Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: G3q2pO4e1/aFUaMn3wMWBx7TE/+1MKVyGlOyPOUFZRM=
Subject key identifier: 35:92:2D:94:29:02:7B:41:6D:8D:6F:71:CE:E3:2C:D8:C1:4D:B6:71
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0198D583DA54EBA8FDB7C917AA8808F0C307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: NJaotZFnvbCZC6dKCr_vEzEYn6M.roa (hash: dqeYK6phWm8PSJhw0mmBUevUz1KleMZYBxhoQuo4/mw=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: HOFj16CFyNP4SOvyIp5/WcHkuBXLS4zcFOvSQp46SfA=)
3: abyvfDmy4Q3zVDJIfxfSkrtZdLo.roa (hash: IZm94vPLNr133XeI56Dl5DQUBKwgG1pbFRgf8ws+6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:da:54:eb:a8:fd:b7:c9:17:aa:88:08:f0:c3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=35922d9429027b416d8d6f71cee32cd8c14db671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:84:00:51:19:b2:fb:e4:40:ed:34:05:88:
4d:68:f9:ad:29:d4:cb:1e:33:36:ef:12:87:8b:0f:
eb:7f:48:50:a4:29:cd:14:36:48:68:a1:22:04:4d:
45:76:a7:bc:e6:16:14:1c:a0:a4:e6:48:f6:33:e9:
d9:9b:05:42:48:ef:67:67:ec:fe:35:1a:a5:20:66:
23:59:4b:55:4b:2a:d5:38:9a:ff:3f:15:29:c7:76:
d9:b7:5e:f5:64:68:ef:c1:2e:1e:c6:06:26:40:5b:
b5:73:95:7b:da:22:af:e7:68:14:60:95:cd:7e:00:
1b:12:3b:d2:30:22:35:67:ad:cc:fa:04:b3:04:99:
b6:3a:40:4f:dd:09:9b:a8:67:aa:ca:bc:c7:41:db:
02:3f:1d:04:bc:dc:81:20:c0:1f:43:22:bd:1b:3a:
0e:37:79:6e:5b:45:77:1b:30:9b:e4:54:ce:af:0c:
71:2c:40:9e:71:4d:66:15:3a:d4:e3:ea:03:22:b2:
3e:ac:36:05:b1:7c:bc:60:14:ad:26:54:8b:5b:a7:
7a:f2:d8:48:b0:d8:56:ab:b6:15:d5:6f:98:9a:a3:
81:dd:37:11:4a:28:fd:a3:81:d1:30:bf:8f:e9:50:
44:99:d2:8b:47:f9:43:e6:23:b0:10:9f:4e:b3:d2:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:92:2D:94:29:02:7B:41:6D:8D:6F:71:CE:E3:2C:D8:C1:4D:B6:71
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:eb:c3:2c:e4:01:9e:73:c0:d7:01:ca:68:83:d4:b2:ba:ed:
49:a6:0d:22:cb:fe:9f:38:1f:cd:c8:70:09:f8:71:c4:1d:80:
27:6b:04:79:30:5d:05:d4:96:8d:dd:64:22:26:82:42:aa:96:
0f:c6:1b:a7:da:d2:29:73:43:e1:d0:c1:10:7d:31:b6:a3:b6:
59:05:70:68:36:28:cf:c1:a9:b3:e1:5b:06:d9:5b:1b:d6:a6:
16:bd:0d:21:55:8c:8e:94:de:6b:54:27:3b:13:fe:9e:84:9c:
49:35:01:00:5b:7e:6e:a3:cb:c4:de:a6:c9:49:c3:99:19:95:
ae:65:ff:62:39:e9:e7:c6:a3:2b:f7:31:52:b9:36:c0:ac:d8:
25:dd:9f:f9:90:b1:a4:37:79:7d:1b:e0:62:7b:20:ce:86:1a:
56:eb:e8:ad:27:96:45:34:a2:e1:e2:4c:00:79:73:b6:2d:9b:
07:07:93:6f:81:28:48:b8:bf:68:f1:60:1e:2b:d6:fd:14:b2:
c2:53:74:30:34:2f:7d:1c:9b:87:5e:f5:a8:8d:e7:37:fc:59:
74:30:2c:24:ad:a7:4f:2f:8c:91:ff:e5:b8:70:5c:47:88:30:
46:47:40:32:15:9b:ee:a5:84:af:f8:53:f9:22:0d:c6:4e:26:
5c:59:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:57 2025 by rpki-client