Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: MPUnKoplpUZQPjQr3aTOTzyH/y4no/bblTE2On/o6UE=
Subject key identifier: 5E:E0:1B:7F:10:4E:1C:E7:FE:61:57:09:D6:9F:0B:4B:C0:60:EC:CB
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 0197B82146A627CFA7D4C2EBD20FD5984B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=)
2: AI-T3-zIp1DMrSXD4vBKYCDZBV4.roa (hash: KlOk/fF1w7EKHSk+04TQtjgBWQMEvMF/JZ8yxyO3hC4=)
3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: MkpSECoriOHkhxn8htpnpa0FSZeE4oKZLiw/nzi1DIk=)
5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=)
6: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:46:a6:27:cf:a7:d4:c2:eb:d2:0f:d5:98:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=5ee01b7f104e1ce7fe615709d69f0b4bc060eccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:27:27:51:8b:40:76:17:0e:9e:66:4a:e0:
bd:4c:17:c6:9c:40:ff:9d:ab:98:25:11:da:ca:ab:
46:01:48:43:76:0d:d9:65:e4:f4:5b:a6:a0:76:3a:
be:68:3d:91:56:6b:cf:96:d8:b7:93:f9:cd:81:04:
55:6c:89:32:ad:1f:c0:ce:47:ce:a9:26:d9:3e:b7:
a8:6d:db:99:24:9c:41:b8:92:07:99:a2:6e:20:c2:
d8:f4:07:ad:c6:50:ac:cc:d8:b6:90:c9:59:c9:eb:
73:56:33:57:7f:e2:02:45:58:66:ab:6a:84:b5:45:
b4:c3:d4:29:e2:7e:d5:d6:60:0c:5b:57:8a:3a:53:
f1:1b:f6:aa:89:ed:fd:31:ea:5f:87:0b:7d:45:65:
de:9b:6a:1b:01:19:40:a3:72:20:96:a1:1e:d7:f9:
14:ff:52:92:e8:5f:06:ba:74:2b:53:4b:0a:3a:ae:
86:44:df:38:59:40:0c:08:35:aa:4c:0a:62:c4:58:
e6:40:a6:82:ea:05:08:87:51:f0:e3:ac:a0:98:ef:
69:ff:e4:18:17:f8:45:36:be:06:b5:9c:1b:c8:d1:
d3:a2:c7:d0:1d:49:3b:c2:91:d8:ad:fa:af:49:79:
90:c9:c1:0e:d3:0d:30:49:7d:f9:4c:4d:a0:2f:d3:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E0:1B:7F:10:4E:1C:E7:FE:61:57:09:D6:9F:0B:4B:C0:60:EC:CB
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:12:38:a0:7a:85:c0:52:60:89:53:ef:c7:f6:83:0f:90:31:
c9:51:ff:59:97:80:76:33:f8:f8:09:52:bd:ae:f9:75:48:e1:
48:b0:f9:2a:59:d0:03:12:73:0f:92:7e:c0:6e:8b:87:92:df:
52:9f:ca:85:98:5d:1a:a5:5e:e9:97:c8:57:ce:f2:7f:62:97:
07:86:e7:08:fb:87:d1:32:f1:3f:df:89:cf:ff:73:7b:ec:d2:
40:7e:7d:25:c6:e2:be:b2:35:7c:28:85:ef:1d:f7:40:56:f9:
61:19:33:56:91:e5:27:18:23:48:5b:90:35:9d:8e:fa:1c:dd:
3b:19:24:d3:49:53:0b:62:1c:ca:b6:b8:be:27:21:2a:74:a2:
61:6d:4f:8d:c5:17:88:8d:2f:ef:36:ca:61:b3:d1:91:45:23:
3b:f4:4d:93:bd:23:59:14:4e:8c:2d:24:09:af:a6:e9:ac:37:
f7:0a:64:df:71:37:2f:d9:c8:e2:14:f4:4e:e9:c0:28:19:df:
73:56:3a:9f:85:b2:74:c7:3c:61:67:f9:0c:c0:78:94:4d:3f:
4d:9c:b6:ef:00:10:ec:7e:92:a8:e7:0a:4b:07:e0:b2:68:5c:
53:cc:86:b7:04:cd:af:18:7e:9a:b9:d7:d1:64:f9:3a:2a:11:
55:bb:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:59 2025 by rpki-client