Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: sTNCY75x2YuMxFxco+m1DoTWASEmKfjYpk2gtWLg/eE=
Subject key identifier: 1C:46:12:DB:01:EA:8D:9D:9D:B5:73:CC:C4:3C:E8:E8:8C:F7:71:1C
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 0196A01AD69C7326B3DE6A843DC5BEABD2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: FF
Signing time: Mon 05 May 2025 11:00:35 +0000
Manifest this update: Mon 05 May 2025 11:00:35 +0000
Manifest next update: Tue 06 May 2025 11:00:35 +0000
Files and hashes: 1: hPT4622el3NZQW0fczNtJahIA9s.roa (hash: MWlqjv9QRL0FjMiEZWnyIh2vPPoEogVc0AWBf3zC+2g=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: 0YfgkeM9jztBwHThKtVyWfPwQ+jzKXQja4Sa6U3smgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:d6:9c:73:26:b3:de:6a:84:3d:c5:be:ab:d2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: May 5 11:00:35 2025 GMT
Not After : May 6 11:00:35 2025 GMT
Subject: CN=1c4612db01ea8d9d9db573ccc43ce8e88cf7711c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:be:9e:1d:9d:1a:e2:90:70:85:67:59:ac:
11:96:b7:dd:8d:46:5e:5a:ec:91:00:80:46:f8:6f:
76:f0:7d:9b:81:c0:94:e7:8c:8e:39:b3:a7:3a:22:
51:f1:de:ee:5e:ed:46:6b:3c:1c:32:b1:37:0a:d9:
8a:6a:26:91:5b:e2:8a:3b:ed:73:c4:ce:8b:bc:42:
61:bd:63:fe:06:bc:ea:43:ff:7e:8d:df:5c:ba:dd:
3c:96:82:03:38:be:29:f0:cc:b4:33:eb:fe:d1:24:
d3:05:63:1d:85:4b:79:7e:22:bd:7a:f1:46:95:d2:
96:92:19:80:6a:07:68:24:c3:3e:e2:d7:3d:b8:f4:
92:1b:dd:bf:56:b6:17:fe:24:d2:2f:db:20:92:b9:
da:bc:36:69:17:e3:7e:18:12:bb:cf:e4:15:f4:c4:
c7:a0:84:55:61:60:4d:ea:eb:6a:9b:73:a7:7f:12:
47:2c:13:02:29:20:e2:ca:2d:fd:79:ba:3d:d1:a7:
bc:98:2f:2a:9b:18:9a:94:59:f7:de:2e:9c:0e:21:
ff:8d:67:1a:3c:d1:58:37:bc:72:ae:c6:39:c8:61:
f4:9b:e9:f1:b6:83:44:90:1d:f0:92:29:0d:77:28:
f9:e0:67:fe:80:96:ad:9c:43:42:4b:ab:1e:c8:14:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:12:DB:01:EA:8D:9D:9D:B5:73:CC:C4:3C:E8:E8:8C:F7:71:1C
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e5:36:63:d4:90:65:a5:43:eb:01:50:23:a1:d3:f1:69:dc:
f2:2e:79:67:e8:24:4a:3b:af:ea:eb:0b:88:7a:f1:38:f6:4f:
dc:99:9f:be:dd:ad:03:b5:30:e4:65:aa:12:76:24:07:63:6e:
21:60:c3:a4:2d:18:45:3c:79:81:98:cd:90:52:e2:24:2a:a5:
18:ae:72:84:b1:98:92:44:f7:fa:bc:09:89:a3:24:51:18:75:
3f:f7:79:74:c5:13:78:eb:78:ae:9e:6d:87:75:d8:98:17:75:
a0:9c:f1:d8:0b:76:ff:e6:7a:fe:13:ca:78:f6:18:a3:5f:9c:
49:de:b7:b7:01:7c:2b:aa:ac:24:ce:d3:89:31:a1:b1:63:95:
75:04:8e:5c:88:31:93:f0:4c:28:d3:42:d2:86:b1:19:51:6d:
19:5b:25:c3:ea:b4:8a:cf:77:30:df:09:02:37:82:80:6b:04:
46:17:2b:14:db:81:57:6a:03:f1:b0:d0:9c:a8:fe:06:61:05:
81:e2:76:a9:42:e7:9e:d8:37:cf:de:87:84:66:7c:36:43:3e:
eb:9d:1a:f9:2f:c1:c6:2f:3e:45:80:e6:7b:ea:b7:0a:42:fc:
66:0b:c0:23:91:a6:27:7d:4a:57:77:84:16:af:e1:d2:bd:69:
de:76:98:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGtaccyaz3mqEPcW+q9LDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTc3YzFlNGU3MDEzOTkyZDRjNGQwZjMzY2NkNzcyZmFj
OGQ5M2IwHhcNMjUwNTA1MTEwMDM1WhcNMjUwNTA2MTEwMDM1WjAzMTEwLwYDVQQD
EygxYzQ2MTJkYjAxZWE4ZDlkOWRiNTczY2NjNDNjZThlODhjZjc3MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseK+nh2dGuKQcIVnWawRlrfdjUZe
WuyRAIBG+G928H2bgcCU54yOObOnOiJR8d7uXu1GazwcMrE3CtmKaiaRW+KKO+1z
xM6LvEJhvWP+BrzqQ/9+jd9cut08loIDOL4p8My0M+v+0STTBWMdhUt5fiK9evFG
ldKWkhmAagdoJMM+4tc9uPSSG92/VrYX/iTSL9sgkrnavDZpF+N+GBK7z+QV9MTH
oIRVYWBN6utqm3OnfxJHLBMCKSDiyi39ebo90ae8mC8qmxialFn33i6cDiH/jWca
PNFYN7xyrsY5yGH0m+nxtoNEkB3wkikNdyj54Gf+gJatnENCS6seyBSJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxGEtsB6o2dnbVzzMQ86OiM93EcMB8GA1UdIwQY
MBaAFKKXfB5OcBOZLUxNDzPM13L6yNk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQwNzItMzJkZC00MzJkLTllYTIt
MjYzZTQ2NmU0YWQ2LzEvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82OWQwNzItMzJkZC00MzJkLTllYTItMjYzZTQ2NmU0YWQ2
LzEvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeU2Y9SQ
ZaVD6wFQI6HT8Wnc8i55Z+gkSjuv6usLiHrxOPZP3Jmfvt2tA7Uw5GWqEnYkB2Nu
IWDDpC0YRTx5gZjNkFLiJCqlGK5yhLGYkkT3+rwJiaMkURh1P/d5dMUTeOt4rp5t
h3XYmBd1oJzx2At2/+Z6/hPKePYYo1+cSd63twF8K6qsJM7TiTGhsWOVdQSOXIgx
k/BMKNNC0oaxGVFtGVslw+q0is93MN8JAjeCgGsERhcrFNuBV2oD8bDQnKj+BmEF
geJ2qULnntg3z96HhGZ8NkM+650a+S/Bxi8+RYDme+q3CkL8ZgvAI5GmJ31KV3eE
Fq/h0r1p3naYQg==
-----END CERTIFICATE-----
Generated at Mon May 5 19:34:07 2025 by rpki-client