Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File: Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier: eg6Urq/t9qTRczT5ae8YCZRUJ+OKu+eXVJEeIwLgdYQ=
Subject key identifier: F4:CF:7A:51:F7:4E:A7:8C:B3:55:73:A0:A5:91:41:29:66:24:4F:9F
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer: /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial: 019A725C959621DA6A6B3EC32F63D55CFC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number: 0FCC
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: fdWhpyHgyehVuCxQoIlRImR9ZuJ8clfTbuHHoOgXgAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:95:96:21:da:6a:6b:3e:c3:2f:63:d5:5c:fc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=f4cf7a51f74ea78cb35573a0a591412966244f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:9c:64:64:29:45:76:4a:b7:44:4b:4d:20:
92:97:8b:54:58:0c:57:de:e2:92:ec:bd:c0:73:11:
c5:35:fa:55:5c:12:a6:8f:26:d7:59:9a:76:b5:ca:
5d:69:f2:5f:a7:d4:90:79:86:13:c0:f5:46:87:67:
fd:ca:f9:3c:b7:3f:fd:b0:1a:68:80:6d:a3:9f:27:
11:03:72:1f:48:ed:a2:2d:92:f4:41:29:2c:4b:ae:
e6:d6:33:19:ce:f8:cf:d3:6b:5a:92:19:04:0d:72:
de:75:4a:65:e7:ca:fc:de:ec:6a:46:be:bf:4b:b2:
46:94:38:8f:2f:1c:fa:84:c8:f9:f5:8d:ab:e1:00:
6f:cb:22:23:13:3d:d9:8d:b7:2d:04:12:75:30:11:
de:d9:40:18:f2:fa:a8:10:fa:8e:e8:66:cc:39:db:
f3:6a:55:45:fa:0b:50:ce:d6:68:9d:e8:24:46:25:
69:78:dd:c6:47:c7:3c:80:c1:92:e8:3e:13:01:d2:
a2:a2:62:40:7c:4a:06:cf:16:40:29:c9:1d:ad:52:
6e:c8:f7:b6:3a:d5:dd:f9:f6:57:70:2e:44:ba:55:
6e:7d:d7:15:0f:9e:aa:04:2a:91:cc:de:25:e3:05:
56:dc:d1:3b:d3:a9:95:82:32:42:27:a4:70:aa:f3:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:7A:51:F7:4E:A7:8C:B3:55:73:A0:A5:91:41:29:66:24:4F:9F
X509v3 Authority Key Identifier:
keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bc:3c:55:89:af:0e:d5:71:8c:2f:08:07:9a:6d:30:35:0f:
55:6a:58:69:a0:f9:a3:33:96:e4:2d:67:f5:22:c8:8e:55:9a:
7b:cf:c2:1c:76:21:5c:aa:98:b0:f8:47:58:26:06:83:73:1c:
d1:65:95:34:5b:88:ac:fd:89:80:04:93:47:c9:bf:74:12:19:
8f:b0:5b:02:5e:93:7e:48:97:48:40:8a:69:c5:80:eb:a5:92:
69:ff:30:86:9d:2c:0e:e4:87:27:c1:93:52:bc:f3:61:59:02:
5f:36:c3:43:e5:b2:82:40:5d:96:33:d3:6e:80:05:c6:e9:38:
94:99:8a:ce:42:d2:38:1b:87:6d:93:e4:82:80:87:67:49:48:
bb:d3:37:c8:9b:6f:f4:05:21:2f:c5:58:3e:73:14:df:01:34:
14:7c:41:5e:04:e0:16:dd:90:40:31:8b:c9:ce:90:b0:81:31:
5a:d3:e9:82:00:bf:13:99:26:b8:9a:60:c1:cc:b1:a8:b7:61:
99:24:91:6a:2b:91:31:c5:8c:27:1c:87:94:9b:d7:a4:38:5f:
a8:de:6a:f2:2a:95:cf:66:26:e9:e2:c7:ca:ef:b2:d7:db:99:
85:b6:28:1d:4b:f8:4b:ae:a2:de:fa:58:ec:a1:a2:c3:fa:66:
a0:9b:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:09 2025 by rpki-client