Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: gMNJc4zQYi8Z4OSKQaEnw9P60NbBvvwUc+N85fCzpNk=
Subject key identifier: 66:D5:84:86:AC:D2:DC:BB:06:78:28:DD:EC:F5:90:D6:D7:80:BA:EE
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 0197B70F6C85DB20B77D8FB93BED12C02E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0C95
Signing time: Sat 28 Jun 2025 15:02:10 +0000
Manifest this update: Sat 28 Jun 2025 15:02:10 +0000
Manifest next update: Sun 29 Jun 2025 15:02:10 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: zmr5mjV1sOXCyTfJJVG76MVEg7h/LT7jfz83eaPoFxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:6c:85:db:20:b7:7d:8f:b9:3b:ed:12:c0:2e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Jun 28 15:02:10 2025 GMT
Not After : Jun 29 15:02:10 2025 GMT
Subject: CN=66d58486acd2dcbb067828ddecf590d6d780baee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:db:5d:8a:c0:5e:31:5a:8a:48:d3:d9:0e:4f:
c7:54:bf:1d:c6:69:56:2a:d8:ed:68:89:b1:15:b5:
76:d9:a9:19:79:02:39:29:8c:90:65:4e:85:09:46:
0d:df:e8:0a:7d:38:fd:bd:66:08:86:ca:61:6d:1e:
b3:a7:5a:46:7f:16:0b:48:9b:75:24:d3:6f:10:6e:
14:7d:34:83:98:b7:36:19:49:33:95:f5:40:82:2c:
1b:05:41:6f:7c:f8:03:b9:8e:ea:b3:29:3b:5f:fa:
02:7c:cc:fd:97:09:d9:5e:33:44:e5:f4:7b:18:9d:
97:16:40:90:b8:43:79:e9:fb:a6:e6:bc:dc:ae:1e:
94:cc:5e:1e:2a:5e:14:a6:05:39:04:31:8c:1e:ca:
ef:6a:ff:28:0b:23:f2:fb:48:d6:e7:2f:2f:1c:13:
d7:4e:aa:41:11:0b:5b:f5:61:18:20:87:8b:78:90:
ee:69:e4:d5:1e:f5:c3:3d:61:19:09:cf:56:dd:80:
a0:79:7d:db:63:32:33:66:15:e0:7f:15:c1:fb:00:
95:01:32:e3:0b:ff:ef:c5:43:18:98:3d:be:00:3a:
87:b4:2f:69:2e:23:f2:43:e3:39:d4:4e:27:46:8d:
00:00:b6:06:79:da:7f:59:91:84:35:9e:7b:cc:08:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:84:86:AC:D2:DC:BB:06:78:28:DD:EC:F5:90:D6:D7:80:BA:EE
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f1:14:47:5e:a6:4c:1c:9d:eb:a5:de:02:a7:9b:04:a8:8c:
9f:32:ba:ae:c7:2e:1b:45:8e:84:0f:33:f9:65:32:ed:9b:dd:
ff:e3:59:25:5e:1c:28:ec:9f:f3:41:a2:e1:a2:6d:73:d7:e2:
99:37:39:09:39:ee:51:c7:90:a7:d3:86:03:38:f3:a0:c8:53:
0d:55:a0:db:10:25:f6:75:a6:94:0b:db:94:80:13:74:e7:b5:
ff:46:f0:3f:2d:40:96:50:4d:60:20:60:1e:bc:c4:00:18:88:
86:9a:af:2d:a2:de:0d:ba:06:b1:cb:60:a9:9f:16:48:02:64:
53:d0:69:52:0d:98:9a:78:6e:96:c0:46:46:7a:68:3b:79:0a:
c9:db:dc:2f:b9:e3:ab:6c:42:03:03:df:63:e6:3b:b7:21:2b:
25:21:74:6c:e0:28:72:87:11:c5:0e:89:fc:b4:81:87:8d:80:
51:9a:40:e2:21:91:e5:81:21:fc:5e:9d:2c:bb:c5:55:3f:e9:
c7:26:fc:66:f8:c6:51:ad:a8:bc:6f:ec:cf:8b:08:e0:f5:78:
fd:78:c5:96:45:6d:90:2b:3b:1f:8d:1d:a2:a9:d3:39:0b:d3:
e3:05:6d:c8:f4:9b:ff:5c:13:d1:f0:fe:cb:0a:35:69:2b:4c:
2d:55:96:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D2yF2yC3fY+5O+0SwC5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjMzYWVjZDhkNTlhNmE0ZjA1NjkyY2NjNzJlMmI3MTM5
ZTE3Y2MwHhcNMjUwNjI4MTUwMjEwWhcNMjUwNjI5MTUwMjEwWjAzMTEwLwYDVQQD
Eyg2NmQ1ODQ4NmFjZDJkY2JiMDY3ODI4ZGRlY2Y1OTBkNmQ3ODBiYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NtdisBeMVqKSNPZDk/HVL8dxmlW
KtjtaImxFbV22akZeQI5KYyQZU6FCUYN3+gKfTj9vWYIhsphbR6zp1pGfxYLSJt1
JNNvEG4UfTSDmLc2GUkzlfVAgiwbBUFvfPgDuY7qsyk7X/oCfMz9lwnZXjNE5fR7
GJ2XFkCQuEN56fum5rzcrh6UzF4eKl4UpgU5BDGMHsrvav8oCyPy+0jW5y8vHBPX
TqpBEQtb9WEYIIeLeJDuaeTVHvXDPWEZCc9W3YCgeX3bYzIzZhXgfxXB+wCVATLj
C//vxUMYmD2+ADqHtC9pLiPyQ+M51E4nRo0AALYGedp/WZGENZ57zAhpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbVhIas0ty7Bngo3ez1kNbXgLruMB8GA1UdIwQY
MBaAFKHzOuzY1ZpqTwVpLMxy4rcTnhfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4Yjgt
MzlkNjNlOWU1ODZiLzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4YjgtMzlkNjNlOWU1ODZi
LzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfEUR16m
TByd66XeAqebBKiMnzK6rscuG0WOhA8z+WUy7Zvd/+NZJV4cKOyf80Gi4aJtc9fi
mTc5CTnuUceQp9OGAzjzoMhTDVWg2xAl9nWmlAvblIATdOe1/0bwPy1AllBNYCBg
HrzEABiIhpqvLaLeDboGsctgqZ8WSAJkU9BpUg2YmnhulsBGRnpoO3kKydvcL7nj
q2xCAwPfY+Y7tyErJSF0bOAococRxQ6J/LSBh42AUZpA4iGR5YEh/F6dLLvFVT/p
xyb8ZvjGUa2ovG/sz4sI4PV4/XjFlkVtkCs7H40doqnTOQvT4wVtyPSb/1wT0fD+
ywo1aStMLVWWBw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:41 2025 by rpki-client