Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
File: OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft (raw, json)
Hash identifier: onev+zan9Sr+9aZtwK5phXi22vL06DNvURtF73o5dnU=
Subject key identifier: 34:2D:AF:41:8F:7E:B4:76:A6:4C:25:4A:E6:F8:A8:2F:B1:54:74:82
Authority key identifier: 39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
Certificate issuer: /CN=39f086ca6211bb95d0643089c7da576fe67c2152
Certificate serial: 019751219ED5CD144EFFCF0E6E3368BE00D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
Manifest number: 0CBC
Signing time: Sun 08 Jun 2025 20:00:47 +0000
Manifest this update: Sun 08 Jun 2025 20:00:47 +0000
Manifest next update: Mon 09 Jun 2025 20:00:47 +0000
Files and hashes: 1: MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa (hash: 9t6kBtgaiu9wCZTnovzIZuJxrTyQ2HBBvSidXlmnqaM=)
2: OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl (hash: vd/NJ5ZXJJBQB5EfigREBOg2qmGbeFM/3uEkVQBds2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:9e:d5:cd:14:4e:ff:cf:0e:6e:33:68:be:00:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f086ca6211bb95d0643089c7da576fe67c2152
Validity
Not Before: Jun 8 20:00:47 2025 GMT
Not After : Jun 9 20:00:47 2025 GMT
Subject: CN=342daf418f7eb476a64c254ae6f8a82fb1547482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:ef:c5:27:95:a3:81:14:11:21:45:a6:1d:
af:30:dc:13:9c:b9:7f:22:61:8b:d0:dd:06:c7:ed:
b9:6b:f6:1a:bd:09:8a:90:9d:db:e5:85:eb:98:58:
1f:a9:4f:0f:74:b4:d5:60:2e:e3:85:63:ff:e6:ab:
4f:8a:ef:aa:e6:9f:02:85:f0:e1:4b:20:b7:be:8a:
f7:99:a2:d7:33:01:42:2a:91:cc:e5:a9:f2:93:77:
d1:20:f8:10:a7:f3:70:5c:39:fe:f8:96:ef:62:46:
03:f5:a2:d5:25:f0:ab:b2:41:48:15:ae:e1:88:05:
ff:82:15:5d:9e:18:5d:63:8a:f2:87:85:63:4a:14:
9e:f0:09:1f:b5:7e:03:42:d9:cd:f6:19:7c:b7:e5:
ae:ca:c6:4f:1e:d8:d0:c3:b9:e2:57:2d:50:de:c6:
eb:96:9f:64:f1:77:f4:b2:71:07:55:d1:42:f6:91:
1a:a0:13:84:35:e0:0c:e3:6a:20:00:ef:17:3b:c7:
9f:c9:fb:06:48:d6:1a:9e:c2:22:38:79:34:da:2d:
c1:be:c8:10:ad:37:32:40:3d:b4:f7:59:6d:25:ca:
77:87:11:34:f5:7c:b4:c4:5a:f9:08:c6:31:86:ec:
4d:38:65:69:9c:fc:b0:3a:69:06:3c:1f:9b:f6:a6:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:AF:41:8F:7E:B4:76:A6:4C:25:4A:E6:F8:A8:2F:B1:54:74:82
X509v3 Authority Key Identifier:
keyid:39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:90:5c:94:2d:c7:d0:0e:1a:d0:fa:c7:8a:65:76:0d:bd:17:
7b:23:dc:c6:d5:26:25:33:6e:64:20:0e:98:80:8f:ed:0e:ae:
d3:0e:a5:68:29:dc:d9:47:f9:9e:4a:4f:37:12:a5:9a:a8:e2:
0d:98:66:ba:22:48:29:05:87:7a:a3:07:13:65:fb:7d:bb:7e:
4b:3b:3e:cd:a4:ea:77:18:9f:3b:f7:e7:8b:f4:c0:16:93:ff:
64:73:ce:fb:6d:61:79:96:b9:98:4c:75:19:21:e8:6f:e1:e3:
f6:f4:92:76:07:af:39:43:25:96:78:78:1a:0f:df:8d:a3:89:
2e:38:49:16:50:a4:f5:43:2a:dc:7f:44:fe:de:1a:f6:64:e3:
c5:95:b7:f0:c8:d3:de:d8:8f:60:7d:81:dd:28:39:b7:55:d2:
42:09:3f:b5:39:47:26:64:8a:85:28:14:65:d8:f4:b9:19:32:
57:ba:39:04:a9:64:d5:94:94:cc:3c:ee:a0:8d:94:de:79:10:
ec:ea:ea:9f:f2:97:4b:7c:eb:b2:c8:59:6b:db:2b:03:ac:92:
a7:5c:83:54:c7:17:f6:ce:74:ee:ac:ba:55:e9:6e:c8:fd:42:
dc:f6:70:27:e8:da:1b:b1:3e:46:9c:39:07:b4:5f:77:81:5c:
d1:10:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:32 2025 by rpki-client