Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
File: OFYFj7mk9--XizgCGuFSwk6_zkA.mft (raw, json)
Hash identifier: 8PaFXY3BwLYMITreisFbDmW59gc0FSaqVbvhb96O8aw=
Subject key identifier: 91:09:C0:2C:5E:A4:C0:5D:02:87:4C:08:12:D7:D0:DC:17:B2:08:60
Authority key identifier: 38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
Certificate issuer: /CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Certificate serial: 01974AB1961038495EF2E2430F349BF7817B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
Manifest number: 0283
Signing time: Sat 07 Jun 2025 14:00:41 +0000
Manifest this update: Sat 07 Jun 2025 14:00:41 +0000
Manifest next update: Sun 08 Jun 2025 14:00:41 +0000
Files and hashes: 1: OFYFj7mk9--XizgCGuFSwk6_zkA.crl (hash: 7jRvtpUTIm8dKwISEfsCYC/Z6Iyx1KtMCzUI2PKtoQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:96:10:38:49:5e:f2:e2:43:0f:34:9b:f7:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Validity
Not Before: Jun 7 14:00:41 2025 GMT
Not After : Jun 8 14:00:41 2025 GMT
Subject: CN=9109c02c5ea4c05d02874c0812d7d0dc17b20860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:77:42:d0:5a:72:57:52:28:8f:99:67:79:
ee:c1:29:31:66:d3:1b:b5:cd:bb:6f:84:56:e7:91:
06:e7:e7:05:4f:76:9c:23:7b:0c:7f:22:11:f0:32:
5d:12:14:5a:99:2b:c3:30:50:14:f8:88:ec:33:3e:
f5:c7:ca:a2:75:ae:b0:21:78:29:b0:ea:3b:11:cb:
d5:ab:be:5d:6f:95:ec:2c:cb:70:42:5c:da:c7:da:
2e:f1:8a:ee:f2:35:54:c6:11:f7:4b:b9:f4:11:f6:
ff:6e:11:26:69:7c:18:b3:5f:5a:90:23:05:a6:b4:
df:74:ce:92:9c:0e:f4:64:52:2a:e7:8c:3b:9a:6e:
04:e1:6a:fb:3e:cb:1a:09:8b:59:a6:85:87:0d:44:
f2:43:6d:cf:c2:b9:a9:c2:b0:2a:4b:06:c2:7a:c4:
b4:88:86:70:a2:1a:c5:1c:45:38:6b:ee:4f:1b:d7:
1a:25:2a:53:00:02:85:2b:09:01:be:69:14:01:1e:
b8:9f:cd:97:f8:cd:44:7b:f1:b7:b9:19:e1:c7:db:
5e:cf:02:b5:19:88:78:26:8b:49:89:48:52:15:66:
10:51:a8:87:7b:71:56:15:5e:4b:05:ee:52:ec:2e:
5f:1f:d5:78:9c:14:14:d9:46:1e:b2:b5:a2:4b:17:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:C0:2C:5E:A4:C0:5D:02:87:4C:08:12:D7:D0:DC:17:B2:08:60
X509v3 Authority Key Identifier:
keyid:38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:2f:0c:90:48:2c:62:0b:18:34:c2:e2:d4:8f:af:b6:46:
5a:03:64:d5:dd:eb:8b:22:dc:dc:27:80:ba:9c:6e:ec:6f:25:
35:04:d0:fc:be:3c:b5:6b:bb:fa:b3:23:c0:42:d8:a5:87:29:
fb:0e:f4:71:75:2a:a8:96:a1:dc:13:bf:da:23:8c:44:a7:e5:
0a:85:16:01:02:a6:9a:fe:3f:82:5a:21:6c:61:a3:40:c7:5f:
55:c7:fb:91:23:46:f4:ee:6e:9c:03:23:b7:fe:26:b6:54:d0:
a4:01:01:a1:e3:75:25:9f:89:4d:87:39:2c:33:41:07:e0:3b:
49:83:15:b4:e3:bc:6e:93:7c:f9:30:60:18:d2:08:6f:8b:a0:
1a:aa:c1:f7:14:c2:a7:af:31:9c:c3:da:2c:d8:14:4a:50:6e:
57:7f:a9:73:f0:05:61:98:24:41:78:c8:27:67:fc:64:f5:74:
38:50:63:60:f4:c9:76:a3:d7:6e:2b:3c:11:19:fe:1e:11:ad:
d2:c5:e2:6d:bc:c6:33:a9:54:46:8f:66:47:d7:de:71:c5:e3:
de:33:8e:9b:f9:5a:00:30:7a:03:f7:e2:3b:69:be:26:1c:e6:
39:79:53:a1:ce:21:59:4f:f0:b7:95:df:8b:f0:f2:26:ed:15:
2c:6e:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:11:44 2025 by rpki-client