Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: c0r07tmxXA9SH+UdOMBN1D1RgTxWoqARdKHKQYzzjDo=
Subject key identifier: 61:B8:16:03:4F:3E:B4:90:AF:5C:53:5F:D5:B7:E3:83:0C:27:FE:61
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 0198D4E0786D23952DD7BDF8016E883710D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0D29
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: Ld7FvUeVDVmN4COr8cUrkFaomHnFOMmkBBXya/9YKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:78:6d:23:95:2d:d7:bd:f8:01:6e:88:37:10:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=61b816034f3eb490af5c535fd5b7e3830c27fe61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:5c:ec:1a:04:10:d0:0e:ff:d9:af:d5:e6:
a2:cb:e0:54:31:c7:a8:72:67:38:65:5d:fc:23:3b:
a0:68:d0:a3:c6:46:ce:b5:85:42:54:48:7a:1e:31:
d7:dc:8b:21:2c:c2:5f:7e:b0:38:09:21:2b:f6:c3:
a4:cd:64:8b:62:f6:cb:d6:5f:ec:0a:35:4d:2e:8c:
83:88:6c:19:7d:68:aa:35:7a:16:d6:a7:e5:3f:f8:
72:b2:cc:93:e3:99:79:9d:dc:f0:c1:40:53:a6:88:
19:3d:54:8e:be:ea:63:a3:d7:96:cd:52:5c:12:9c:
95:0c:ce:a6:07:31:81:41:98:8d:3a:34:12:00:6d:
85:b8:6a:bf:b3:de:c9:67:69:74:95:cf:19:64:22:
73:90:b4:59:90:ef:06:73:ab:79:c0:9a:cb:b2:44:
0f:16:18:f2:9c:44:c0:8d:16:49:a2:53:12:38:9e:
3e:15:97:c2:50:fc:54:2b:bd:1c:3b:22:9f:2d:31:
cc:d5:8d:af:db:11:ec:32:f0:40:fd:ee:7b:c4:2b:
8b:1c:80:8a:b8:41:e3:e6:be:51:44:a2:cc:91:2b:
17:ea:ff:a4:6e:57:a3:5e:af:a8:18:b7:47:e3:4d:
2a:3f:df:ab:ec:c7:e2:8c:73:a8:5e:bb:fb:18:eb:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B8:16:03:4F:3E:B4:90:AF:5C:53:5F:D5:B7:E3:83:0C:27:FE:61
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f4:52:e3:06:e4:50:6c:52:89:b8:67:79:30:66:79:c5:d5:
86:ad:41:8e:36:89:a0:1d:8d:4b:55:b9:9c:67:7c:84:2f:01:
56:43:fe:2f:05:78:20:84:51:d7:8a:71:1a:34:51:6e:fa:4b:
cd:78:c5:62:d5:18:6b:40:bb:d8:4f:1a:59:a6:e9:72:dd:b9:
04:0b:17:1c:ac:da:7b:9f:14:9a:5b:d1:47:29:b1:f6:7e:9a:
71:78:7f:67:43:6b:b3:e3:23:03:1b:df:a9:65:df:0c:29:31:
59:71:96:5e:e5:85:43:10:5c:01:47:4a:ae:a5:b1:a4:b7:71:
84:09:29:4b:04:b5:bc:d7:18:fb:10:f7:53:d3:58:28:5e:b6:
80:7d:16:98:dc:a3:13:16:ed:59:2b:5c:d6:8e:cc:a9:20:dc:
10:f7:c5:75:c1:8e:73:a9:76:f7:03:6b:a1:61:3f:fb:2a:00:
7e:68:3a:3c:39:5b:a6:d9:0b:9a:4e:d6:b9:1a:8e:fb:76:15:
4d:a7:1e:2c:eb:bc:4e:80:71:57:8b:31:bc:94:50:4b:7c:53:
4c:cc:05:17:6f:78:92:39:eb:f8:08:42:4c:ed:c7:0a:0e:73:
61:a3:68:3a:98:e7:41:8d:ef:85:43:df:18:33:96:26:14:9f:
22:4b:28:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4HhtI5Ut1734AW6INxDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjMzYWVjZDhkNTlhNmE0ZjA1NjkyY2NjNzJlMmI3MTM5
ZTE3Y2MwHhcNMjUwODIzMDMwMjE3WhcNMjUwODI0MDMwMjE3WjAzMTEwLwYDVQQD
Eyg2MWI4MTYwMzRmM2ViNDkwYWY1YzUzNWZkNWI3ZTM4MzBjMjdmZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAlc7BoEENAO/9mv1eaiy+BUMceo
cmc4ZV38IzugaNCjxkbOtYVCVEh6HjHX3IshLMJffrA4CSEr9sOkzWSLYvbL1l/s
CjVNLoyDiGwZfWiqNXoW1qflP/hyssyT45l5ndzwwUBTpogZPVSOvupjo9eWzVJc
EpyVDM6mBzGBQZiNOjQSAG2FuGq/s97JZ2l0lc8ZZCJzkLRZkO8Gc6t5wJrLskQP
FhjynETAjRZJolMSOJ4+FZfCUPxUK70cOyKfLTHM1Y2v2xHsMvBA/e57xCuLHICK
uEHj5r5RRKLMkSsX6v+kblejXq+oGLdH400qP9+r7MfijHOoXrv7GOtcaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG4FgNPPrSQr1xTX9W344MMJ/5hMB8GA1UdIwQY
MBaAFKHzOuzY1ZpqTwVpLMxy4rcTnhfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4Yjgt
MzlkNjNlOWU1ODZiLzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4YjgtMzlkNjNlOWU1ODZi
LzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPRS4wbk
UGxSibhneTBmecXVhq1BjjaJoB2NS1W5nGd8hC8BVkP+LwV4IIRR14pxGjRRbvpL
zXjFYtUYa0C72E8aWabpct25BAsXHKzae58UmlvRRymx9n6acXh/Z0Nrs+MjAxvf
qWXfDCkxWXGWXuWFQxBcAUdKrqWxpLdxhAkpSwS1vNcY+xD3U9NYKF62gH0WmNyj
ExbtWStc1o7MqSDcEPfFdcGOc6l29wNroWE/+yoAfmg6PDlbptkLmk7WuRqO+3YV
TaceLOu8ToBxV4sxvJRQS3xTTMwFF294kjnr+AhCTO3HCg5zYaNoOpjnQY3vhUPf
GDOWJhSfIksoyg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:34 2025 by rpki-client