Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: yIf1pWRSyErTWhNzFFWGHi0nXn7zZnfxTekGGSBMvcs=
Subject key identifier: 21:56:33:58:BA:19:79:07:57:05:A2:A7:87:5F:21:B4:0D:63:B4:FD
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 0196BB23E2C3C8CF21D951C28D1D6C6F31C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 1538
Signing time: Sat 10 May 2025 17:00:13 +0000
Manifest this update: Sat 10 May 2025 17:00:13 +0000
Manifest next update: Sun 11 May 2025 17:00:13 +0000
Files and hashes: 1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=)
2: AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa (hash: KlOk/fF1w7EKHSk+04TQtjgBWQMEvMF/JZ8yxyO3hC4=)
3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: 3M5EIfYqV65NuIsdMPf32jELHg9qsVnYTlvcKzz+f3M=)
5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=)
6: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:e2:c3:c8:cf:21:d9:51:c2:8d:1d:6c:6f:31:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: May 10 17:00:13 2025 GMT
Not After : May 11 17:00:13 2025 GMT
Subject: CN=21563358ba1979075705a2a7875f21b40d63b4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:bc:d2:f1:4b:d1:8b:92:06:7f:9d:60:29:
28:b2:67:3e:a1:19:f4:33:d0:e0:c6:e2:c2:6f:2d:
53:3f:ab:08:08:57:4e:f6:5f:92:24:75:82:a7:26:
17:7b:ce:99:60:84:94:51:64:90:ba:5f:a1:d0:73:
11:d4:f1:98:a8:33:30:64:e1:1d:a6:41:be:44:62:
dc:8a:e1:24:e2:8c:1c:af:7a:e5:57:87:dd:f2:2d:
93:50:a5:9e:b6:da:e7:2f:72:01:b4:69:c7:68:8a:
34:f1:9a:df:ce:c8:a1:f1:ff:6b:c7:98:21:93:13:
2c:68:59:d1:4c:b9:0d:80:f4:df:51:e1:30:af:44:
63:74:97:54:1c:77:c5:04:e2:80:5a:d0:85:e3:73:
73:73:85:5e:bd:46:98:77:2d:5f:3d:10:95:a3:b7:
75:10:34:54:e7:7a:a7:f3:40:15:b4:a8:d8:4b:0a:
e3:aa:70:4c:3c:a9:c6:36:2f:ac:1a:a2:5b:19:79:
b1:aa:f2:a0:29:cb:21:fe:b2:18:35:1c:0c:02:54:
b2:ac:dc:5c:6d:cf:dd:41:bf:c3:e9:6f:42:88:91:
3a:84:8d:69:bd:16:84:99:0c:9e:01:40:b1:95:f7:
0d:44:c3:06:b5:cb:98:a3:27:4d:90:7d:2a:f2:e8:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:56:33:58:BA:19:79:07:57:05:A2:A7:87:5F:21:B4:0D:63:B4:FD
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e8:6e:92:0f:6d:0f:ca:6a:45:c4:ca:e3:8a:cf:bf:09:3b:
9a:ce:b0:05:98:c0:2c:fe:49:24:42:bd:9e:47:36:83:54:57:
49:68:fe:f3:a2:bb:4e:e4:bb:d0:f2:43:cd:d6:ea:07:c3:c4:
13:c4:22:74:65:91:64:be:4c:a8:5f:8e:d2:73:51:1a:de:fd:
f0:a5:bb:c6:e1:63:94:cb:7f:17:65:58:14:6e:95:4c:7d:ca:
83:99:56:fb:b4:d7:5a:3b:f9:7d:00:f4:86:20:b7:a6:99:e3:
c1:52:28:bf:2c:ca:5f:61:d3:b5:84:93:08:79:83:33:b2:37:
b0:63:42:7b:19:e5:41:c9:91:a8:8c:9f:7d:a6:29:d6:1e:be:
fb:89:bd:fd:f8:b9:fc:33:bf:0a:a6:40:0a:69:cb:a6:ad:f2:
c0:c6:13:5e:48:f6:59:7e:db:d1:eb:bc:5b:92:76:c0:ad:9b:
08:9d:f0:70:b3:21:90:cd:75:51:98:3c:13:d0:b4:b5:5b:ee:
53:d5:06:e9:bf:84:a3:03:19:34:6e:59:66:6b:ce:a3:69:f6:
0f:90:f9:5f:19:8c:c3:eb:61:0c:6d:0f:c0:a8:c2:6e:6e:85:
d8:62:f0:56:1c:f1:92:e1:72:f3:e9:58:49:fa:77:43:15:97:
a4:2e:63:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7I+LDyM8h2VHCjR1sbzHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjUwNTEwMTcwMDEzWhcNMjUwNTExMTcwMDEzWjAzMTEwLwYDVQQD
EygyMTU2MzM1OGJhMTk3OTA3NTcwNWEyYTc4NzVmMjFiNDBkNjNiNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtum80vFL0YuSBn+dYCkosmc+oRn0
M9DgxuLCby1TP6sICFdO9l+SJHWCpyYXe86ZYISUUWSQul+h0HMR1PGYqDMwZOEd
pkG+RGLciuEk4owcr3rlV4fd8i2TUKWettrnL3IBtGnHaIo08Zrfzsih8f9rx5gh
kxMsaFnRTLkNgPTfUeEwr0RjdJdUHHfFBOKAWtCF43Nzc4VevUaYdy1fPRCVo7d1
EDRU53qn80AVtKjYSwrjqnBMPKnGNi+sGqJbGXmxqvKgKcsh/rIYNRwMAlSyrNxc
bc/dQb/D6W9CiJE6hI1pvRaEmQyeAUCxlfcNRMMGtcuYoydNkH0q8ujKnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFWM1i6GXkHVwWip4dfIbQNY7T9MB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATehukg9t
D8pqRcTK44rPvwk7ms6wBZjALP5JJEK9nkc2g1RXSWj+86K7TuS70PJDzdbqB8PE
E8QidGWRZL5MqF+O0nNRGt798KW7xuFjlMt/F2VYFG6VTH3Kg5lW+7TXWjv5fQD0
hiC3ppnjwVIovyzKX2HTtYSTCHmDM7I3sGNCexnlQcmRqIyffaYp1h6++4m9/fi5
/DO/CqZACmnLpq3ywMYTXkj2WX7b0eu8W5J2wK2bCJ3wcLMhkM11UZg8E9C0tVvu
U9UG6b+EowMZNG5ZZmvOo2n2D5D5XxmMw+thDG0PwKjCbm6F2GLwVhzxkuFy8+lY
Sfp3QxWXpC5jmw==
-----END CERTIFICATE-----
Generated at Sat May 10 21:21:51 2025 by rpki-client