Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: LJLmkfohWf/LTI8QY4GwZ3aNhIw9eJm8tt+z7U/Ucdo=
Subject key identifier: D2:31:8C:65:33:D9:A5:EF:46:3A:89:1A:09:5F:BF:9D:50:DD:4D:3C
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 0197470BCFF7B6EC403BD5936638B53D5A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0C5B
Signing time: Fri 06 Jun 2025 21:00:45 +0000
Manifest this update: Fri 06 Jun 2025 21:00:45 +0000
Manifest next update: Sat 07 Jun 2025 21:00:45 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: NxDvYVsg789IJP59V5wv6f0l0sTwhutGN9Yncpqnh10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:cf:f7:b6:ec:40:3b:d5:93:66:38:b5:3d:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Jun 6 21:00:45 2025 GMT
Not After : Jun 7 21:00:45 2025 GMT
Subject: CN=d2318c6533d9a5ef463a891a095fbf9d50dd4d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:bc:25:1d:22:ad:f4:3f:a3:65:22:41:a5:
fc:75:a9:bf:66:03:eb:f2:2e:c6:d2:69:b0:5e:ae:
39:6e:6e:7a:a1:89:e4:ec:04:a6:e4:85:a2:c7:86:
08:12:d3:ae:98:a9:a0:5d:44:6e:f9:5d:89:29:18:
70:09:79:a4:2f:68:25:62:1b:04:f4:c8:06:ae:98:
87:e3:ff:7f:96:75:db:a8:85:ea:53:87:23:17:55:
6e:3c:ce:2a:8a:4d:61:57:38:5e:fb:79:c6:c6:98:
8c:aa:5a:4c:37:e0:da:29:5d:08:3e:5f:d0:2c:14:
c9:cb:67:04:fd:71:c0:0f:b0:d7:73:47:63:94:cc:
74:44:a3:a0:1d:e4:87:22:c0:53:da:94:1b:b0:69:
81:e4:17:e4:44:18:81:3a:a5:d9:40:d1:3b:2d:b9:
36:a5:36:a6:65:68:ee:9b:22:58:53:c7:1d:5f:8b:
df:7c:ca:02:bb:92:33:b7:cd:79:ca:61:be:ba:99:
28:b8:60:31:ee:7e:b3:2a:ad:b1:9a:b9:bb:46:ee:
b1:68:c7:31:35:25:41:19:36:a1:6b:66:57:1d:62:
0c:6a:9c:f0:b6:e8:33:31:68:1c:51:f0:a0:16:ac:
ca:ec:2a:4a:cc:b9:d3:b2:a2:e7:97:e8:25:a9:01:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:31:8C:65:33:D9:A5:EF:46:3A:89:1A:09:5F:BF:9D:50:DD:4D:3C
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:30:da:9a:88:f6:52:03:02:98:24:51:c8:99:84:c2:c4:
ae:6b:65:03:83:b9:a5:f9:11:c7:4a:d4:f1:31:55:0a:c7:9b:
e6:8e:1c:d7:99:41:f5:73:84:bd:16:89:f7:59:13:9c:d1:b0:
ba:d2:98:96:d1:d3:42:bb:41:18:b9:66:82:f0:54:80:6b:2c:
de:b3:99:87:91:89:bd:a0:2c:2e:ed:79:8f:d2:b0:50:fd:8d:
35:c5:15:62:b6:0e:dd:7b:41:88:35:ea:99:fc:d1:39:97:ac:
9e:e2:b2:10:c9:28:ed:87:e5:de:43:2b:69:c9:4b:3d:66:08:
92:14:2d:9a:d6:14:f3:e6:3e:54:5e:db:b9:e4:94:ce:ac:bf:
c7:11:d8:d2:2d:77:6b:1c:d1:b1:4f:e5:f7:79:1a:56:80:0b:
21:40:88:bb:f2:82:16:3e:0e:69:1b:5a:8a:5e:14:71:2c:c2:
26:81:76:bf:d6:b9:02:f7:47:15:fa:3e:d0:cd:f9:cf:b1:19:
54:c0:38:18:33:63:46:41:37:67:5e:3e:25:37:dc:14:b8:ae:
05:24:61:97:ce:f9:3b:8d:1b:b3:aa:9a:7a:e8:05:ec:55:be:
49:80:90:2c:88:8f:a4:f5:6d:c7:6d:12:f2:c2:02:37:78:6c:
8e:21:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:24 2025 by rpki-client