Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: y4nCssm08G+POuvILAjnlH0bxH2kdNlGCHF4JknexEU=
Subject key identifier: 62:D5:F0:46:F2:84:E4:17:F7:E5:65:2C:B5:F7:62:4E:61:19:34:43
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 019651C86FC00E5C70F1075F75FB8833BF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0BDC
Signing time: Sun 20 Apr 2025 06:00:12 +0000
Manifest this update: Sun 20 Apr 2025 06:00:12 +0000
Manifest next update: Mon 21 Apr 2025 06:00:12 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: oj30NWlRKL2/Jf4XVRTZ1ivy+o8yfq3paGlQyVq2ZR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:6f:c0:0e:5c:70:f1:07:5f:75:fb:88:33:bf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Apr 20 06:00:12 2025 GMT
Not After : Apr 21 06:00:12 2025 GMT
Subject: CN=62d5f046f284e417f7e5652cb5f7624e61193443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:94:74:46:e0:2b:d2:0f:ae:f0:ae:63:41:
c2:a9:3a:cc:cc:19:f6:86:99:c3:2f:b8:4a:f7:10:
14:9a:a7:0e:35:df:28:7d:95:2a:1e:06:73:80:ae:
e8:a7:e0:8d:a9:26:16:d3:1a:bd:4f:14:49:40:23:
b0:93:87:04:8e:83:f8:fe:13:6d:6b:5a:53:63:73:
89:3a:32:38:80:28:8c:e3:97:25:c6:f0:71:1b:dc:
76:4e:59:42:3d:3c:fa:b4:d8:c3:cb:70:7b:90:2c:
34:31:69:2d:15:ca:8d:b0:a4:19:40:aa:78:88:23:
c1:fe:71:3e:3f:d3:74:c0:a6:ff:66:84:3b:dd:fd:
4b:72:41:ab:d7:1b:09:d1:ba:7b:9e:69:fb:01:52:
39:e3:1d:ba:a1:f9:a6:e8:82:40:af:9a:fa:33:5e:
e3:3c:87:cb:bd:22:7f:38:b4:8c:96:ab:81:74:a3:
61:7d:aa:f4:0a:dc:40:00:3e:90:df:52:85:85:dc:
21:87:c4:f4:81:07:5f:2b:ac:80:ec:c0:9f:04:69:
f0:b7:88:86:13:71:26:cf:84:d9:17:7e:ff:18:62:
17:14:0a:d2:df:11:35:97:a7:49:eb:f5:00:99:1b:
a2:ca:d6:86:3d:55:15:d0:c6:a2:6b:9b:13:61:ca:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:F0:46:F2:84:E4:17:F7:E5:65:2C:B5:F7:62:4E:61:19:34:43
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f3:94:ab:bf:ec:cb:2f:52:9f:a0:aa:34:72:f7:fe:2e:3c:
34:5d:7d:2e:a4:7e:eb:48:61:78:1c:d6:6e:ca:12:1e:11:b6:
63:bb:08:f1:17:bb:69:c1:b3:00:00:20:db:21:89:f2:58:51:
e2:15:98:cb:f1:60:3a:05:1c:66:18:47:02:c1:5f:e6:89:fa:
db:37:11:26:fa:ab:ae:bd:45:40:bd:e7:9d:54:52:6f:75:eb:
81:3e:c5:fa:30:26:99:4e:ce:84:3c:3a:f2:2a:87:2c:ad:2e:
3c:16:a3:12:b2:52:f7:84:1e:3e:ca:53:a1:83:d0:4e:97:e6:
48:a7:a6:ab:9e:62:9f:29:0d:d1:c5:c5:c5:5d:69:e2:87:c3:
01:9e:71:96:08:a7:0b:74:55:0c:88:31:90:36:56:fc:68:0b:
23:50:ed:49:e0:9d:12:27:b2:c8:46:f1:65:04:0b:b8:0d:7c:
ec:93:10:3f:8b:75:be:ed:f2:18:19:97:15:cb:9f:9c:c5:de:
c9:15:6b:d4:88:87:a0:52:11:bc:10:e2:b6:58:4d:ca:f6:90:
7a:b8:f6:29:d8:ee:c4:7f:b5:e6:98:08:2c:8d:7e:01:31:d6:
1b:ae:c3:3a:c2:d7:3e:d6:e8:0c:1f:5d:03:9f:8d:d9:25:a9:
ef:03:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:28:00 2025 by rpki-client