Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: cRLNEWsrNrvzjDwUQtL0O51jggTCv14AsnlhMOJXNe8=
Subject key identifier: C1:0A:2D:5C:7E:9A:AB:9A:A8:ED:2C:6A:07:8E:AB:FF:18:66:3C:9E
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 0199221F408179598FCA8E64F9C0A1E1DCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0D51
Signing time: Sun 07 Sep 2025 03:01:37 +0000
Manifest this update: Sun 07 Sep 2025 03:01:37 +0000
Manifest next update: Mon 08 Sep 2025 03:01:37 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: nwGCbOj+5VSbxk2n4NRTM3YSySLh0ypkrf25SsoJY2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:40:81:79:59:8f:ca:8e:64:f9:c0:a1:e1:dc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Sep 7 03:01:37 2025 GMT
Not After : Sep 8 03:01:37 2025 GMT
Subject: CN=c10a2d5c7e9aab9aa8ed2c6a078eabff18663c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:2f:72:e1:e3:36:8b:a6:48:1d:a4:e8:8a:
97:34:e0:47:f5:a7:09:77:db:51:ed:0b:04:b6:f4:
86:22:ef:fc:eb:1a:21:ab:57:95:e0:50:51:f6:1c:
93:36:5f:89:5e:fe:f4:d4:5f:ff:c8:52:a1:7a:7e:
d8:11:9d:4c:af:a3:5a:a8:59:f4:79:c2:5e:98:ec:
19:78:c1:1d:3e:7c:38:d7:31:54:ec:d1:5a:46:20:
45:55:f9:1d:c8:3b:1d:f5:82:2c:8a:ca:74:99:dc:
46:67:9b:d0:4c:2d:d4:db:ee:2f:2d:46:49:19:de:
c0:e9:da:90:8d:cf:4c:b9:e9:76:07:f5:b7:20:ac:
4b:e8:50:34:d0:f7:e9:21:06:b6:1f:27:48:d3:f9:
4e:52:44:49:9f:34:57:fe:08:f1:27:2f:2a:97:ed:
8c:64:af:cd:37:99:3b:03:6f:ea:36:05:7f:46:bf:
a1:49:54:7e:c0:ee:26:60:89:56:54:52:48:c2:34:
92:d7:b6:1e:aa:aa:7f:1c:aa:34:07:b7:b1:b7:af:
2b:fc:b7:a9:4c:fc:08:10:65:87:d4:27:62:c0:3e:
f5:ca:20:72:21:4b:01:2b:2f:d6:31:69:73:be:fe:
d5:75:d8:8e:f2:57:2a:7e:b8:13:48:fe:9c:15:cb:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:2D:5C:7E:9A:AB:9A:A8:ED:2C:6A:07:8E:AB:FF:18:66:3C:9E
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:f6:1a:d5:77:0f:f8:0c:af:40:db:51:7d:8a:88:cf:f0:
7c:7d:4c:d0:61:a7:a0:83:52:4d:90:9d:c5:df:74:fd:cb:4b:
99:7e:8e:74:9f:19:48:3f:34:93:b4:e7:d9:43:79:19:81:bb:
9a:30:2f:bd:7f:01:d2:c3:e4:81:3a:33:0e:87:61:b4:a4:63:
f7:d1:0c:95:0b:cd:a7:99:c3:f7:d9:72:34:db:cc:a3:49:3e:
4e:b6:2f:f7:89:dd:37:59:b1:f3:79:64:f7:27:37:d8:89:9c:
bc:46:72:96:95:9c:03:01:2a:31:0f:cc:67:27:fd:d3:0f:8a:
0e:7e:7f:06:88:13:1c:2f:a9:70:c1:b7:fd:29:f3:cf:1f:2d:
4f:45:6e:27:6e:3e:ff:a6:ae:31:77:33:c0:53:ef:79:c3:2f:
57:d1:f9:55:95:7f:a7:2c:a9:43:45:96:fb:de:de:53:a6:cf:
8e:c3:db:ef:1e:fc:55:16:73:5f:89:10:0f:e9:50:d6:78:5b:
be:ce:8e:13:bc:bf:26:c3:a2:3e:b4:c3:07:11:77:34:0c:e4:
52:7d:81:af:e8:4d:64:c5:4e:72:10:b6:3f:8c:4e:35:4f:37:
08:48:55:d6:f0:ac:fa:57:40:f8:82:47:7b:19:bc:51:45:81:
84:bb:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:18 2025 by rpki-client