Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: QzIaW0Udr9CBSHOX54M8TO4jC22URqTk7zK0LRymPng=
Subject key identifier: 4A:14:DA:61:E3:B3:8A:3F:D9:8C:22:7F:E9:3E:82:DE:7A:74:49:ED
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 0196C4CC071370DF2D1F5B2AD4E6B09F7D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 14:00:27 +0000
Manifest this update: Mon 12 May 2025 14:00:27 +0000
Manifest next update: Tue 13 May 2025 14:00:27 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: t9KD0ivsnplwtXVVdkGXlxJF3rbxtZqDAn7AMPR7IuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:07:13:70:df:2d:1f:5b:2a:d4:e6:b0:9f:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: May 12 14:00:27 2025 GMT
Not After : May 13 14:00:27 2025 GMT
Subject: CN=4a14da61e3b38a3fd98c227fe93e82de7a7449ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:9f:25:9b:61:74:60:16:c5:c7:48:74:1f:
8b:1d:8e:92:3a:51:29:54:4c:26:cc:17:37:3d:e6:
eb:26:e1:bc:f0:d2:d2:c1:8f:6c:91:ba:84:b3:6a:
85:d9:04:b0:be:cc:24:2f:0a:5a:0c:31:53:ba:2d:
17:4a:8c:2c:33:de:c2:2a:25:9f:fe:d5:e5:d4:cc:
70:8e:7e:f1:16:20:4e:0f:74:96:aa:f3:d2:e7:07:
6c:d5:10:b0:dd:2b:3d:fc:18:bc:51:6d:e9:3c:15:
88:97:3d:b5:02:74:98:45:7b:36:2d:61:2b:9c:be:
68:c8:5b:36:98:a0:30:10:3a:b6:5f:f9:fe:f8:4f:
20:98:9c:7b:4f:5e:29:32:d6:45:ab:1c:2a:53:3b:
e6:72:d6:d2:cb:60:4c:52:8a:19:b7:61:52:86:71:
2b:00:6b:4a:5d:03:60:d1:dc:fe:ff:08:a5:02:4e:
0e:57:08:c2:fd:3c:56:70:53:5f:9e:fc:01:13:c7:
47:27:ba:46:2e:13:5d:3c:77:0f:77:34:6a:8a:8b:
d8:b3:cd:84:c3:aa:71:7e:d1:81:04:b9:bf:89:d6:
37:30:b9:dc:54:60:38:34:a8:a1:74:99:16:9a:eb:
b3:f0:9c:97:a0:11:87:14:ca:c8:d2:ab:62:e4:85:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:DA:61:E3:B3:8A:3F:D9:8C:22:7F:E9:3E:82:DE:7A:74:49:ED
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:96:a8:94:17:75:6f:2e:9c:4e:f5:95:6c:5b:8e:5c:07:
f9:e6:c3:b5:fd:8c:af:d2:fb:4d:86:26:4d:91:c3:71:1b:43:
5d:92:98:4b:2f:82:2d:aa:79:0a:cc:98:c1:03:96:f6:92:1d:
73:98:ae:8c:8e:71:34:19:d5:74:24:16:52:99:29:10:6c:32:
39:63:52:9a:66:fa:2e:db:34:ac:b1:4b:be:39:8e:76:ff:64:
dc:4f:26:c3:b0:46:14:b8:4d:d4:3a:a0:f1:75:ec:b6:2b:78:
d6:7c:df:8b:ab:be:6a:2e:5f:14:37:52:d4:b4:af:67:85:1f:
a4:d6:58:db:76:36:39:67:63:da:64:a3:70:59:60:eb:cd:1d:
81:f7:85:90:2f:88:5e:09:1c:70:06:19:b0:a0:10:ff:65:65:
3c:63:c3:3b:e2:6a:8b:8b:5f:60:75:ae:5a:c9:a1:5f:0a:32:
f6:c5:6f:dc:bf:8d:d9:4c:12:e9:7c:ab:0d:20:65:1b:d1:90:
4d:1c:ff:ce:6c:52:69:05:d7:ed:86:f0:c9:86:d3:24:8e:8e:
56:d6:bc:d7:a3:08:a4:d5:05:5b:e8:0b:1f:5a:35:33:db:8d:
e0:1a:42:93:83:12:76:59:4b:97:bb:93:8b:33:ca:2e:70:84:
6d:67:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:54:00 2025 by rpki-client