Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File: Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier: k3+wtVHVjTmRAHfpVUAojnLATyNjcTRutktLaHHdzs8=
Subject key identifier: 32:17:54:42:C9:B2:6A:D4:6E:6D:BE:31:F6:EE:B2:48:2A:50:E1:83
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer: /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial: 019A5375D6E665AC3218AF2AD0CB9422C921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number: 0FBC
Signing time: Wed 05 Nov 2025 10:00:22 +0000
Manifest this update: Wed 05 Nov 2025 10:00:22 +0000
Manifest next update: Thu 06 Nov 2025 10:00:22 +0000
Files and hashes: 1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: 8alsGWjtoTuj3r9zVzHEGOy+FHQ81/0qa4/C8vCHNb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d6:e6:65:ac:32:18:af:2a:d0:cb:94:22:c9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Validity
Not Before: Nov 5 10:00:22 2025 GMT
Not After : Nov 6 10:00:22 2025 GMT
Subject: CN=32175442c9b26ad46e6dbe31f6eeb2482a50e183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:1f:3e:0f:11:e3:df:8a:76:82:cd:4e:db:
3f:ab:60:d3:02:77:d5:02:2f:69:df:06:29:ba:5c:
7d:98:e5:ce:b9:3a:1a:10:c2:55:37:24:84:e5:bd:
62:78:15:10:ae:90:69:76:af:4f:3b:d3:3f:47:b4:
e5:65:e9:7e:72:11:34:a4:b1:61:f9:08:19:67:91:
db:84:69:1b:4b:10:4a:97:90:d7:99:3d:a8:c8:29:
69:0f:21:92:66:4a:9f:82:dc:e8:e0:e4:6b:53:56:
c5:3c:f6:5f:dc:f4:b0:a5:e5:59:db:60:90:1b:d4:
2c:f2:31:72:06:e9:d9:63:28:5e:6a:c8:e6:03:4f:
d6:76:93:0a:7e:d9:7e:1e:8e:34:c8:5e:c4:9e:93:
73:d4:29:38:2b:93:bd:f5:fc:33:5c:6f:0b:8a:ee:
3f:ce:cd:cc:19:9e:e3:80:83:e6:c0:9e:65:e6:b1:
e6:01:f1:a1:c7:92:ea:80:b2:9a:e6:bf:53:c0:1a:
e2:08:5d:ad:39:b9:ea:41:16:48:62:52:b4:2b:88:
86:65:69:ae:9e:b0:73:28:0a:9f:6e:f3:ba:92:44:
ea:b3:42:da:ee:8c:9b:23:a6:68:89:d1:36:e2:8e:
6a:24:92:e3:e8:5e:3a:bf:6a:72:e7:d6:e9:43:8c:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:54:42:C9:B2:6A:D4:6E:6D:BE:31:F6:EE:B2:48:2A:50:E1:83
X509v3 Authority Key Identifier:
keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:7f:48:12:cd:c2:73:38:88:c3:41:fe:e4:aa:aa:55:7e:
a2:b9:a9:81:4a:c9:48:fd:bc:f8:39:cb:6e:71:f5:16:0d:2a:
36:c4:11:ef:3f:9a:5b:f4:3e:d4:28:29:25:b9:cc:59:2b:ee:
52:46:0c:e0:1b:5c:ef:c5:b2:4a:d2:98:03:80:5b:77:a9:80:
84:58:8b:1a:21:91:00:8c:5a:c2:35:cd:da:da:de:6f:75:7e:
28:2a:7b:17:54:cb:94:e4:68:1f:a0:44:bc:a9:89:b1:5d:06:
5f:89:b4:c7:66:f2:8c:2a:5b:07:5f:8a:d0:37:1a:61:28:59:
21:6c:60:9c:8a:1b:97:13:9f:f8:6d:c2:cd:bc:dc:69:41:17:
8b:55:d5:ff:0c:78:1e:ed:f3:18:32:b4:92:e9:e6:ef:f9:c9:
86:aa:10:46:ef:0b:97:54:b4:36:d4:fd:43:e2:ac:bf:73:ba:
16:9f:da:9c:ad:7a:bf:07:44:7c:a9:8f:5f:96:8e:c0:e4:ca:
32:f9:24:c5:79:35:59:2f:df:db:a9:4b:76:51:44:b4:0f:06:
ae:c8:03:48:40:eb:f5:c9:e5:17:fb:13:10:ed:62:bb:67:44:
d8:77:21:18:f5:8b:4d:4a:85:73:df:1f:d6:33:b8:bd:6a:8b:
6c:d3:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:23 2025 by rpki-client