Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: guKM/lgbLXBax4Hq80hCxzx1gXoE1rjR/LsWBsl/BKY=
Subject key identifier: 9C:F8:D3:7A:0C:7C:FC:45:22:CA:91:EB:08:22:48:EC:9C:84:67:11
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 0197C7260004EE812280F023D7DB1273FEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 03DA
Signing time: Tue 01 Jul 2025 18:00:45 +0000
Manifest this update: Tue 01 Jul 2025 18:00:45 +0000
Manifest next update: Wed 02 Jul 2025 18:00:45 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: a41Pzpo6JNThD4oe0tU8sH6e4wG8TskvXhl10/A3DGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:00:04:ee:81:22:80:f0:23:d7:db:12:73:fe:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: Jul 1 18:00:45 2025 GMT
Not After : Jul 2 18:00:45 2025 GMT
Subject: CN=9cf8d37a0c7cfc4522ca91eb082248ec9c846711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:ef:6e:76:73:27:8d:36:19:f9:f3:cb:f9:
88:51:93:42:60:26:a4:46:ad:d9:51:5d:49:cb:78:
d8:b3:0b:45:0d:40:86:df:58:bb:b3:ee:a0:a2:aa:
6d:bd:01:76:3c:d4:02:5f:a1:19:97:37:b9:12:92:
32:bd:2d:da:db:8f:98:0d:96:b1:98:0f:22:24:d0:
ff:29:03:a2:d7:81:99:bb:91:81:c2:5e:eb:93:c2:
d9:23:e8:02:98:c6:56:75:55:39:f3:e5:ac:9f:67:
97:a6:83:eb:c1:86:ee:16:e2:a7:3f:6c:bd:a4:5f:
30:39:eb:7b:f7:3e:de:ff:66:ec:af:42:5d:b4:93:
30:a9:9c:9e:ce:31:6a:15:79:b6:b7:c2:d1:d7:74:
70:fa:9a:d5:70:24:77:db:3d:36:2d:c3:7b:1b:ec:
0b:00:1e:6f:34:c2:2f:73:39:73:42:92:2d:ae:5b:
39:89:14:3a:5c:da:0a:31:05:51:5f:8d:24:2c:0c:
d1:ac:06:99:b6:e4:1c:30:2f:30:c9:cb:33:79:e6:
7d:6e:ad:42:78:7d:01:47:0a:8f:74:15:2e:35:17:
82:cd:0f:86:46:7e:9e:ef:65:f3:55:b3:84:e6:53:
a2:d5:a6:20:fb:0c:7d:c3:53:e5:5b:fa:87:63:2d:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:D3:7A:0C:7C:FC:45:22:CA:91:EB:08:22:48:EC:9C:84:67:11
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b4:f0:f8:03:8a:cb:98:65:2e:35:cc:d4:34:11:cd:5a:61:
1f:c8:27:4e:d2:5b:6f:82:26:20:0d:70:0a:6a:2e:35:b8:dc:
df:cf:4a:8e:e0:6f:f5:94:11:c3:21:a4:f3:de:27:b4:ac:7f:
65:5c:dd:43:d6:8b:1b:d6:f5:62:3d:08:fc:d7:f5:ec:b2:f7:
67:ea:df:b0:69:91:2f:b4:c1:56:7b:2d:41:4f:09:2f:6f:83:
3a:69:47:67:88:8b:8a:29:0d:02:86:16:6a:44:19:6c:a0:e7:
ab:c4:48:0d:ec:ad:06:d5:dc:f0:4a:8d:2b:12:4b:1f:4a:be:
55:bc:f0:6f:17:8b:59:6b:f3:99:2c:26:46:cc:e9:2e:9e:89:
ac:a7:89:f5:ac:2d:12:25:79:b9:6b:ba:82:31:c8:3d:dc:15:
dc:57:75:3b:d2:3f:f7:33:3e:e1:9d:19:4f:96:e1:fd:3f:4e:
a6:a2:0a:19:e3:58:90:72:2d:73:5d:7e:74:52:ab:ff:86:8f:
c5:bf:3e:11:4f:3e:d7:5b:61:4c:55:5f:00:41:64:c4:f5:49:
dc:b1:f6:c9:d7:ce:1a:d5:b9:d2:5f:d8:01:1c:9d:7a:c7:0e:
c6:bb:1c:25:ec:b0:e5:38:0a:4c:a2:ed:39:dd:d2:28:81:33:
e1:21:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:31:13 2025 by rpki-client