Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: 9sgEi1tDUO7HkZ5ZnNXhlC/qeotpTprZgfqCdF1R10E=
Subject key identifier: 7C:B4:EE:6C:D4:F4:B6:16:1F:DB:83:DD:6F:9E:03:66:B3:CE:44:CC
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 019881D596D1AB8B6E47E8F51D2F5A12315B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0CFE
Signing time: Thu 07 Aug 2025 00:01:55 +0000
Manifest this update: Thu 07 Aug 2025 00:01:55 +0000
Manifest next update: Fri 08 Aug 2025 00:01:55 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: hY8W4qweWo3xVF/Hil7U+vis3rO7xgVGXAO8MubJ7rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:96:d1:ab:8b:6e:47:e8:f5:1d:2f:5a:12:31:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Aug 7 00:01:55 2025 GMT
Not After : Aug 8 00:01:55 2025 GMT
Subject: CN=7cb4ee6cd4f4b6161fdb83dd6f9e0366b3ce44cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:b6:a5:80:3b:df:bf:7f:73:6e:f8:78:de:
5c:c9:33:f4:79:68:df:b4:75:bb:81:c5:3c:2b:97:
ac:0c:af:4e:9a:ef:a4:c6:84:db:5c:51:d8:cb:c5:
ac:51:b1:f4:da:01:d0:3b:20:b3:5a:e8:ff:bd:68:
04:9f:23:f0:f5:8f:1e:6c:f6:e8:70:2c:4c:eb:e7:
5b:1e:54:62:54:e2:a8:1e:62:dc:29:99:8b:6a:8f:
35:15:de:a2:db:58:67:02:ce:fd:3f:68:6e:2d:e1:
7e:96:8b:4d:92:d9:26:22:31:8c:bc:0c:bb:01:f9:
2f:d4:46:75:cf:01:07:79:b5:23:2a:33:da:f6:72:
71:4d:b0:b8:4c:af:5c:e6:bc:08:21:89:45:70:5c:
89:83:3f:4d:42:df:96:0e:21:29:01:6d:15:9d:8b:
99:73:c5:65:b3:80:2c:a9:e3:97:2a:ec:0c:ff:26:
5c:45:22:89:7c:aa:1f:fb:fd:b6:05:bf:9e:a7:6e:
07:5d:61:c5:18:de:dc:fa:a9:5d:c5:2a:c1:8a:c1:
11:75:38:ed:0f:0f:2d:75:f2:57:6c:89:65:5e:6a:
7b:e5:d9:ee:fb:cc:cc:94:5c:6b:b6:4d:b2:03:a5:
69:b8:83:9a:8a:14:00:63:6d:ae:43:8f:d3:fb:1a:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:EE:6C:D4:F4:B6:16:1F:DB:83:DD:6F:9E:03:66:B3:CE:44:CC
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0b:d2:10:fe:e6:5a:f4:a6:71:4d:53:eb:35:e8:15:12:31:
2c:2a:7b:39:5d:65:dc:d3:90:c7:3d:bc:59:01:5e:21:7b:b9:
f2:28:0a:9c:0e:a8:bc:f7:2e:a9:55:43:c9:eb:ef:6a:7a:23:
c9:82:7a:61:60:b1:c8:20:d3:7e:42:c7:61:bf:8a:2f:73:3a:
01:6a:d7:07:2f:05:31:c0:69:a2:1b:73:fb:f3:54:36:e1:a6:
ed:ce:ca:4a:ef:96:38:87:79:46:ce:93:7f:1c:dc:02:20:26:
bf:5d:64:b6:fd:8b:ca:47:be:25:95:f1:71:a9:90:6b:41:a3:
25:c4:b2:7a:d4:01:63:79:fc:07:30:75:a3:70:bc:f5:50:b9:
10:95:19:21:2e:21:04:6c:f1:ca:e6:ec:8a:3c:63:20:ea:66:
aa:8d:99:ac:eb:ec:ca:b8:10:f3:cf:93:fe:28:05:bc:aa:fd:
37:57:2e:02:dd:47:ab:e1:d5:76:3b:43:6a:9b:29:c2:8b:14:
1f:6c:e3:89:88:71:56:f1:d6:ec:f7:32:0c:f1:a9:74:6f:97:
bd:58:15:dc:c4:32:b1:65:83:06:ea:e1:88:60:31:5b:7c:50:
12:0e:60:5f:b3:32:d2:ac:66:39:ad:91:bc:83:d9:97:2d:bf:
d5:ee:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:35 2025 by rpki-client