Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier: sejjBO15+iDSOn5az/o9R7M4BrXT/zVv1GBRKr+x0Kw=
Subject key identifier: F6:88:B7:6F:3F:AF:3D:2D:B1:2B:38:78:0A:1F:D8:4B:65:3D:A8:DA
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial: 01965CF13E678941FFB468C477383B21C6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number: 097A
Signing time: Tue 22 Apr 2025 10:00:36 +0000
Manifest this update: Tue 22 Apr 2025 10:00:36 +0000
Manifest next update: Wed 23 Apr 2025 10:00:36 +0000
Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: zpJzBULo0Ija2DvbiBqrhTccf/Fckg1E6siH0nSZIxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:3e:67:89:41:ff:b4:68:c4:77:38:3b:21:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Validity
Not Before: Apr 22 10:00:36 2025 GMT
Not After : Apr 23 10:00:36 2025 GMT
Subject: CN=f688b76f3faf3d2db12b38780a1fd84b653da8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:22:b3:b4:16:67:6e:63:1c:39:4a:58:d4:
27:d7:51:91:3e:49:82:87:70:0d:ee:e3:b2:b4:0e:
c9:cc:79:f0:a8:c7:6c:70:0b:a5:ba:bd:3d:5e:7c:
6d:8b:53:0b:d0:c1:76:94:80:90:6c:a3:9f:0b:ad:
92:14:ab:78:6b:a8:91:5c:d7:90:46:4f:44:52:86:
26:67:35:c9:1d:7a:9b:45:17:d8:c9:f3:c6:5f:11:
5e:fa:0f:95:7b:5e:8e:42:b1:a2:25:ae:01:1d:91:
5c:9d:16:a7:3a:e9:7e:06:62:70:6f:53:df:b6:ec:
3d:4c:c5:2b:9a:8b:d9:33:e9:ce:3e:5e:e5:89:f7:
17:a8:ca:c7:f4:30:bd:59:ea:4a:07:06:80:c1:24:
17:87:c6:61:d4:2b:03:88:d1:8d:2c:63:ab:7b:64:
87:62:04:94:ce:56:fe:48:ea:ac:e5:31:40:d7:2f:
c3:ca:58:61:a5:22:6d:f0:75:6d:4e:a4:0f:d7:12:
11:33:50:4c:2a:9c:5c:43:cd:d0:11:44:97:6c:ca:
75:cf:c2:8d:a2:5a:d8:d2:57:91:17:f8:10:24:73:
6a:21:67:b9:70:2a:62:2a:0c:56:f7:2f:c2:b4:ed:
03:bb:c5:b2:a7:01:f6:17:34:8e:a4:87:3b:fb:f1:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:88:B7:6F:3F:AF:3D:2D:B1:2B:38:78:0A:1F:D8:4B:65:3D:A8:DA
X509v3 Authority Key Identifier:
keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:29:2b:8d:48:ed:1a:1d:5b:9a:30:9d:b1:47:11:9e:2e:a1:
5b:41:e3:18:37:62:00:ce:45:95:dd:3b:bc:05:32:1d:80:f5:
37:ea:a4:87:c9:3e:cc:ca:1f:28:ce:c8:60:01:1b:dc:d5:4f:
37:85:93:81:dd:10:5d:05:9d:8d:20:33:d8:cf:14:68:09:a3:
39:ba:36:17:0a:18:98:a1:0a:46:3d:4f:03:3c:6a:d6:19:a0:
18:70:ff:2a:d4:0a:b0:92:f7:60:d3:54:87:57:2c:96:b1:b7:
54:4c:d4:19:b0:95:71:3c:ee:78:db:de:03:20:82:10:6c:e6:
3b:58:b7:16:52:e4:81:af:7e:24:c6:9b:20:05:8d:ab:f1:68:
3f:1f:04:b4:b4:81:8b:80:e2:ff:f3:3b:44:f7:0b:62:8b:40:
93:bd:2d:c0:59:3b:d4:c7:ff:26:f4:37:89:93:92:0b:50:79:
dd:39:59:13:51:83:62:86:2d:21:79:ed:a2:a0:65:b9:a5:fa:
75:db:76:cb:c5:3e:08:50:ea:89:5e:3d:0d:48:5a:2b:b2:69:
a5:b3:08:d3:f0:11:f4:3e:0b:ca:26:e2:b3:56:b3:f8:a8:9f:
04:96:31:66:96:42:49:23:e6:68:d7:ab:a6:63:d8:46:5b:cb:
02:2f:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:48:35 2025 by rpki-client