Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: slJaS5OBJ5WWnFAgLWZdib+mRkvgtA9tuzXUTXzwnYU=
Subject key identifier: 4A:F8:E3:D3:C0:AD:78:2C:66:CF:08:10:F1:D9:3D:D0:25:78:63:44
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 0198D5F181A34B1C9B27A7A4E79325E45B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: CmmEa5rvFGz6jaAmXRD1nsO42Dz5le8eLy2DeS1w7Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:81:a3:4b:1c:9b:27:a7:a4:e7:93:25:e4:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=4af8e3d3c0ad782c66cf0810f1d93dd025786344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:f1:c4:97:f1:18:46:2e:88:23:b0:a5:e0:
80:08:9b:1f:6c:d6:5f:f8:e5:e7:81:be:29:ef:16:
6b:06:ad:e5:cd:bd:9b:df:b7:73:be:e7:96:73:83:
fc:30:1c:0b:85:7c:bb:c5:ee:49:38:74:e2:b3:7b:
72:ce:e7:e8:80:c0:7d:c7:cc:6e:77:b4:6a:00:d7:
0c:dd:cd:2d:9c:b6:8d:c3:74:27:2d:68:16:34:99:
d0:57:91:fe:ae:ea:78:27:b8:41:ab:04:6c:fb:ce:
e2:d6:d3:59:36:6d:36:a3:71:e3:5e:b7:41:68:1d:
b7:14:a5:3e:40:13:22:01:f7:be:89:4f:9c:f9:b0:
c1:ba:b3:b7:2b:0f:de:fe:17:d9:ce:96:f8:f7:33:
1b:e7:2a:45:f7:5a:57:05:a3:fd:36:d6:3d:d1:af:
48:67:08:ed:ff:68:de:05:36:ad:49:e0:86:d6:be:
d8:a8:0d:62:67:c1:a5:71:9f:55:4f:1d:93:16:b2:
7a:ef:59:f6:cf:db:4c:5a:c7:47:dd:13:41:4b:4a:
97:4a:e9:36:2f:19:46:b3:89:e2:e1:79:04:5e:fe:
af:b3:64:1e:ec:ed:3a:61:5e:60:61:dc:6e:d2:32:
1c:c5:83:d4:b7:52:73:0d:33:94:b9:6f:80:29:7b:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:E3:D3:C0:AD:78:2C:66:CF:08:10:F1:D9:3D:D0:25:78:63:44
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c3:30:15:36:fb:ae:f0:a4:3a:30:5c:fb:93:b6:58:ae:43:
8f:62:d4:d4:60:b1:4e:62:6a:76:8c:5c:7b:da:4f:ec:9c:64:
02:e4:bc:66:d3:3b:a7:36:39:d9:12:6b:65:17:f7:35:5e:e4:
ab:18:a5:c8:e7:3f:00:96:f0:18:b2:be:d4:a2:ca:80:95:25:
06:f8:a6:f3:5b:ac:f7:c9:1a:6f:fc:92:04:42:13:72:99:6e:
96:ed:de:be:69:0d:43:af:8a:7c:e1:f2:16:a8:f5:1d:3a:b5:
ee:c8:95:a7:1d:ad:38:4e:ef:84:23:26:18:ae:39:ce:12:73:
50:20:d6:21:8a:f3:0c:d1:7d:b6:0f:76:af:ab:00:0c:ef:49:
0a:49:7b:aa:82:51:01:16:eb:e7:39:19:78:28:9d:7d:29:73:
e9:f0:57:9d:19:34:d8:9a:d2:56:8a:c0:f4:b1:14:55:27:2e:
8b:0e:ea:5b:c9:f7:d3:e6:c2:91:e4:b2:80:d3:50:52:7e:3a:
c8:4f:17:d0:ab:8e:d7:53:98:3c:90:48:8d:f0:9c:04:01:c6:
01:23:c0:fe:f7:02:d0:b9:c9:0e:21:21:fd:74:95:13:db:8e:
c0:27:2f:17:e5:9b:fd:29:1a:b0:e5:b0:f6:66:0e:49:28:53:
57:f8:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:24 2025 by rpki-client