Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
File: OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft (raw, json)
Hash identifier: gzDUTQZbpj2M6mrgAbjzZP3jv5ymS0KzfjaJP8NbRvs=
Subject key identifier: 7B:35:BF:93:76:78:9A:D7:C5:A6:D2:DE:1A:29:06:23:DC:83:AD:1F
Authority key identifier: 39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
Certificate issuer: /CN=39f086ca6211bb95d0643089c7da576fe67c2152
Certificate serial: 0196BC6DD9CC2E754078BCADB239FBF186D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
Manifest number: 0C6F
Signing time: Sat 10 May 2025 23:00:37 +0000
Manifest this update: Sat 10 May 2025 23:00:37 +0000
Manifest next update: Sun 11 May 2025 23:00:37 +0000
Files and hashes: 1: MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa (hash: 9t6kBtgaiu9wCZTnovzIZuJxrTyQ2HBBvSidXlmnqaM=)
2: OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl (hash: ruo7ivxqGo9yxGqXwaDKfWyuH3BrBI0vt3wB54OBd5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:d9:cc:2e:75:40:78:bc:ad:b2:39:fb:f1:86:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f086ca6211bb95d0643089c7da576fe67c2152
Validity
Not Before: May 10 23:00:37 2025 GMT
Not After : May 11 23:00:37 2025 GMT
Subject: CN=7b35bf9376789ad7c5a6d2de1a290623dc83ad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:d8:9e:d6:c5:11:51:47:1b:f4:c2:67:74:
29:85:1c:d9:7d:04:94:fc:43:bd:c7:5e:65:47:04:
f9:ee:7b:06:5d:70:8c:73:34:14:e7:52:dc:ae:85:
2d:a1:40:c5:63:9c:3d:19:f8:a8:2d:33:40:63:d7:
0a:fa:fc:78:ca:55:f5:eb:04:6c:92:f9:75:52:0c:
2b:42:bc:fd:48:05:a8:e0:4e:c0:ee:56:40:7e:29:
d8:e7:72:ad:08:af:c9:dc:69:ae:c1:7b:82:93:91:
ad:70:5d:23:5d:fe:43:56:89:ab:57:63:5a:fb:0a:
81:df:98:01:2b:ed:43:28:24:c3:d7:5c:9f:f6:80:
4d:fe:e0:7b:32:16:72:65:a6:02:42:63:e8:45:a2:
d9:f4:8d:a9:66:8b:73:b1:d9:58:81:ce:64:05:c6:
03:8f:98:be:77:a8:4d:d2:68:fe:04:45:1f:cc:a4:
fa:dc:7b:99:09:13:b5:17:e5:d4:59:b8:22:31:df:
02:d7:e8:96:ae:d0:f7:2d:fd:74:45:26:48:d3:92:
34:b0:6a:23:cf:9d:84:58:12:69:f5:db:2a:f6:06:
c1:57:cb:28:e6:1a:d1:82:23:53:c8:f2:b3:bb:d9:
5e:ca:6c:85:b3:3a:49:2a:d8:f8:9d:7c:20:2b:28:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:35:BF:93:76:78:9A:D7:C5:A6:D2:DE:1A:29:06:23:DC:83:AD:1F
X509v3 Authority Key Identifier:
keyid:39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c0:17:37:86:a5:64:a8:de:34:ef:13:7e:1b:16:c3:ea:ce:
ac:b9:63:63:1d:ea:96:2f:06:89:3a:ec:92:bc:65:a4:a1:d7:
08:d9:32:90:ac:7f:30:29:1a:c3:cd:fe:c7:75:39:df:5e:80:
d5:d0:15:d3:81:2b:31:aa:62:65:2b:6b:d8:84:d6:6e:08:01:
d4:b7:d8:96:99:c5:13:d4:f7:d3:f3:56:59:2d:47:9b:09:1a:
24:06:3e:d3:52:8a:24:70:3d:86:23:e5:46:5c:71:a8:e2:95:
e7:58:bd:53:6f:b3:17:68:27:83:c7:5c:d0:5f:d0:44:4d:a1:
6b:97:7b:1c:42:a6:d3:38:fb:6b:4e:47:fe:4d:b7:c9:87:25:
91:01:1c:a8:5d:49:d2:28:aa:16:3c:5d:ba:b7:0a:2e:30:2f:
59:74:a5:96:cc:5c:6c:e3:49:00:e0:29:b2:f2:af:e4:94:1b:
76:c7:b1:32:1e:f2:f4:7b:5d:94:86:98:9f:26:f1:bd:c4:30:
ec:e4:38:f1:8f:2d:d3:8d:9c:36:11:6e:a7:2f:79:f6:f2:cc:
d7:bc:f4:62:af:79:76:d7:83:4e:47:5d:fb:89:19:3b:0a:22:
e4:b1:fc:19:83:c8:5f:1f:cc:58:0f:fb:e7:cf:5a:5f:d9:06:
2f:a8:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:56:40 2025 by rpki-client