Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
File: ofM7gYxgo6zGnzmgsuDuqrttk-A.mft (raw, json)
Hash identifier: cjMLtGDnzWMQuJ6aBmATTQngvdtjiqRHDLDpzwB+zrM=
Subject key identifier: 2C:D8:D8:F7:C3:7B:56:46:70:44:AF:50:3A:9A:1E:6F:90:4C:C3:9D
Authority key identifier: A1:F3:3B:81:8C:60:A3:AC:C6:9F:39:A0:B2:E0:EE:AA:BB:6D:93:E0
Certificate issuer: /CN=a1f33b818c60a3acc69f39a0b2e0eeaabb6d93e0
Certificate serial: 01988C58438CAE6DD00D9400B8A378576860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
Manifest number: 126A
Signing time: Sat 09 Aug 2025 01:00:51 +0000
Manifest this update: Sat 09 Aug 2025 01:00:51 +0000
Manifest next update: Sun 10 Aug 2025 01:00:51 +0000
Files and hashes: 1: ofM7gYxgo6zGnzmgsuDuqrttk-A.crl (hash: VqEG6PuaR9GygmMMTjv9d7wFZ6EYWoCYaExcMa8dfyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:43:8c:ae:6d:d0:0d:94:00:b8:a3:78:57:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33b818c60a3acc69f39a0b2e0eeaabb6d93e0
Validity
Not Before: Aug 9 01:00:51 2025 GMT
Not After : Aug 10 01:00:51 2025 GMT
Subject: CN=2cd8d8f7c37b56467044af503a9a1e6f904cc39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4c:e0:02:19:e0:89:c8:09:96:c2:be:df:0f:
54:ce:5d:ec:6c:95:ab:c5:92:dc:cb:a0:26:51:cb:
01:21:01:d9:60:00:90:75:ab:f7:a0:33:49:9d:1f:
19:f4:63:45:0b:01:67:26:78:90:88:81:27:0f:68:
6e:bd:d9:6e:2c:19:3c:54:70:22:76:de:06:42:ce:
10:90:3e:bc:ee:80:73:8c:32:d5:83:6e:1b:3b:0f:
0d:3d:7e:5f:35:37:c4:46:4c:33:e2:ed:d9:20:f5:
4e:f0:b1:62:17:07:18:c1:84:f2:20:ea:32:53:22:
cb:b0:96:78:7c:1d:8a:f7:26:7a:31:2b:ab:1e:ca:
bf:03:96:2c:03:78:31:33:fb:69:44:c7:a4:7a:2d:
61:90:44:b5:d5:d6:d3:05:7e:f3:c3:0c:af:82:b9:
78:0c:cd:5e:f9:9a:e6:c0:8e:8a:43:cf:da:7f:c8:
f8:b9:ca:cf:11:72:ac:74:51:7d:69:f6:8e:c5:0f:
6a:bc:8e:0e:2b:37:53:25:9a:f2:35:e1:e1:26:d0:
2a:5b:48:40:67:1b:19:c4:a0:a2:a3:a3:2e:90:ff:
5b:d6:7f:b4:81:5c:cf:f1:71:6c:04:f3:f4:18:26:
31:62:8a:11:73:b4:36:65:1d:de:99:85:c7:e6:ee:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:D8:F7:C3:7B:56:46:70:44:AF:50:3A:9A:1E:6F:90:4C:C3:9D
X509v3 Authority Key Identifier:
keyid:A1:F3:3B:81:8C:60:A3:AC:C6:9F:39:A0:B2:E0:EE:AA:BB:6D:93:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:94:41:ed:e1:68:4f:91:19:3e:9f:16:5c:74:32:44:8c:84:
7c:ca:09:c1:43:f6:d0:bd:83:83:a5:e8:7f:cd:61:02:07:85:
fd:0d:80:a4:94:60:38:2c:5c:c8:2f:a5:8d:81:71:f0:b2:39:
4d:fa:fc:49:55:06:40:be:5c:22:7a:e7:c0:84:d0:cd:81:74:
67:a3:08:90:f0:13:ef:42:13:28:a5:c2:c8:9d:32:03:7b:1a:
9e:d5:61:28:40:7a:db:ef:9a:0a:22:d7:f6:f3:5a:a5:ae:86:
87:3b:9e:a8:f9:80:06:65:c4:1d:60:03:71:96:d0:3e:bb:c4:
12:bb:4f:ce:e3:a6:ae:3e:5b:cb:ee:8b:10:c7:da:a3:12:de:
b2:5c:b9:8e:d8:29:64:48:81:76:93:77:1b:f1:a2:ac:93:9d:
bd:93:11:52:95:28:27:a6:8f:5e:2a:bc:72:7c:61:e2:1d:14:
aa:97:77:ae:c0:96:d2:fe:8e:ed:a6:85:42:29:0a:9b:b5:7b:
17:2b:12:7f:94:fb:67:8b:b5:6f:ed:9e:dc:9d:85:ff:28:81:
82:c7:8d:9d:ce:87:68:52:96:ab:4b:66:a9:98:c8:b8:41:f0:
d4:9c:cc:a2:c1:07:47:20:84:07:0b:5b:01:da:73:cd:5e:8a:
b0:2d:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:27 2025 by rpki-client