Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: cgn+ZWyqUVvlNP9PaOgiNmZvRkRemvVTl8XAdlV2Ods=
Subject key identifier: 80:AC:22:0C:D8:F7:D8:0C:D7:E1:C2:D7:EA:39:76:F3:2F:1B:23:9F
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 0197BFDA7185384A40DA0CE01CEEA20BC255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 08:00:53 +0000
Manifest this update: Mon 30 Jun 2025 08:00:53 +0000
Manifest next update: Tue 01 Jul 2025 08:00:53 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: /KEDKE6OGnl1J4RPVo0eT8ZXrJQf3LVgMn0DA3TRlG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:71:85:38:4a:40:da:0c:e0:1c:ee:a2:0b:c2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Jun 30 08:00:53 2025 GMT
Not After : Jul 1 08:00:53 2025 GMT
Subject: CN=80ac220cd8f7d80cd7e1c2d7ea3976f32f1b239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:e6:dd:ac:24:09:52:5e:2c:69:58:7d:e9:
d6:c1:06:e2:77:42:fa:cb:54:1b:aa:e6:51:7d:b3:
92:54:da:6c:92:3e:cc:9a:3b:37:79:85:80:40:56:
a3:67:96:b3:dc:4c:79:8c:4a:af:a4:7b:f9:40:fa:
34:7b:49:8d:2f:d5:7f:e2:e7:72:99:27:0d:a3:a8:
e6:f5:ad:8a:e7:ea:99:35:58:8b:98:09:3b:10:f5:
21:b0:e1:21:5e:29:48:5c:35:c7:19:82:d0:15:55:
df:ac:22:95:d4:5a:fc:f2:15:8c:42:06:dc:4e:b9:
2f:42:8e:74:fa:e5:e6:b1:9d:cc:d6:11:a8:8d:00:
53:bf:51:74:3d:1e:4e:e6:c9:59:ba:4f:09:66:f8:
c8:21:e4:64:0b:53:33:5a:8f:91:51:eb:f9:31:13:
69:1a:17:50:22:66:16:4f:27:fc:d2:53:87:d3:25:
d9:7c:4b:1b:7d:8a:8c:57:ba:f8:9f:97:73:5e:a4:
29:b7:76:b5:66:e0:b5:79:b3:93:c5:4a:aa:64:10:
69:a0:3d:1d:47:3a:61:cc:9a:96:47:f5:3b:c7:be:
1e:51:52:c7:f4:09:bc:31:0f:11:54:b4:13:fa:11:
44:84:7e:75:49:d9:82:c6:b4:48:42:7c:93:93:2a:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:22:0C:D8:F7:D8:0C:D7:E1:C2:D7:EA:39:76:F3:2F:1B:23:9F
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9a:a9:e9:ad:fe:67:8c:1a:22:55:bd:e0:98:14:34:1a:3d:
ba:e6:1c:96:05:c2:38:c7:e9:c5:36:d7:f2:37:7e:4d:9b:3c:
ee:ee:25:7b:0c:e4:cb:b7:4b:b3:65:de:6e:ab:70:b4:b8:ba:
5d:95:f3:89:7e:dc:1c:77:e6:f6:8a:c8:6b:bb:32:03:17:4f:
90:a0:34:c3:6e:c8:17:a9:dc:f3:1f:21:41:c0:f7:df:43:18:
c9:ab:34:fb:f4:71:fb:a3:29:24:c7:1e:3b:b9:29:cf:4d:42:
db:15:b5:34:a9:bd:9f:ca:37:8b:61:6c:2e:17:10:c9:d3:a1:
12:c9:36:b8:67:17:b7:63:59:d8:dc:62:07:f5:20:13:a9:77:
50:7e:c6:68:43:c7:88:21:2e:56:2e:f0:fe:25:0c:18:ae:98:
90:8b:db:14:d2:f1:a7:c7:8e:d7:27:1f:27:75:f9:3c:ed:6b:
e0:f0:39:f0:42:5b:d9:c0:49:ab:b4:8f:c6:60:c1:c2:0d:94:
8e:bd:42:7f:42:c4:c8:87:e8:7e:e5:2b:28:51:06:d6:7b:d4:
4c:87:a0:2f:6f:d5:0d:4d:0b:42:4c:8e:40:97:a7:e6:a4:d6:
30:56:20:30:6d:dc:01:28:15:b1:79:b2:50:7a:02:89:c9:78:
b7:5b:c3:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/2nGFOEpA2gzgHO6iC8JVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0
YzRiMWEwHhcNMjUwNjMwMDgwMDUzWhcNMjUwNzAxMDgwMDUzWjAzMTEwLwYDVQQD
Eyg4MGFjMjIwY2Q4ZjdkODBjZDdlMWMyZDdlYTM5NzZmMzJmMWIyMzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsjm3awkCVJeLGlYfenWwQbid0L6
y1QbquZRfbOSVNpskj7Mmjs3eYWAQFajZ5az3Ex5jEqvpHv5QPo0e0mNL9V/4udy
mScNo6jm9a2K5+qZNViLmAk7EPUhsOEhXilIXDXHGYLQFVXfrCKV1Fr88hWMQgbc
TrkvQo50+uXmsZ3M1hGojQBTv1F0PR5O5slZuk8JZvjIIeRkC1MzWo+RUev5MRNp
GhdQImYWTyf80lOH0yXZfEsbfYqMV7r4n5dzXqQpt3a1ZuC1ebOTxUqqZBBpoD0d
RzphzJqWR/U7x74eUVLH9Am8MQ8RVLQT+hFEhH51SdmCxrRIQnyTkyp8VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICsIgzY99gM1+HC1+o5dvMvGyOfMB8GA1UdIwQY
MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct
ZTBkYzE4ZTg4MjI5LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5
LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5qp6a3+
Z4waIlW94JgUNBo9uuYclgXCOMfpxTbX8jd+TZs87u4lewzky7dLs2XebqtwtLi6
XZXziX7cHHfm9orIa7syAxdPkKA0w27IF6nc8x8hQcD330MYyas0+/Rx+6MpJMce
O7kpz01C2xW1NKm9n8o3i2FsLhcQydOhEsk2uGcXt2NZ2NxiB/UgE6l3UH7GaEPH
iCEuVi7w/iUMGK6YkIvbFNLxp8eO1ycfJ3X5PO1r4PA58EJb2cBJq7SPxmDBwg2U
jr1Cf0LEyIfofuUrKFEG1nvUTIegL2/VDU0LQkyOQJen5qTWMFYgMG3cASgVsXmy
UHoCicl4t1vDcQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:36:52 2025 by rpki-client