Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier: n9XiLD9bouokGx3lQWx+fZbXxANnxTmQ4wE1vQ3xrKU=
Subject key identifier: 88:9B:CA:8C:9B:39:A2:98:D6:33:39:9F:F1:49:81:2C:BF:4E:F4:9E
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial: 01975611175237FF5478A15E014C23DE7093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number: 09FB
Signing time: Mon 09 Jun 2025 19:00:50 +0000
Manifest this update: Mon 09 Jun 2025 19:00:50 +0000
Manifest next update: Tue 10 Jun 2025 19:00:50 +0000
Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: iWEKtaO5zlH1kzgBHnxO4Sl6ZiBTt41TDM2ce3/M9Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:17:52:37:ff:54:78:a1:5e:01:4c:23:de:70:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Validity
Not Before: Jun 9 19:00:50 2025 GMT
Not After : Jun 10 19:00:50 2025 GMT
Subject: CN=889bca8c9b39a298d633399ff149812cbf4ef49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:07:35:93:aa:00:2f:04:b7:f3:15:d7:52:
f5:d7:51:f1:eb:f5:3a:8d:4f:e5:a4:40:6f:cf:48:
d2:20:f4:d8:9f:8c:91:52:db:a7:78:c2:9a:54:0d:
bd:1e:6e:23:7d:5e:86:f1:64:8b:f1:11:da:71:df:
5b:02:92:5d:21:c9:11:4e:d0:91:d4:99:b7:eb:33:
2c:2d:6b:eb:2a:38:1e:3a:31:e5:25:5d:98:aa:f7:
cd:07:12:ab:0e:2d:8f:a8:96:4d:a2:3e:65:85:46:
2f:3b:85:70:ed:b1:3d:31:ee:7e:8f:8e:40:7c:34:
f0:2c:0f:ba:53:36:6e:24:30:ac:00:25:3f:d8:64:
b0:42:b9:9c:62:df:41:bb:4e:1b:cf:97:0f:b9:9c:
ea:8f:30:4b:9d:e7:fb:b3:a2:97:f7:79:58:e1:d9:
23:b3:77:42:c4:ee:9f:07:60:9e:28:b1:62:6d:ae:
77:99:8f:ae:be:06:d2:9d:8e:c9:b8:3c:56:47:a1:
73:d5:f7:ce:b3:76:fc:d3:12:2d:3f:43:84:f5:8b:
d4:94:e2:ca:5f:54:fb:ff:f4:8b:a3:dc:ca:68:6f:
fc:51:f7:36:69:78:3c:96:cd:39:07:72:0f:c1:35:
e4:11:30:dd:7f:28:87:21:98:84:7c:ee:df:ea:e8:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9B:CA:8C:9B:39:A2:98:D6:33:39:9F:F1:49:81:2C:BF:4E:F4:9E
X509v3 Authority Key Identifier:
keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e7:aa:2d:96:25:cf:27:d7:f6:27:e3:1f:4b:cf:32:99:f4:
9f:2b:3f:2f:f7:5c:e9:ce:ad:1d:bf:ac:eb:40:45:2f:2e:73:
f9:48:0e:6e:e6:99:12:94:4d:1b:67:da:d9:ac:51:5c:21:2b:
64:f1:32:b3:70:af:12:7c:f5:02:cc:ed:61:ba:4c:e8:d1:c0:
88:fe:f0:b9:32:bf:aa:1b:30:d4:89:eb:35:82:2a:d4:ea:be:
7b:e2:3d:e2:ee:b4:54:28:7c:07:10:25:e6:28:db:e2:eb:78:
ac:72:43:4f:a9:e7:52:bf:a3:d5:94:96:65:4a:e6:ed:ad:1b:
b5:9a:55:8f:56:de:eb:5d:e5:29:fa:02:4c:f7:25:87:36:9e:
77:38:af:f5:ed:b5:4b:35:cc:9a:68:c8:76:3f:bf:90:00:13:
c4:49:28:65:5a:20:89:4f:d6:6c:4f:54:2f:7c:21:27:89:4d:
7f:e6:b9:a1:3b:3c:23:36:93:cb:83:46:41:6e:ef:71:b7:95:
7b:16:fd:86:29:a4:5c:89:9d:6f:71:35:88:76:b3:c0:44:52:
56:a2:f8:d8:fa:32:0c:e5:9b:83:67:6d:3b:b3:ba:42:f0:1f:
bd:3c:3e:0c:91:d1:16:82:9d:4e:bb:de:b4:8f:29:d6:41:40:
67:4b:fb:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdWERdSN/9UeKFeAUwj3nCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZmY4ZmMxNmU5MmZiY2MwNzlkODBkNmJlM2Q3ZGVkZjFk
MDY2OGYwHhcNMjUwNjA5MTkwMDUwWhcNMjUwNjEwMTkwMDUwWjAzMTEwLwYDVQQD
Eyg4ODliY2E4YzliMzlhMjk4ZDYzMzM5OWZmMTQ5ODEyY2JmNGVmNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh0HNZOqAC8Et/MV11L111Hx6/U6
jU/lpEBvz0jSIPTYn4yRUtuneMKaVA29Hm4jfV6G8WSL8RHacd9bApJdIckRTtCR
1Jm36zMsLWvrKjgeOjHlJV2YqvfNBxKrDi2PqJZNoj5lhUYvO4Vw7bE9Me5+j45A
fDTwLA+6UzZuJDCsACU/2GSwQrmcYt9Bu04bz5cPuZzqjzBLnef7s6KX93lY4dkj
s3dCxO6fB2CeKLFiba53mY+uvgbSnY7JuDxWR6Fz1ffOs3b80xItP0OE9YvUlOLK
X1T7//SLo9zKaG/8Ufc2aXg8ls05B3IPwTXkETDdfyiHIZiEfO7f6ugvEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIibyoybOaKY1jM5n/FJgSy/TvSeMB8GA1UdIwQY
MBaAFDn/j8FukvvMB52A1r49fe3x0GaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NzkxMzktNTc1MS00N2ZjLTk2YWQt
ZjAxNzA3NTQ4NTRhLzEvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NzkxMzktNTc1MS00N2ZjLTk2YWQtZjAxNzA3NTQ4NTRh
LzEvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeeqLZYl
zyfX9ifjH0vPMpn0nys/L/dc6c6tHb+s60BFLy5z+UgObuaZEpRNG2fa2axRXCEr
ZPEys3CvEnz1AsztYbpM6NHAiP7wuTK/qhsw1InrNYIq1Oq+e+I94u60VCh8BxAl
5ijb4ut4rHJDT6nnUr+j1ZSWZUrm7a0btZpVj1be613lKfoCTPclhzaedziv9e21
SzXMmmjIdj+/kAATxEkoZVogiU/WbE9UL3whJ4lNf+a5oTs8IzaTy4NGQW7vcbeV
exb9himkXImdb3E1iHazwERSVqL42PoyDOWbg2dtO7O6QvAfvTw+DJHRFoKdTrve
tI8p1kFAZ0v7IQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:18:54 2025 by rpki-client