Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: urDgpnuO3NVJP+D5BFxZnFcLLjrKGl5EMmm+hJK8i+A=
Subject key identifier: 07:6E:D7:8B:E3:A3:14:D2:CA:F6:D6:D5:73:2C:99:FB:C0:60:C2:EC
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 0197718844DA4867BDEA209367B3A69C7E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0C71
Signing time: Sun 15 Jun 2025 03:00:45 +0000
Manifest this update: Sun 15 Jun 2025 03:00:45 +0000
Manifest next update: Mon 16 Jun 2025 03:00:45 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: +YYVNXQzCPEAsRBbjHPPbCsxyqxhHjbYHfsLZ+mX41g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:44:da:48:67:bd:ea:20:93:67:b3:a6:9c:7e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Jun 15 03:00:45 2025 GMT
Not After : Jun 16 03:00:45 2025 GMT
Subject: CN=076ed78be3a314d2caf6d6d5732c99fbc060c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:21:88:53:68:57:c8:a4:06:b1:15:24:f8:
03:26:67:b1:f4:36:d5:ef:04:39:1c:b0:bf:64:d1:
cb:c9:6b:c0:69:7d:27:e9:d2:1a:d3:bb:27:c6:14:
fc:7c:06:7e:90:c2:48:44:5e:4e:f3:2a:62:d6:ee:
20:b0:48:b4:6c:29:e7:eb:c9:51:03:d8:18:ce:dd:
1c:fb:5e:77:ec:ea:92:79:49:da:0d:11:7b:6c:f2:
2b:9d:f9:eb:d9:73:7a:12:4f:e8:8b:8d:36:33:94:
88:f4:f0:1f:73:16:9f:16:16:97:bf:f7:eb:b5:cf:
8e:61:ec:82:ae:e8:c4:81:ae:23:7c:d3:14:9f:06:
90:62:6a:cd:8d:f9:f6:6d:05:bc:df:b2:33:9f:48:
15:5e:95:59:95:35:55:d9:18:f2:c2:fd:62:c0:47:
73:e3:16:0a:ae:ef:0d:d5:5b:10:26:e7:65:ca:2e:
2d:64:df:5f:90:54:92:74:74:19:59:77:87:1a:1d:
ae:6d:d0:7e:ea:84:5a:e4:af:61:ae:76:cd:c0:d0:
dc:62:6a:e1:e9:90:2c:ff:d8:bf:18:8b:e1:eb:66:
08:0a:56:fc:ba:e1:ac:95:9c:4e:59:93:db:d0:ca:
fd:c5:70:7d:b1:7c:90:cf:86:50:e3:ca:2b:17:95:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6E:D7:8B:E3:A3:14:D2:CA:F6:D6:D5:73:2C:99:FB:C0:60:C2:EC
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b3:33:56:83:c8:0f:50:6f:a9:b1:e6:aa:0f:8b:4c:2b:c5:
71:ea:bb:06:c7:91:e3:77:fd:bc:aa:eb:a8:10:40:35:43:43:
35:94:f6:35:d3:7a:b7:a8:8e:18:8e:14:96:09:ad:ad:11:18:
e5:65:a4:71:d4:79:26:de:c5:45:dd:cc:e6:3d:b6:a5:3d:32:
30:0c:98:09:ae:f0:27:5e:82:30:70:a2:18:09:d6:c0:b7:eb:
dc:5a:10:d4:80:19:8a:b6:56:0b:bb:37:88:46:14:41:29:30:
64:b0:a9:dc:88:4e:77:d8:2c:29:00:4b:9d:c1:6d:d3:55:51:
18:ac:70:76:d4:f8:29:b6:1e:e5:ee:9b:4f:ee:bf:ef:42:03:
d0:38:2f:26:19:66:a5:3f:4a:10:91:65:d2:25:19:6e:c8:4d:
08:9f:32:b6:84:0b:7e:07:ec:64:12:4a:01:c3:20:a6:44:f1:
3b:0c:d7:99:73:78:2e:73:09:8f:9c:d3:d1:53:ba:d4:0b:e6:
0d:6a:52:58:b7:6c:42:6d:f8:b2:88:8e:86:28:9e:4d:93:fd:
90:10:6e:ae:c8:93:95:42:97:86:ea:ac:a6:32:57:99:a5:f2:
ac:05:c7:92:d2:c8:0f:31:ba:c2:3a:6b:33:56:fa:13:69:56:
7e:69:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:00 2025 by rpki-client