Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier: 4G62UZO+mF1hqsvrlDtJtMbS7dkJE7ohfAdhKjUTnzg=
Subject key identifier: 2D:33:9D:AD:E4:F6:29:C2:90:A6:B7:E3:6B:80:A5:F9:87:A6:2E:27
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial: 019A71B7743603BD95667F9F9240B660E6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number: 0B97
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: QtBrtKXzmNaxPaaCloey8WPMqsTXrQZX0xMvbwOhDDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:74:36:03:bd:95:66:7f:9f:92:40:b6:60:e6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=2d339dade4f629c290a6b7e36b80a5f987a62e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:a9:ec:74:94:e2:aa:8d:3f:7f:42:a1:c7:
85:8a:ac:3b:88:73:ce:b0:93:6e:8a:b7:c8:96:40:
b3:96:8e:9c:c6:ba:44:99:5c:79:5f:02:2b:b5:32:
8f:e6:62:c9:71:7f:5b:bd:7e:8d:d3:45:b2:eb:e2:
69:2a:46:33:43:58:9f:34:53:a3:f2:0e:ad:7a:16:
fc:08:8b:ff:45:d2:c0:ba:56:12:68:cb:bd:93:42:
90:4f:09:28:92:1a:aa:a6:eb:61:a9:57:24:c9:e7:
16:1f:9d:1d:fc:03:f6:52:a9:d1:9e:b6:5e:29:62:
a9:6f:a3:5d:d0:cf:47:4e:db:43:1f:df:19:42:8f:
f3:6c:27:8f:59:d1:ff:18:3e:07:f2:e5:54:60:c1:
bf:a2:bf:7a:30:8b:58:53:31:51:59:d6:d1:c1:b5:
d4:e1:ba:87:bd:4e:2f:c3:04:32:3e:6e:6d:07:80:
a6:43:5f:48:a5:e6:da:75:f0:ed:28:0d:7a:ff:e4:
f5:b2:6e:6e:e2:42:fc:5e:34:5a:ca:e4:1c:1a:02:
7f:0e:37:06:f2:a1:a5:3b:54:1b:eb:37:d5:2d:44:
91:aa:80:f1:c9:ac:2e:e8:b0:31:09:58:fd:20:82:
e8:6f:ab:17:1b:a1:d2:d3:b3:15:f3:2d:23:ff:31:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:33:9D:AD:E4:F6:29:C2:90:A6:B7:E3:6B:80:A5:F9:87:A6:2E:27
X509v3 Authority Key Identifier:
keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:52:46:75:38:45:be:8e:56:87:56:69:08:0f:27:58:05:
48:be:2d:b6:2f:80:ab:ec:36:2d:1f:63:8c:26:c1:c4:30:b7:
6e:6e:aa:16:52:50:5e:59:cb:e6:88:cd:c3:f3:b0:19:29:ea:
8f:52:8e:e9:11:a3:97:ab:20:9b:37:18:71:a6:5e:b1:37:9c:
22:bb:c9:d9:00:3d:a6:a4:a7:08:c9:65:85:85:10:3d:4a:3d:
84:43:7f:21:f9:60:90:f2:8a:a6:f3:de:e9:68:3c:a4:c5:e1:
92:af:ed:03:47:45:0e:bb:83:60:ba:ba:06:13:b4:61:c7:c7:
1d:89:98:c2:9c:60:42:03:fa:51:2d:3d:85:03:04:32:72:50:
71:24:60:3d:25:9a:ce:7b:3b:8a:ab:54:4d:aa:88:df:52:c8:
6f:59:26:db:58:a8:7e:e4:4d:9a:98:09:1b:68:42:e3:1a:85:
68:83:57:b0:5e:dd:26:68:85:c8:c6:59:2e:f3:23:15:56:08:
d7:f7:48:ac:72:77:fc:29:83:0b:5a:47:0c:ca:6f:43:c6:f2:
9f:e0:e3:0b:d5:4b:6d:fa:33:7f:3b:6b:28:a5:8b:5f:dc:76:
59:b6:75:7a:96:a7:c5:70:09:b6:da:19:fc:30:fa:cf:79:69:
43:92:5c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:48 2025 by rpki-client