Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: wyhUywXFPro8752zwIMk8384QfaoXvJocqZMUhXBzDE=
Subject key identifier: 2A:CB:74:03:9B:6E:72:D5:A0:E4:70:FE:2D:72:3E:3F:15:11:E1:D0
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 0198D6982A2678073ECBF23245D9E89E7F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: KTjAWq559hkjnBCOz6CWn77+iFJHnYjrvAkF8jkLe30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2a:26:78:07:3e:cb:f2:32:45:d9:e8:9e:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=2acb74039b6e72d5a0e470fe2d723e3f1511e1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:ec:8a:bc:32:e2:24:bd:5a:34:64:4b:21:
85:30:9a:96:e5:d4:0e:37:ea:a2:c6:dd:70:5e:4b:
a1:b0:33:e4:ee:60:aa:3a:38:19:48:6e:8b:15:34:
d2:64:d4:dc:8f:d4:b3:02:ef:b0:c3:f5:38:05:72:
e8:e8:2c:66:6e:74:f4:6d:58:31:b8:85:be:16:21:
67:79:7f:33:0f:87:4b:47:df:73:b2:56:41:50:c9:
97:10:5a:cf:18:45:00:31:26:dc:c6:df:57:3e:6e:
e0:53:36:ee:e1:ad:41:62:f4:fa:ab:2e:d2:94:74:
b9:33:6d:0a:56:8e:8a:94:9b:7a:e3:33:90:cd:e1:
85:9b:e9:fe:be:b0:24:d8:e6:6d:12:2d:e5:b9:a5:
1f:80:d4:37:a8:2f:c6:3e:87:b4:bf:84:15:c7:b2:
87:7e:5e:85:19:87:a2:77:31:4e:91:48:68:42:2d:
64:a9:dc:1d:46:ba:f3:76:8f:1c:57:91:c2:c4:b8:
20:e4:ce:7f:a9:98:ac:94:14:17:08:fc:14:a0:1c:
b6:83:bd:94:97:58:2b:10:e9:7b:d0:60:fd:44:bf:
e4:c5:5a:9b:90:f0:e6:f2:78:ac:10:3a:d0:fd:96:
0e:54:dc:2c:ee:4f:63:92:09:8f:10:fd:b9:57:01:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:74:03:9B:6E:72:D5:A0:E4:70:FE:2D:72:3E:3F:15:11:E1:D0
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3e:97:5a:aa:1c:60:52:8e:ef:21:e3:88:ae:d8:54:3a:ac:
7b:9a:d5:ea:f2:61:38:67:c6:ff:81:96:d3:36:d5:14:c0:19:
d3:67:af:c2:55:13:1c:28:fa:db:3e:3f:43:b4:e1:a1:bb:f1:
70:3c:06:f7:73:06:0c:d2:bb:37:35:be:dd:e0:fd:4d:6f:8f:
6e:be:21:08:4b:5e:02:b0:fe:40:ea:9d:26:25:6b:fd:a8:a2:
6f:a6:ba:e0:0e:11:3e:c7:4e:f2:af:c0:62:70:0c:39:c1:91:
fe:be:43:3d:85:a4:ec:d0:de:f9:ad:bc:12:c4:16:26:53:ef:
69:31:5e:81:7d:58:cf:ce:5d:ed:69:e0:78:61:68:5e:ec:bc:
ff:53:86:19:6b:21:89:05:4b:ec:b0:2a:43:ec:6a:76:0a:13:
66:d6:08:b1:10:7d:9a:09:3d:b4:65:a3:b2:8b:31:56:f0:0a:
a0:8c:0c:cc:50:77:10:43:3f:b0:4e:5c:a2:0c:f9:7a:03:ea:
f1:9e:41:fe:a3:22:ce:37:1d:4b:f5:28:a9:e0:84:2f:42:82:
4c:be:8b:67:83:47:27:37:72:bb:23:0e:3b:5f:fd:75:fb:b9:
31:40:27:fe:6a:c9:c5:ca:c3:69:ed:6c:b3:66:59:10:9e:d8:
67:52:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:53 2025 by rpki-client