Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: EXMNRITb3jX9aDpyIW4jy+6NA/rKETEEIU7UO17N4sA=
Subject key identifier: 68:A4:10:3B:41:EB:F6:C6:C6:05:E2:47:21:A7:07:84:2C:01:1A:A5
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 0199FA6A7C765369C7ACAC0786B8AE9D8CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0DC1
Signing time: Sun 19 Oct 2025 03:01:46 +0000
Manifest this update: Sun 19 Oct 2025 03:01:46 +0000
Manifest next update: Mon 20 Oct 2025 03:01:46 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: 9VV0scl8BQeNVDLC9b28s4t1Mt+rZdJipBzHzovjPSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:7c:76:53:69:c7:ac:ac:07:86:b8:ae:9d:8c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Oct 19 03:01:46 2025 GMT
Not After : Oct 20 03:01:46 2025 GMT
Subject: CN=68a4103b41ebf6c6c605e24721a707842c011aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:64:75:da:6b:04:84:7f:96:3d:d0:94:5a:
b2:7f:4b:f1:52:19:11:2a:81:f2:c6:68:40:48:18:
77:42:c9:f4:69:3c:d6:15:52:28:d3:2f:f5:99:94:
34:65:c0:70:1b:25:6f:35:60:e1:2a:55:cc:d9:15:
a6:e3:58:db:64:96:85:48:36:6c:50:58:33:1c:54:
c6:18:d0:59:81:f1:d2:c3:c2:a0:ca:ac:10:e1:f5:
68:40:03:b3:d9:70:48:f9:da:d8:30:88:58:80:cc:
36:b5:9f:fc:a6:92:c3:7c:f9:bc:c6:f8:0c:f4:f0:
99:21:bc:86:2e:2b:8a:3d:a1:ae:43:39:cb:42:d0:
32:36:d9:42:ef:03:4d:e4:ec:a0:65:ff:85:ea:a4:
6b:a5:7e:ed:96:98:eb:29:6e:02:14:cd:4b:bf:28:
b0:e4:da:56:bd:fa:7a:4d:9c:5f:e2:36:22:57:6b:
5d:73:f2:2f:ab:b1:53:c1:6c:17:b6:71:69:4a:3c:
38:43:36:6e:ee:8b:96:62:a4:d6:61:68:75:3c:55:
ab:93:51:59:75:49:b1:2b:e5:9c:7a:3a:46:20:8a:
14:dc:c1:69:f0:c4:77:a6:92:98:f8:99:7c:e4:92:
10:67:fd:c5:da:63:1f:0b:4b:c2:ca:2f:c1:1d:35:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A4:10:3B:41:EB:F6:C6:C6:05:E2:47:21:A7:07:84:2C:01:1A:A5
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a4:9a:43:a1:4d:b1:6d:b2:22:d6:b0:07:6b:fc:1f:9b:f6:
58:e2:64:d7:1d:0a:29:dc:f6:eb:3e:5b:07:23:17:5c:3b:a8:
16:24:57:67:33:79:2c:41:de:6c:3b:7c:76:85:7f:60:6d:29:
17:1c:c4:99:e4:60:ad:e1:74:cd:b2:26:33:01:4e:a9:21:53:
84:a9:af:d9:6a:50:70:fa:88:79:2b:37:83:1a:f0:89:52:98:
01:05:99:49:e5:0e:06:de:a6:b3:b6:40:ae:29:5e:cb:2e:fc:
f2:b2:e8:95:23:07:d1:79:a8:9c:de:6a:d0:f0:2d:16:71:3e:
bc:d0:ac:bd:c7:b2:e8:90:73:25:91:a4:e2:43:34:69:58:47:
d7:95:e1:12:29:aa:80:52:5c:53:47:8f:7e:9a:70:45:12:55:
b2:73:79:4a:c2:9b:1e:c9:d6:de:94:a0:c1:35:de:f9:e3:b2:
3c:a1:86:bf:95:32:b6:af:77:2d:45:26:36:30:a6:8b:86:f0:
31:c2:9b:9a:02:ae:70:a0:90:bc:fc:9c:e5:cb:43:fb:3b:71:
0b:de:fe:8d:a1:4c:10:9d:76:74:90:91:57:50:ba:a4:08:2c:
04:12:e9:72:e9:fc:28:cc:3c:b2:08:db:aa:15:5d:32:30:f9:
5a:6c:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:34 2025 by rpki-client