Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: djhuPU8b9Krxaw1mH0sFU1e7Ri7OFk5I1FrxXW0i+Qk=
Subject key identifier: 08:F1:9E:D8:12:8B:73:51:2A:8B:52:99:69:32:6F:8E:25:B4:84:F9
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0197B7B30D7D3894C319ABCAD774BFDE895D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 18:00:54 +0000
Manifest this update: Sat 28 Jun 2025 18:00:54 +0000
Manifest next update: Sun 29 Jun 2025 18:00:54 +0000
Files and hashes: 1: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: UxlPdeYzcFTuaKnzCFZFG0ccwDRCywRoV5RnSrN/N6w=)
2: QMe1cQvSWWyTmlxs7mg5bNBSDlw.roa (hash: iejToeWDmgQDOWHcoY74bMQ91/UDUCJzy2kftI9HQTs=)
3: abyvfDmy4Q3zVDJIfxfSkrtZdLo.roa (hash: IZm94vPLNr133XeI56Dl5DQUBKwgG1pbFRgf8ws+6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0d:7d:38:94:c3:19:ab:ca:d7:74:bf:de:89:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Jun 28 18:00:54 2025 GMT
Not After : Jun 29 18:00:54 2025 GMT
Subject: CN=08f19ed8128b73512a8b529969326f8e25b484f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:8a:c8:66:d1:e4:0e:00:ca:a1:3e:2e:8d:
58:1f:b9:7b:6c:d5:99:28:02:9e:d5:4c:d3:f1:4d:
03:2b:02:b4:e4:f1:32:a6:4e:ff:8d:75:b7:a5:4f:
57:70:a5:cd:18:3a:50:64:d6:18:11:b6:54:58:1e:
b6:2f:ce:c3:e4:a7:8a:1d:e0:ae:61:9b:a9:8b:c0:
0f:44:d1:bd:df:08:b7:10:f4:84:e2:67:28:0a:3d:
55:39:36:da:5b:20:80:c4:9c:19:2c:3f:9a:c2:84:
02:d9:62:a7:38:8c:74:ab:81:6b:62:94:72:e1:77:
36:22:9b:d3:01:1c:67:5b:87:c8:5e:42:fe:e5:71:
9b:b6:88:2e:b3:ae:71:f1:93:25:2f:a6:d4:09:0c:
db:f3:a0:11:4c:72:be:c7:a3:27:5c:fe:7c:3b:36:
02:3b:04:f1:e3:62:59:3c:f5:b4:6f:29:a4:51:73:
c4:2b:d3:dc:c1:63:ce:e2:50:e0:57:ce:2b:db:60:
21:d9:38:34:39:b2:ff:13:10:90:78:b7:a6:37:e3:
76:f9:83:d1:c0:11:c7:5e:7f:30:08:a0:5d:bd:f7:
ad:6c:f4:88:17:ff:e5:f3:8c:73:8a:f1:ee:7d:74:
ef:67:db:27:32:34:90:a1:d1:cf:75:30:49:ff:d3:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F1:9E:D8:12:8B:73:51:2A:8B:52:99:69:32:6F:8E:25:B4:84:F9
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:51:6e:cd:1f:70:3b:7f:b1:53:61:1e:3a:c9:d5:75:9d:
1f:b6:c8:77:f3:cf:66:64:a3:6e:ff:00:e2:e3:5c:8b:3a:e2:
08:cf:71:d5:40:70:99:11:c6:94:f9:f1:7c:6f:67:8a:91:cc:
35:3b:d0:02:ee:37:8e:4a:50:4c:bc:4e:b8:d3:3e:e2:3c:94:
68:b9:12:b6:28:dc:2b:92:9d:08:bd:c9:33:2a:b2:73:eb:24:
b2:c4:f0:c5:8e:92:6a:77:44:d4:11:d0:a0:49:11:db:c4:b0:
9e:3b:18:d5:c8:e6:4a:97:f0:2d:f7:f4:b6:6c:b3:12:b8:2f:
12:0c:22:74:ac:6d:27:53:5b:b8:3d:74:98:5d:d1:1c:a7:43:
9f:b1:99:54:5c:82:ac:13:57:18:48:b3:62:e1:71:7e:d2:aa:
59:ff:2e:75:ec:37:77:f6:c8:c8:1a:e6:88:68:c1:19:fd:04:
37:24:64:44:2b:f1:d4:12:cf:13:f4:7c:54:6a:f1:eb:95:b4:
5b:a2:a6:ed:50:ed:32:48:4e:f0:1c:e4:99:45:74:2c:6b:47:
e2:d0:43:4d:ca:b8:29:39:7d:28:29:a5:7e:c1:59:62:32:b8:
77:26:f0:fb:da:6b:92:a2:19:b3:65:4b:66:77:b3:32:58:4a:
aa:fc:d3:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sw19OJTDGavK13S/3oldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOTJmNWQ5MzY3NTJiYWYyZDBkZjcxMzI5OTQ5OWNlY2Zh
OWY0OGQwHhcNMjUwNjI4MTgwMDU0WhcNMjUwNjI5MTgwMDU0WjAzMTEwLwYDVQQD
EygwOGYxOWVkODEyOGI3MzUxMmE4YjUyOTk2OTMyNmY4ZTI1YjQ4NGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKyKyGbR5A4AyqE+Lo1YH7l7bNWZ
KAKe1UzT8U0DKwK05PEypk7/jXW3pU9XcKXNGDpQZNYYEbZUWB62L87D5KeKHeCu
YZupi8APRNG93wi3EPSE4mcoCj1VOTbaWyCAxJwZLD+awoQC2WKnOIx0q4FrYpRy
4Xc2IpvTARxnW4fIXkL+5XGbtogus65x8ZMlL6bUCQzb86ARTHK+x6MnXP58OzYC
OwTx42JZPPW0bymkUXPEK9PcwWPO4lDgV84r22Ah2Tg0ObL/ExCQeLemN+N2+YPR
wBHHXn8wCKBdvfetbPSIF//l84xzivHufXTvZ9snMjSQodHPdTBJ/9NgpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjxntgSi3NRKotSmWkyb44ltIT5MB8GA1UdIwQY
MBaAFDqS9dk2dSuvLQ33EymUmc7PqfSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTIt
MTY5NmIyNDZjZDUwLzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTItMTY5NmIyNDZjZDUw
LzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAxRbs0f
cDt/sVNhHjrJ1XWdH7bId/PPZmSjbv8A4uNcizriCM9x1UBwmRHGlPnxfG9nipHM
NTvQAu43jkpQTLxOuNM+4jyUaLkStijcK5KdCL3JMyqyc+skssTwxY6SandE1BHQ
oEkR28SwnjsY1cjmSpfwLff0tmyzErgvEgwidKxtJ1NbuD10mF3RHKdDn7GZVFyC
rBNXGEizYuFxftKqWf8udew3d/bIyBrmiGjBGf0ENyRkRCvx1BLPE/R8VGrx65W0
W6Km7VDtMkhO8BzkmUV0LGtH4tBDTcq4KTl9KCmlfsFZYjK4dybw+9prkqIZs2VL
ZnezMlhKqvzTPw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:41 2025 by rpki-client