Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: Ql4yVI+vmu5XOBlonZE43aNrAtx1UTLO8enwEyWyz2A=
Subject key identifier: 0B:C3:07:AC:08:B6:57:2C:C9:52:BD:D1:56:DD:6A:CB:8B:ED:F4:F3
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 0197B820F6D2CD76D9CD7907570CE1F1F4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 0190
Signing time: Sat 28 Jun 2025 20:00:57 +0000
Manifest this update: Sat 28 Jun 2025 20:00:57 +0000
Manifest next update: Sun 29 Jun 2025 20:00:57 +0000
Files and hashes: 1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: qNl5LLwS4NxMqZ9AqPqnnyfjyXJlb/8Jk81W95Qi7Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f6:d2:cd:76:d9:cd:79:07:57:0c:e1:f1:f4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Jun 28 20:00:57 2025 GMT
Not After : Jun 29 20:00:57 2025 GMT
Subject: CN=0bc307ac08b6572cc952bdd156dd6acb8bedf4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:82:ac:8f:ca:1b:b0:2b:2a:f6:14:a9:4d:
fa:80:81:84:60:8f:18:ec:21:fb:98:3a:c4:d1:74:
38:29:14:8f:f3:db:dc:46:88:91:cf:90:09:29:40:
80:2f:6b:80:15:83:e0:f1:36:48:46:dc:f9:ec:f0:
ef:ab:4f:d5:65:f8:80:1f:b1:51:7d:0b:7b:61:3e:
dd:75:cc:16:e2:63:5a:51:95:ff:02:29:9a:ed:95:
44:0d:17:31:10:47:85:8b:ff:20:87:01:e3:7f:78:
50:33:71:a8:65:7e:b4:c4:4b:1e:8f:97:8f:a4:d2:
37:75:94:e2:30:60:37:e5:02:c7:85:a3:ad:5c:bc:
c1:d0:61:c1:fe:a5:95:56:4a:11:80:fc:56:e0:49:
79:d9:2d:b4:1e:ee:7c:81:9e:67:9f:3d:4e:c3:ec:
58:ed:b4:34:8f:01:c7:80:f9:25:58:70:7c:11:68:
c6:cc:40:ba:be:bd:b2:74:2b:dc:ec:8d:e4:e4:44:
66:41:b2:f8:be:a4:19:5c:cb:a7:58:56:ce:85:e8:
89:05:d6:5b:ed:a4:62:44:6d:c7:80:a6:f9:ca:8e:
4a:00:6d:49:29:c5:ab:e6:27:6c:b9:ad:9f:bd:13:
40:17:14:2f:c0:0a:c3:89:1d:67:33:00:a8:74:ac:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:07:AC:08:B6:57:2C:C9:52:BD:D1:56:DD:6A:CB:8B:ED:F4:F3
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:57:ba:51:35:6b:9b:e3:db:70:ae:6f:00:2b:dc:aa:2a:89:
87:46:f8:30:4f:e7:b8:d6:3a:d5:0a:36:a9:76:40:4e:f9:4c:
cd:7a:ea:d1:3b:12:0d:f4:5e:3a:12:f4:03:fc:50:ca:87:42:
46:c9:09:e6:41:bd:22:43:f1:4f:1d:58:df:a0:c9:49:53:07:
69:0a:61:98:2e:3d:09:36:0c:da:89:07:96:3b:30:7a:99:49:
e6:8a:b3:76:e8:ce:22:e6:1c:f4:37:c1:c6:32:81:1b:ea:58:
4c:07:15:a2:85:64:98:ac:89:dc:6a:fc:2d:e0:2c:96:b2:31:
00:c5:ff:65:77:fd:8d:76:a4:5f:83:53:60:0e:7e:87:db:92:
87:9c:42:f3:4c:fd:b5:6e:7a:81:b7:37:77:46:66:e6:3b:4c:
e3:8e:25:74:01:36:ae:7e:2d:f3:63:df:0c:16:5d:25:ee:ad:
1b:dd:41:e7:8e:e6:d2:df:5a:b3:23:e4:aa:32:de:4a:83:84:
de:d9:eb:d9:a6:da:10:d0:fd:58:ff:dd:48:50:b8:8d:c7:95:
c5:06:30:46:54:34:0a:6b:e4:f7:b7:40:e1:6b:ef:6d:8a:73:
14:6b:01:06:73:14:55:b1:27:8d:f5:4a:b9:43:6b:ba:55:ee:
0d:17:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:01 2025 by rpki-client