Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: WU7BlD6xIYo27BffV9Nuf2k9FtfWENZ31dv3ZyUQEbA=
Subject key identifier: 99:7A:9A:B7:9D:F0:A6:82:A7:C9:F4:A1:2E:EB:49:2D:8E:0C:F2:A7
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 0198D7A92A28454EEEA78D754AE8E22B0419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0D00
Signing time: Sat 23 Aug 2025 16:00:44 +0000
Manifest this update: Sat 23 Aug 2025 16:00:44 +0000
Manifest next update: Sun 24 Aug 2025 16:00:44 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: LAaHLJ7LMffyY3KEhbpti13Vm0uMy7wyzPg0r+io0ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:2a:28:45:4e:ee:a7:8d:75:4a:e8:e2:2b:04:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Aug 23 16:00:44 2025 GMT
Not After : Aug 24 16:00:44 2025 GMT
Subject: CN=997a9ab79df0a682a7c9f4a12eeb492d8e0cf2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:bb:17:b6:2e:20:48:0a:a9:52:ab:4c:a1:
43:61:a6:27:1e:f2:d0:77:7e:9f:80:45:49:4e:bb:
06:4f:01:4d:6e:79:4e:cc:76:8e:a4:e4:a5:7e:87:
cd:02:41:17:ed:85:ff:51:84:21:ec:f1:d9:e3:b5:
5c:ad:b4:8a:fb:27:86:bc:82:d8:f7:97:c8:87:c5:
08:b3:b6:ea:88:37:78:4a:75:d7:cc:b7:eb:b8:06:
f8:51:78:28:e3:a3:8d:89:ce:c0:d8:d1:73:4d:ea:
7e:1b:9b:b8:49:34:4b:da:8b:04:f4:cb:e5:fd:2a:
43:54:c6:b1:2d:dd:ac:28:0d:3a:b6:30:d6:fd:00:
7e:2e:87:02:5f:e4:f2:0e:7e:c7:04:8d:cd:99:a5:
fb:1c:f2:e1:bf:16:93:42:11:81:bf:15:9a:7f:e4:
2f:4d:bd:9c:89:97:7a:5a:79:ba:57:13:d6:3f:a5:
bc:b6:12:b2:4f:04:e3:5f:7d:df:fd:7f:4c:e2:cd:
14:da:ce:8a:fc:0c:e6:52:68:ac:43:38:53:64:ec:
ed:55:eb:85:22:22:19:b6:85:f8:48:04:d5:95:02:
42:64:f0:1f:98:6b:c9:05:3a:e1:bc:6d:d7:9d:9b:
db:4e:e1:ac:8e:e8:99:95:70:4f:95:eb:35:01:50:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:9A:B7:9D:F0:A6:82:A7:C9:F4:A1:2E:EB:49:2D:8E:0C:F2:A7
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:07:5d:a7:2f:cf:9c:01:bf:7e:ef:77:fb:97:c9:b1:1d:
1b:db:4a:7c:ec:60:12:6b:a8:b7:de:7c:38:25:b8:29:b8:35:
fc:32:b9:e6:81:ee:28:98:d7:fb:4d:69:af:09:7b:d9:c7:70:
78:6b:d6:11:ca:e7:61:8f:8d:3f:74:0e:ff:d0:04:a5:55:ca:
ad:5a:0c:68:ef:c2:f2:36:0e:ae:ff:f3:8a:a0:4e:52:13:ba:
37:79:8e:5f:60:68:1b:18:76:2b:98:5b:f4:e4:00:4d:10:9e:
41:cc:6f:74:7c:e2:f6:a5:3a:15:81:5b:f1:0b:91:c0:38:59:
c4:a3:80:d1:d0:11:77:f7:8c:21:d9:2b:73:8d:e5:8d:f3:f9:
eb:83:12:6c:35:f5:47:11:35:14:da:ea:da:af:8b:8b:5c:1f:
fa:ef:75:4f:10:cc:9b:d9:55:68:87:05:42:a8:01:3d:f1:69:
dc:cc:4d:91:2e:4f:8a:46:18:cf:81:d9:d7:be:19:1f:2d:d8:
ff:0b:1c:35:d4:7f:cb:48:64:4a:03:e5:78:b9:6c:f2:31:2c:
02:32:5f:5f:61:fe:13:50:13:06:75:74:a6:d7:90:2d:fd:bb:
bd:05:72:63:26:54:bf:6a:66:43:8f:43:3a:90:4e:2a:7d:7f:
e4:df:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:16:14 2025 by rpki-client