Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier: vaiYnwmaLBdazqPcvIHqaxEb+8yIVb98oAHwe+WXD7k=
Subject key identifier: 27:8F:7F:6E:7A:CD:C9:65:D5:12:C2:75:18:5F:7B:F4:B0:3A:7C:5F
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial: 01976772D1EB2B6017AC0616292B293F198F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number: 0A04
Signing time: Fri 13 Jun 2025 04:01:07 +0000
Manifest this update: Fri 13 Jun 2025 04:01:07 +0000
Manifest next update: Sat 14 Jun 2025 04:01:07 +0000
Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: lu63cvZ9VFViRLekZ55n+4F/hsMLT3YOCojLTyc0w1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:d1:eb:2b:60:17:ac:06:16:29:2b:29:3f:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Validity
Not Before: Jun 13 04:01:07 2025 GMT
Not After : Jun 14 04:01:07 2025 GMT
Subject: CN=278f7f6e7acdc965d512c275185f7bf4b03a7c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:d4:31:90:a1:59:c0:76:27:d3:f1:20:8b:
58:68:50:6a:fc:cf:12:2d:f3:a2:e3:2e:d6:9b:31:
90:44:6b:5d:4f:bb:9e:86:d2:be:46:1b:b0:0d:77:
fb:96:e6:92:ed:65:80:27:a7:e4:68:88:97:7d:a9:
71:67:e0:cf:3d:73:f8:36:2d:c6:6a:39:66:5d:3b:
bc:b4:28:02:5d:35:46:cd:56:e4:bf:77:4c:e3:9f:
cd:3e:10:0e:09:2a:24:e4:94:83:cf:cf:dd:f7:6e:
81:c5:8a:f4:ef:fc:c1:54:70:41:8c:7b:69:28:b2:
7b:50:2f:0f:76:34:5e:6f:53:b8:23:43:df:11:92:
a2:a8:2a:31:4b:29:6c:4f:35:2b:10:74:6e:86:09:
6a:f1:d5:85:27:37:97:88:f3:d3:f9:c7:a2:33:a5:
51:3a:dc:5c:2e:52:d7:85:df:b2:ce:86:ca:d7:82:
82:60:f0:7c:26:6b:5d:73:4d:0e:6e:b0:a4:59:8d:
05:03:c7:f2:53:d9:3f:9a:92:3f:41:3d:3b:da:0a:
5a:95:7e:d6:33:97:c1:89:d5:5c:9d:bd:71:18:3e:
85:c7:a8:34:ca:8d:cd:29:f1:1c:75:02:1b:c0:75:
08:16:9f:ed:17:0c:76:70:0e:3a:e0:58:c0:53:e0:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8F:7F:6E:7A:CD:C9:65:D5:12:C2:75:18:5F:7B:F4:B0:3A:7C:5F
X509v3 Authority Key Identifier:
keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2d:d7:35:71:48:5e:bc:36:07:82:73:c1:98:34:d5:d1:66:
9a:00:86:5d:05:31:61:11:1c:97:49:7e:c4:2a:03:23:06:ec:
8f:ac:68:4b:8e:78:87:9d:11:04:84:ad:9a:89:84:20:e9:12:
f1:80:6e:11:2f:d6:eb:bd:0f:ab:6a:6a:ad:b6:94:0c:9b:79:
55:14:a3:36:b8:fa:c4:c8:9d:74:6a:f5:e8:03:65:f8:e2:9e:
7b:96:9a:fa:cc:19:a8:88:c7:29:10:f6:6b:39:7b:4e:40:10:
bc:12:e5:dd:78:31:75:cc:41:9e:c6:df:8d:f1:2d:13:99:ed:
f5:3e:1f:0c:de:93:92:9f:c9:ce:1a:c1:ec:c3:69:5e:48:26:
01:54:87:03:49:a8:1c:9c:10:6c:1d:08:17:f4:a0:94:db:07:
89:8d:cc:35:f4:d0:38:50:b6:5b:f7:0a:a9:b8:51:74:65:6e:
9e:7d:ba:a7:5d:7c:81:a7:32:02:3e:b0:ee:9f:06:9d:83:af:
04:76:3e:11:96:81:6d:c3:ae:66:bd:58:d6:de:fc:44:68:b6:
9b:9e:63:91:96:76:86:e1:7e:06:9d:a1:ef:14:e1:23:b4:ce:
31:df:68:34:06:3c:57:bc:ab:b8:79:36:7a:d0:89:ff:aa:49:
06:24:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:34:19 2025 by rpki-client