Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: YgsO+GYoiJsEXMFuka2+XdKdN4IG/aVtXMMPhLJbjKM=
Subject key identifier: F3:AB:BC:EA:AD:9E:9A:6B:93:03:27:B6:7C:39:ED:25:52:BF:EF:BF
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 0198D84FC53AD72EBE61F2C3132F6F904D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0C4E
Signing time: Sat 23 Aug 2025 19:02:43 +0000
Manifest this update: Sat 23 Aug 2025 19:02:43 +0000
Manifest next update: Sun 24 Aug 2025 19:02:43 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: u+nQ/FSWvcpOaPYlm+9doaxaTas5ERKpRwIY1WsbOdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:c5:3a:d7:2e:be:61:f2:c3:13:2f:6f:90:4d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Aug 23 19:02:43 2025 GMT
Not After : Aug 24 19:02:43 2025 GMT
Subject: CN=f3abbceaad9e9a6b930327b67c39ed2552bfefbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7b:f3:db:cd:ea:42:6f:12:d1:be:3a:96:31:
ab:12:30:7a:83:2c:77:3e:44:91:22:6a:d7:dc:4d:
2e:0c:1e:41:ea:4e:e5:fd:e1:7d:a7:d2:3a:5a:f7:
59:cb:1e:76:e2:22:46:25:05:35:95:a6:e7:97:2a:
a0:be:bc:ff:7b:4d:dc:25:23:d2:ef:99:fb:de:6e:
bd:14:3e:68:a9:9a:ac:7f:89:74:c6:16:6c:d0:81:
20:f9:1c:63:7c:41:81:aa:8c:da:6c:f1:4c:6c:94:
f3:16:b8:cf:cd:cb:c8:9d:c7:5c:4b:25:e3:a0:9d:
f2:d1:19:fa:60:74:90:40:34:85:12:ef:98:5a:77:
56:b6:14:03:13:36:b7:bc:03:d2:bf:16:84:4a:aa:
e4:63:30:8c:99:fc:bb:53:ed:6c:7d:1e:92:98:a6:
ec:dc:b9:37:a9:02:3c:8f:73:f0:a0:fc:66:71:e3:
e9:21:e1:58:b4:06:7b:a2:ab:09:d0:90:90:60:bd:
59:fa:f7:68:98:74:fc:68:7c:0f:ce:43:e2:82:eb:
c5:fb:33:40:7f:b2:6a:57:0a:b5:67:6d:72:bc:cd:
e6:da:34:28:d4:d5:cd:22:cb:97:43:c2:b3:fb:6d:
1e:d5:e1:72:a8:a0:78:35:2d:ca:91:ee:a0:99:59:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:BC:EA:AD:9E:9A:6B:93:03:27:B6:7C:39:ED:25:52:BF:EF:BF
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:25:07:92:53:00:a4:11:a7:0c:b8:30:45:06:d3:96:a2:3c:
c2:7a:27:77:ed:01:dd:1f:eb:d5:4c:7a:18:f3:91:5c:c3:e1:
53:3a:23:24:9b:30:d5:41:11:ff:bc:c9:2e:36:84:1f:10:df:
80:71:51:da:ef:4a:3b:ec:e2:1a:0d:1c:b3:d1:b6:20:81:3b:
11:75:52:a5:88:32:87:c1:fd:d2:ae:82:4e:42:9a:ed:b2:01:
cb:f1:8f:1d:08:c8:23:8c:78:bf:f6:84:ae:e0:8d:d0:66:46:
a1:8e:40:5c:2c:a7:92:5b:b3:c0:d4:d3:14:f9:f4:bb:c4:01:
0d:e0:3b:3b:6d:8b:69:78:1c:9c:11:4a:26:94:0b:8d:56:2c:
3b:14:54:15:a0:84:11:04:57:5a:6f:bc:3d:16:30:18:b2:32:
17:48:25:77:80:c3:ac:f3:8a:4d:49:26:30:9a:6a:57:38:85:
39:02:32:24:52:98:24:92:2c:e7:84:fa:5a:5c:ca:ec:4e:bd:
4e:66:e3:f1:a4:d4:96:34:17:1b:18:1e:b8:84:63:22:c1:79:
44:23:cf:13:c2:51:fc:30:58:5e:d9:05:54:63:27:f5:aa:a8:
9e:2d:79:b1:85:f4:68:3d:9f:c1:3f:ce:62:e2:e2:81:0b:e5:
45:9f:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:59:11 2025 by rpki-client