Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: FjFzXR5J/Ly8HdF4x2Ep14HhjAT97O+9naf/gQMHMSY=
Subject key identifier: B2:62:7C:F8:18:BC:AA:16:85:45:0A:09:12:EA:D2:4C:58:5D:90:9B
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 019753EB4996568FD63830967EA1E70FD34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0B85
Signing time: Mon 09 Jun 2025 09:00:18 +0000
Manifest this update: Mon 09 Jun 2025 09:00:18 +0000
Manifest next update: Tue 10 Jun 2025 09:00:18 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: 87qYCq6yEmm+MirsJOYocD3YRUE93MzH9RhXkyeERkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:49:96:56:8f:d6:38:30:96:7e:a1:e7:0f:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Jun 9 09:00:18 2025 GMT
Not After : Jun 10 09:00:18 2025 GMT
Subject: CN=b2627cf818bcaa1685450a0912ead24c585d909b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:f3:ce:f4:cf:31:50:f6:1f:3c:da:bb:95:
8b:c5:44:e6:94:8b:65:5e:5a:73:15:f0:f6:d8:5b:
b4:53:fa:fe:26:ee:fa:70:8c:44:27:25:17:86:4e:
08:2c:86:28:dc:bb:f7:a1:37:0f:ea:b3:74:fc:87:
19:8e:18:3e:1e:5b:cb:ca:69:62:bd:9e:49:8a:62:
81:0f:c5:49:a2:94:3b:eb:58:72:88:b9:00:fc:01:
8e:17:64:42:6b:9a:c7:7e:03:ea:90:10:a9:4f:63:
ba:da:42:c7:2a:28:90:c4:fb:c6:43:a2:40:82:11:
41:48:0c:6b:f6:40:5f:e0:0e:43:5e:f8:81:fe:57:
49:59:e2:34:a3:2a:bb:14:32:11:3e:ea:1d:db:96:
05:4d:8d:09:13:e0:71:67:41:86:76:cc:d5:88:07:
09:99:f2:8e:aa:74:a4:00:85:d2:81:7c:76:a9:0d:
39:c4:0c:c8:15:92:70:10:15:83:f1:28:7f:52:3b:
43:af:4b:33:fb:78:af:a4:91:af:91:db:46:cd:32:
0c:9b:1c:8c:d6:fa:9f:74:58:c5:a7:65:f5:7e:b5:
a2:23:d7:ec:18:18:7b:19:7c:e9:95:44:31:aa:d8:
45:82:1a:b6:d6:05:d6:a8:48:72:e0:4a:c4:36:86:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:62:7C:F8:18:BC:AA:16:85:45:0A:09:12:EA:D2:4C:58:5D:90:9B
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4d:e7:f1:e4:9f:2e:b9:d1:e6:fd:00:72:dd:98:4a:90:0e:
cc:f3:43:3d:22:ba:55:0d:55:4b:68:4a:37:b0:67:4b:a0:ff:
3a:74:7b:85:78:2d:0a:37:1c:ad:2c:bc:fb:5e:e6:4d:40:77:
c1:59:61:dd:d0:c9:26:50:f2:55:c2:c4:5b:d8:7a:36:00:3c:
aa:f7:e2:cf:4d:8f:57:38:89:0b:4e:fa:01:99:44:91:b5:37:
d7:99:79:aa:43:e4:52:66:0e:73:03:95:6d:60:38:18:28:0b:
0f:b8:da:9f:1c:50:b6:0c:da:d4:f1:98:05:5b:90:6e:f1:10:
46:7e:3a:67:40:66:56:3e:39:ca:c0:b1:47:04:95:eb:5d:4d:
6c:d2:33:5d:53:c3:70:d2:80:0d:0d:2b:bd:60:06:48:3a:37:
9c:30:ed:5d:cd:c1:c5:24:21:82:9c:1d:5a:56:93:33:7f:e8:
22:5a:85:e7:16:42:7a:e0:02:61:68:06:b0:a3:ac:7f:bc:d1:
fc:18:84:3c:92:c8:54:63:49:7d:b3:46:d7:7f:4e:ee:af:35:
2c:c4:26:7c:9c:44:ce:e7:fb:b9:ca:2d:b2:be:00:a1:89:9c:
df:9f:78:33:c6:ec:2d:a9:9d:6b:60:1e:4b:b8:93:2d:b2:56:
9b:d2:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:39:43 2025 by rpki-client