Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: QtdUmaZFVe+kVLsQ3nrz9IjqSmUljIuQ8/P2EpKvQuw=
Subject key identifier: FB:DE:0B:CB:B8:72:C3:CC:9F:81:8D:8C:F5:C6:88:EF:03:DD:BC:4C
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 0197B7EA29D3E1E579B672E367BA45272FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0C6B
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: 0/XqDsuJJSvPItmhZ8PklHkniCsxDvXOozEyr4Uhgus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:29:d3:e1:e5:79:b6:72:e3:67:ba:45:27:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=fbde0bcbb872c3cc9f818d8cf5c688ef03ddbc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:a0:b6:17:47:ba:d3:67:6c:b4:98:56:c6:
c3:fb:df:14:1e:76:ae:52:21:e5:b1:3f:5e:7f:ca:
9c:ae:54:fe:e8:58:d5:14:27:bf:b4:84:00:af:d0:
a3:d7:e9:17:dd:91:41:56:7b:41:9a:f2:58:5a:6e:
e0:24:97:52:ef:f2:5a:59:51:f5:e8:2d:f1:09:77:
5c:fe:d5:6e:a4:8d:b0:36:f4:67:9f:dd:41:3b:1d:
df:a2:bf:fd:f6:8b:97:7b:e8:d9:74:a7:77:3a:74:
17:5a:c3:b1:f2:3e:df:ef:cc:19:23:f6:3e:22:8a:
6d:ab:f7:e2:ec:52:47:d4:ff:8d:5e:87:93:53:08:
8f:7e:15:b7:c5:ae:1a:0f:7b:6e:7c:10:e0:a5:f2:
0e:c4:95:30:5a:84:6c:55:1e:79:4d:6b:5b:53:de:
28:ab:69:3a:1d:e7:b5:0c:40:0b:75:61:7d:51:fc:
bc:a8:43:d4:69:b7:70:82:7a:42:0f:a1:8a:c6:5d:
6d:25:b1:30:99:8e:2e:74:fc:80:ce:fa:93:49:89:
7b:01:32:ac:48:d3:0c:56:f0:c5:9e:df:06:b6:8d:
d3:a6:9e:d4:be:7a:51:f3:ee:e0:ff:03:8a:e7:d9:
62:af:40:19:c1:68:f9:93:c3:1a:9c:ec:0a:ef:d0:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:0B:CB:B8:72:C3:CC:9F:81:8D:8C:F5:C6:88:EF:03:DD:BC:4C
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4e:ce:c4:2c:7d:e7:ff:b1:58:ee:c6:57:1d:d0:3d:42:a3:
17:31:3d:9e:97:12:f2:5f:e1:c0:8a:1c:b0:ad:ff:ee:fc:e3:
ae:22:43:92:c8:d5:0c:d8:09:5a:e6:c1:34:aa:5c:e4:83:e4:
ae:e5:11:a5:6a:90:fd:22:2c:9d:04:fa:51:1f:32:ac:b6:01:
5e:b7:83:7f:65:e2:c5:df:e2:05:53:6b:7a:13:68:93:79:76:
61:d3:dc:aa:a5:3d:2d:2b:72:a2:e2:28:da:a3:c6:63:c8:09:
0d:40:1c:b5:bc:8b:0a:2b:0b:a0:79:77:88:85:2a:48:f9:af:
42:fe:93:68:93:5d:c7:52:c5:6e:07:15:68:7e:8d:c5:02:52:
8d:f6:27:d8:be:4c:e2:55:99:13:9d:aa:4e:79:f6:3a:c4:3b:
71:1e:4f:6c:41:f9:b2:7f:b0:9f:97:2d:d3:5f:94:70:be:85:
c7:17:a1:7c:15:c7:a8:02:78:f8:09:0a:a7:b1:e2:36:d0:93:
17:34:1f:f5:8b:60:ea:6b:95:62:0a:46:0d:ff:56:0f:e3:71:
c2:7d:a7:0b:b8:3a:43:2d:4d:01:c1:ec:c2:78:2e:45:37:af:
b9:4c:72:e1:c3:64:f9:df:4d:81:82:09:ff:de:d4:04:71:3e:
f9:4f:27:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36inT4eV5tnLjZ7pFJy/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjI0Yzk2ZTZhZGU2MDg4MTBjMzBkOWExMzA3Y2M2OWFm
OWZmNGQwHhcNMjUwNjI4MTkwMTA1WhcNMjUwNjI5MTkwMTA1WjAzMTEwLwYDVQQD
EyhmYmRlMGJjYmI4NzJjM2NjOWY4MThkOGNmNWM2ODhlZjAzZGRiYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E+gthdHutNnbLSYVsbD+98UHnau
UiHlsT9ef8qcrlT+6FjVFCe/tIQAr9Cj1+kX3ZFBVntBmvJYWm7gJJdS7/JaWVH1
6C3xCXdc/tVupI2wNvRnn91BOx3for/99ouXe+jZdKd3OnQXWsOx8j7f78wZI/Y+
Ioptq/fi7FJH1P+NXoeTUwiPfhW3xa4aD3tufBDgpfIOxJUwWoRsVR55TWtbU94o
q2k6Hee1DEALdWF9Ufy8qEPUabdwgnpCD6GKxl1tJbEwmY4udPyAzvqTSYl7ATKs
SNMMVvDFnt8Gto3Tpp7UvnpR8+7g/wOK59lir0AZwWj5k8ManOwK79AYsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPveC8u4csPMn4GNjPXGiO8D3bxMMB8GA1UdIwQY
MBaAFDjyTJbmreYIgQww2aEwfMaa+f9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84YWYxY2QtNTAyMS00NjNiLTk5YTMt
MDRlNGE4NGE3NGFjLzEvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84YWYxY2QtNTAyMS00NjNiLTk5YTMtMDRlNGE4NGE3NGFj
LzEvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPk7OxCx9
5/+xWO7GVx3QPUKjFzE9npcS8l/hwIocsK3/7vzjriJDksjVDNgJWubBNKpc5IPk
ruURpWqQ/SIsnQT6UR8yrLYBXreDf2Xixd/iBVNrehNok3l2YdPcqqU9LStyouIo
2qPGY8gJDUActbyLCisLoHl3iIUqSPmvQv6TaJNdx1LFbgcVaH6NxQJSjfYn2L5M
4lWZE52qTnn2OsQ7cR5PbEH5sn+wn5ct01+UcL6FxxehfBXHqAJ4+AkKp7HiNtCT
FzQf9Ytg6muVYgpGDf9WD+Nxwn2nC7g6Qy1NAcHswnguRTevuUxy4cNk+d9NgYIJ
/97UBHE++U8nHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:13 2025 by rpki-client