:3b:61:c4:85:d4:ed:28:61:
7f:ff:a4:1c:08:3a:2a:9e:51:cd:0b:15:19:f7:5f:
82:0f:04:c0:15:7b:d1:67:7d:74:34:88:2f:23:24:
df:ea:07:65:0f:d7:12:e9:05:ba:d6:6d:93:cc:6a:
d4:b3:61:42:17:7a:d7:2d:24:1e:84:18:5d:71:3f:
4f:6a:9e:1a:d5:4f:ac:f5:7c:59:bf:2d:6f:ff:23:
8a:df:56:55:75:a0:04:54:7a:af:41:63:f2:f0:27:
69:82:61:0f:5f:ac:17:6f:07:98:64:86:23:e6:42:
98:96:c4:eb:74:65:c6:bf:59:31:08:92:83:e5:e0:
3f:0c:fd:8d:a7:ba:3d:23:3f:01:34:6c:7c:b9:0e:
e9:f3:c6:5a:43:4a:b9:80:05:55:a4:7f:0c:fd:66:
e8:25:09:ea:c6:f8:ca:2c:73:10:cc:91:28:2b:66:
a4:25:81:30:2c:e1:3c:68:15:0f:cd:49:e6:66:a8:
b3:ce:50:70:2f:72:40:d9:dd:97:f3:2a:a4:a9:23:
82:72:c9:96:92:b0:df:ac:74:01:31:4b:0c:2e:03:
ca:de:64:d0:d7:93:e5:a0:02:e4:7b:93:00:f7:75:
bb:1a:ee:57:3b:60:0b:e8:f5:14:5c:a1:b3:ca:e4:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:06:10:D0:AE:34:35:67:35:5F:9B:32:63:6C:93:56:1B:97:CC
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f4:97:88:5f:61:ef:4a:25:a8:4d:67:c5:5f:2f:c2:e3:87:
59:8a:e9:1e:f1:15:7f:7f:5d:96:a4:8f:68:73:20:7a:23:b3:
b5:9e:6f:e3:95:5b:88:3b:08:60:ba:77:d3:52:9d:c8:3a:d0:
61:de:3a:2e:0f:34:66:b8:4e:4e:f8:c0:4b:b0:ab:2d:d3:40:
1e:d2:ea:1b:58:ec:a3:1c:c6:10:ee:ee:17:18:78:6b:cf:bd:
63:11:9b:34:9e:77:b6:09:e4:51:be:84:ad:0e:89:b0:70:21:
1c:f8:d2:fb:4a:19:62:67:44:77:da:8f:f5:0a:9c:ca:c4:db:
03:89:d0:9f:72:a5:63:67:6a:97:bd:88:f9:dd:13:c1:4b:f3:
99:4c:6a:85:47:99:bc:c6:1e:a0:f3:d0:1c:9f:38:55:84:bd:
f3:db:66:43:f5:6b:31:30:2a:d9:f4:79:04:dd:09:27:56:e8:
cc:49:06:43:08:6c:bc:ec:10:8f:a6:7b:89:f1:5d:36:d4:8d:
0d:41:d5:b2:88:55:a6:39:d9:07:6e:74:5f:e1:2e:62:c6:38:
0d:64:e9:c4:25:07:ad:54:e3:00:b6:d0:8f:55:5f:92:94:23:
57:98:c7:2a:8d:46:63:51:84:dd:a7:49:51:d8:d8:05:07:dd:
c1:4d:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:37:01 2025 by rpki-client