Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
File: OFYFj7mk9--XizgCGuFSwk6_zkA.mft (raw, json)
Hash identifier: OxP1tgvBn6l+I6qwcRkS1PrUWldjq3Hs7sydAaa24aQ=
Subject key identifier: E7:E6:93:EF:2B:24:A6:59:C2:68:28:2B:F3:D1:90:FB:4D:CE:46:BE
Authority key identifier: 38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
Certificate issuer: /CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Certificate serial: 019845BF75BD3DB18AE0B173589569AC0A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
Manifest number: 0305
Signing time: Sat 26 Jul 2025 08:00:32 +0000
Manifest this update: Sat 26 Jul 2025 08:00:32 +0000
Manifest next update: Sun 27 Jul 2025 08:00:32 +0000
Files and hashes: 1: OFYFj7mk9--XizgCGuFSwk6_zkA.crl (hash: /uf7yTQ6JnhLHiz2b6041J2hxaJaLghjcnKempUKdU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:75:bd:3d:b1:8a:e0:b1:73:58:95:69:ac:0a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Validity
Not Before: Jul 26 08:00:32 2025 GMT
Not After : Jul 27 08:00:32 2025 GMT
Subject: CN=e7e693ef2b24a659c268282bf3d190fb4dce46be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0d:0f:7f:43:d1:f8:3b:db:37:2a:f9:11:fd:
01:e5:49:bb:c4:76:15:f4:dd:b3:10:60:29:be:d2:
0a:91:91:79:2e:8f:2b:5a:05:61:73:3b:25:06:f7:
41:21:9d:22:ae:dc:3e:97:43:88:c1:ec:7b:64:77:
25:e2:74:c4:78:7d:8c:81:1d:71:0c:c2:9d:14:69:
27:75:49:eb:78:7b:33:a8:b6:38:25:5b:1d:09:ff:
bc:4a:ff:fb:13:5a:1b:68:49:1b:f1:7e:bf:c1:f7:
b4:12:a6:b7:ed:f4:1e:95:dc:8a:d0:ea:3d:09:bb:
73:9f:49:2c:e1:69:ce:06:08:24:62:ba:a4:e9:26:
89:f4:dd:3b:30:4a:82:b9:dc:c2:e3:53:5f:73:5e:
e3:20:14:bd:b4:b4:25:b4:53:0d:fb:33:eb:8b:50:
e5:15:4e:a0:f7:d4:79:33:9b:02:59:ef:a2:c2:48:
97:d9:d6:f3:1e:04:a9:4b:93:69:1b:d9:16:e9:e2:
5b:b6:3f:4a:c3:ce:15:31:ef:f3:50:63:d2:e2:58:
d5:8d:1f:49:20:79:26:c3:b9:4c:e2:9a:8e:7f:27:
19:b2:48:3e:86:60:95:d7:b2:38:36:c1:be:6b:60:
79:c9:b0:cd:14:8d:72:92:eb:98:55:6c:51:b1:3a:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E6:93:EF:2B:24:A6:59:C2:68:28:2B:F3:D1:90:FB:4D:CE:46:BE
X509v3 Authority Key Identifier:
keyid:38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e1:85:31:10:01:fa:67:c2:f8:e8:63:da:bb:17:52:00:c5:
a0:95:92:0e:9d:94:1d:bd:c2:7e:fb:50:04:be:ba:3d:4b:2e:
24:a9:75:b5:01:21:2d:1a:b2:51:cc:f0:82:de:6a:92:00:a7:
db:72:1c:1e:36:59:97:d0:87:0c:f3:37:4b:20:ce:47:e5:44:
a8:a5:89:1f:2d:5b:c4:75:66:ea:a3:4a:7c:62:43:c2:e7:41:
0e:ee:52:a6:f4:b4:c7:46:82:9c:03:9b:c6:56:10:47:dc:19:
3c:fa:23:97:60:b0:3e:a0:13:b0:e9:85:44:28:ea:07:ef:11:
22:fc:03:09:a6:e0:e2:b8:2b:57:a3:57:53:97:c7:cd:9f:8d:
8e:68:4b:18:f7:84:4a:47:61:27:ea:2f:5d:35:25:cd:f8:5d:
33:79:33:df:d7:e9:ff:12:17:1e:ca:f2:96:89:8c:08:31:2b:
b8:1c:6f:86:db:29:13:ef:c7:59:6e:c1:d5:70:e4:4b:c8:9f:
fb:6e:3c:25:9a:cf:73:a1:59:6e:c5:9e:67:bc:d1:fd:de:4b:
1d:71:3e:04:44:57:3e:b4:90:cc:1d:5d:1b:52:87:43:5e:1c:
79:f8:66:eb:dd:bd:b9:bf:da:50:27:a0:41:7a:f3:9b:c0:62:
e5:b6:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:26 2025 by rpki-client