Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier: YM8zGjtXxtlnL2xMyL6il8J4MdqYX4PTrBvSQafswgc=
Subject key identifier: 85:CD:3E:C7:7D:C9:B5:B4:22:00:CE:8A:A7:3F:B7:7B:27:5A:A1:A7
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial: 019921B17DC7326EE39A3387527992C03A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number: 0AE9
Signing time: Sun 07 Sep 2025 01:01:44 +0000
Manifest this update: Sun 07 Sep 2025 01:01:44 +0000
Manifest next update: Mon 08 Sep 2025 01:01:44 +0000
Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: +EoGcXQF31sNHY2w79/LnlFG0bcUBb7gqBL0XIxZZuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:7d:c7:32:6e:e3:9a:33:87:52:79:92:c0:3a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Validity
Not Before: Sep 7 01:01:44 2025 GMT
Not After : Sep 8 01:01:44 2025 GMT
Subject: CN=85cd3ec77dc9b5b42200ce8aa73fb77b275aa1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:36:00:60:9a:3f:6d:eb:ae:98:67:5d:1d:
ff:dc:a1:24:0e:19:e4:2d:32:00:ef:d7:90:62:21:
db:df:0b:b4:f7:9f:bf:3a:b1:47:fe:3c:03:43:8e:
27:2e:b3:fb:bc:c6:39:ad:0c:47:d0:ed:e9:a2:71:
88:8e:92:a9:ee:d5:02:14:f4:7f:8e:09:a4:f7:eb:
57:23:a7:6b:0a:42:45:36:eb:5f:e7:90:77:87:82:
8e:e9:e5:7a:9d:b0:7e:93:a0:9f:9c:09:49:4f:01:
88:e3:cf:92:b8:cf:40:19:21:33:55:e9:24:89:b7:
5d:6a:d3:ce:c9:d5:d1:d8:7c:e2:0f:ed:66:46:71:
17:66:b6:6a:e0:34:9d:db:01:a6:0e:06:ff:84:98:
b4:e6:16:3d:98:ef:5c:ea:d5:f7:81:c2:a6:80:90:
b2:3f:2b:a2:ef:09:bf:e1:76:ad:51:bf:13:8f:e0:
67:59:6d:2f:84:ee:1a:d3:90:9c:60:2c:51:6a:4d:
3a:93:37:b8:8b:2d:ac:02:9a:7b:5a:d4:f2:0f:47:
a0:4d:2c:23:01:9a:98:95:c4:9f:f9:ef:df:be:eb:
7d:0f:17:57:81:78:35:02:d7:ad:5f:99:09:f0:20:
24:37:b6:bd:86:f4:6d:22:6a:43:43:6d:a0:bd:62:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CD:3E:C7:7D:C9:B5:B4:22:00:CE:8A:A7:3F:B7:7B:27:5A:A1:A7
X509v3 Authority Key Identifier:
keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8d:1b:5a:18:b4:46:ce:96:72:26:1f:4a:af:bf:98:3b:fd:
98:c7:96:c9:5d:cd:70:57:d2:02:22:dc:d7:34:c2:f9:62:c2:
27:12:1e:b2:d8:7f:95:35:ba:87:e2:c5:28:c9:42:83:ed:99:
ca:13:02:c1:1f:9a:1b:05:04:a3:f0:47:9a:9f:3f:de:e6:f1:
62:8a:eb:42:2b:df:cb:d1:05:72:42:e8:1a:d8:09:4a:a3:7b:
b9:95:2e:80:35:2e:e2:c8:72:c8:c4:74:39:f4:38:9d:33:15:
79:d6:e2:9e:f3:ee:b5:b2:42:ba:81:e3:c2:d9:0e:5e:37:c9:
34:bc:bb:f8:e2:04:05:1a:81:65:49:5a:02:b1:8e:a6:81:fd:
74:01:64:db:ac:91:7f:e5:d9:cc:bb:d1:3b:e6:22:70:6c:34:
a0:ff:f0:ea:ef:db:f1:b7:e0:51:99:6c:4a:74:98:65:66:2e:
0d:0f:50:84:49:e9:c1:93:99:69:4b:9c:29:91:ac:39:43:d1:
7d:35:a7:dd:f1:2c:26:df:2e:d6:c5:9e:6d:17:6d:62:56:81:
f6:3b:69:99:c9:c5:79:dc:33:5b:a6:02:fa:e6:7e:e9:6d:7f:
5e:b1:ab:cf:b4:09:f5:3b:ab:28:8c:2c:da:8b:9b:ab:5b:6f:
77:5f:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:22 2025 by rpki-client