Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: 61eE6dxRlIfHHgW9n6tRToZPpr4jOhVygfhsDT10kmQ=
Subject key identifier: 7A:25:3A:49:FA:4C:16:BE:85:44:FD:3F:F0:B5:A6:40:3A:F0:31:66
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 019A28C30C7F99057A86E9947472E587BDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0DD9
Signing time: Tue 28 Oct 2025 03:01:02 +0000
Manifest this update: Tue 28 Oct 2025 03:01:02 +0000
Manifest next update: Wed 29 Oct 2025 03:01:02 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: BEJH6zs0tcnqZxNW6dylF7r51bjYAvCBXUtSEvKnZFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c3:0c:7f:99:05:7a:86:e9:94:74:72:e5:87:bd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Oct 28 03:01:02 2025 GMT
Not After : Oct 29 03:01:02 2025 GMT
Subject: CN=7a253a49fa4c16be8544fd3ff0b5a6403af03166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:a4:f8:be:66:80:12:24:61:ee:a2:7f:b6:
8e:00:ed:9e:e9:23:66:e1:ff:7e:f1:a0:a0:9a:d1:
de:ca:73:87:4e:14:45:73:be:f0:4c:df:99:de:b2:
f1:25:ce:cf:19:cf:dc:14:ef:10:ab:7c:28:73:9b:
43:5b:d7:37:ff:f2:17:d4:62:4b:b7:b7:5d:e8:7e:
94:3d:df:a1:5a:e8:4d:31:62:80:bb:e6:57:47:16:
b9:f7:2b:ed:0a:d0:fb:04:c8:bf:f2:13:2c:f7:35:
4e:53:8b:33:8b:13:ee:6b:0d:ba:9e:9d:a3:a8:df:
bb:08:a7:9c:ae:68:73:b9:fe:be:ca:e8:e7:9d:0d:
81:a9:8e:1e:2b:b5:82:fe:99:5f:a4:d4:67:e3:8c:
e3:76:ce:4b:61:28:e0:cc:b2:b8:a0:c2:76:94:e0:
2e:ea:95:24:ff:c5:e5:23:9d:07:f9:a4:8d:97:d2:
6c:7e:40:40:da:b6:7a:66:c5:33:3e:b9:0c:d1:39:
a5:68:ed:68:04:42:e4:89:4b:57:fb:e1:34:48:1f:
61:78:a9:db:c2:43:ad:52:74:47:10:e3:ad:82:8a:
a7:20:a4:7c:a2:92:8a:96:68:33:d2:e1:e4:c0:4c:
6f:20:1e:c8:fd:cc:bf:2c:48:67:88:e0:75:31:d9:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:25:3A:49:FA:4C:16:BE:85:44:FD:3F:F0:B5:A6:40:3A:F0:31:66
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5a:f2:de:b7:5d:f7:66:0b:0a:4f:1e:45:80:b9:c2:aa:ee:
6e:e6:c4:b3:7c:03:c9:cb:e1:b4:28:ae:8c:49:41:f3:ff:c1:
39:c4:bf:d4:6e:c9:35:f8:dc:d4:52:c2:6f:5f:07:a7:e9:c8:
c2:09:42:fe:84:ab:24:17:29:08:dc:ab:d6:2d:91:91:ab:57:
5a:66:34:ab:dd:1b:18:7f:46:c1:89:a9:56:c6:38:83:1b:00:
34:61:73:62:f9:4c:6c:8b:18:e4:69:2e:98:6b:3c:36:ec:8f:
90:8f:d3:2a:65:70:21:f7:b9:a7:3b:3a:8a:23:86:97:27:97:
22:cb:b6:39:be:23:fa:a1:5c:9e:74:52:8f:3d:01:86:92:2f:
e9:a6:07:bf:2c:f0:84:73:dc:c2:9d:b6:b0:82:c3:28:87:16:
d0:d8:48:e7:a5:69:d7:fe:16:55:86:93:1d:47:ca:af:0f:8a:
00:28:1d:03:05:59:40:f8:f3:23:47:99:11:d2:9a:9a:66:c0:
7c:c2:59:3d:bf:d1:c0:7c:8e:c3:d5:bb:a0:88:1b:20:dc:87:
6e:0c:0f:d2:ba:24:f9:f3:d6:fb:76:19:c3:7c:4e:ca:40:0c:
45:21:9b:a8:9b:c7:b9:ee:36:8e:e5:d8:b7:57:47:8e:76:ca:
d3:60:4e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoowwx/mQV6humUdHLlh728MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjMzYWVjZDhkNTlhNmE0ZjA1NjkyY2NjNzJlMmI3MTM5
ZTE3Y2MwHhcNMjUxMDI4MDMwMTAyWhcNMjUxMDI5MDMwMTAyWjAzMTEwLwYDVQQD
Eyg3YTI1M2E0OWZhNGMxNmJlODU0NGZkM2ZmMGI1YTY0MDNhZjAzMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaOk+L5mgBIkYe6if7aOAO2e6SNm
4f9+8aCgmtHeynOHThRFc77wTN+Z3rLxJc7PGc/cFO8Qq3woc5tDW9c3//IX1GJL
t7dd6H6UPd+hWuhNMWKAu+ZXRxa59yvtCtD7BMi/8hMs9zVOU4szixPuaw26np2j
qN+7CKecrmhzuf6+yujnnQ2BqY4eK7WC/plfpNRn44zjds5LYSjgzLK4oMJ2lOAu
6pUk/8XlI50H+aSNl9JsfkBA2rZ6ZsUzPrkM0TmlaO1oBELkiUtX++E0SB9heKnb
wkOtUnRHEOOtgoqnIKR8opKKlmgz0uHkwExvIB7I/cy/LEhniOB1Mdm5KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHolOkn6TBa+hUT9P/C1pkA68DFmMB8GA1UdIwQY
MBaAFKHzOuzY1ZpqTwVpLMxy4rcTnhfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4Yjgt
MzlkNjNlOWU1ODZiLzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4YjgtMzlkNjNlOWU1ODZi
LzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVry3rdd
92YLCk8eRYC5wqrububEs3wDycvhtCiujElB8//BOcS/1G7JNfjc1FLCb18Hp+nI
wglC/oSrJBcpCNyr1i2RkatXWmY0q90bGH9GwYmpVsY4gxsANGFzYvlMbIsY5Gku
mGs8NuyPkI/TKmVwIfe5pzs6iiOGlyeXIsu2Ob4j+qFcnnRSjz0BhpIv6aYHvyzw
hHPcwp22sILDKIcW0NhI56Vp1/4WVYaTHUfKrw+KACgdAwVZQPjzI0eZEdKammbA
fMJZPb/RwHyOw9W7oIgbINyHbgwP0rok+fPW+3YZw3xOykAMRSGbqJvHue42juXY
t1dHjnbK02BOEw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:55:40 2025 by rpki-client