Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: gKK9DfGbcZjPYNZvDwzNcpcRECQIi7v30MGmLarQblU=
Subject key identifier: BD:6E:3A:D8:02:B6:BC:B9:B5:3C:7F:72:19:D4:EB:67:27:CC:E6:D4
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 0196BC000EF7219A9F0AE3F4A366E4E0F1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0C13
Signing time: Sat 10 May 2025 21:00:42 +0000
Manifest this update: Sat 10 May 2025 21:00:42 +0000
Manifest next update: Sun 11 May 2025 21:00:42 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: hVf3GAMc17rXuOGIJ/IgA+pK6DqNO0syQvL9MkclXBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:0e:f7:21:9a:9f:0a:e3:f4:a3:66:e4:e0:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: May 10 21:00:42 2025 GMT
Not After : May 11 21:00:42 2025 GMT
Subject: CN=bd6e3ad802b6bcb9b53c7f7219d4eb6727cce6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:70:9e:d3:bf:26:8e:75:7f:11:05:24:ef:
9a:89:98:e9:ea:90:b3:a6:5e:89:a8:c2:00:74:c8:
54:ad:81:f3:7d:9e:3c:77:43:8f:7c:05:19:2a:73:
f0:df:44:c7:06:aa:c3:06:85:dd:41:71:8c:94:f9:
64:8c:2d:6b:e9:90:6b:ca:86:71:53:45:ab:7a:59:
76:e1:74:79:8a:45:9c:df:9f:86:9c:57:42:2b:a9:
11:f4:a7:e5:ea:60:bf:5b:22:7a:5b:1e:78:8c:97:
d2:52:80:dd:7f:f2:d9:f7:d8:65:c3:50:7e:d3:f9:
73:70:bd:19:11:37:c4:5d:5e:42:24:98:cb:dd:b8:
8a:9a:f9:45:ca:10:cd:61:a4:8a:a8:77:d4:60:e1:
b0:da:7f:40:16:99:21:a9:01:60:9a:d4:2f:60:de:
b6:3d:0d:8b:46:18:a4:0c:b5:eb:9c:94:c7:fa:34:
f8:27:67:20:60:11:ae:7a:7a:07:0b:9b:db:93:5b:
74:f6:e8:41:71:9d:07:13:32:de:16:ee:54:50:2a:
9d:f4:8c:17:7c:05:b6:ba:e0:1a:88:07:22:f6:9b:
98:20:7d:2d:89:a4:e2:4b:cb:e2:5e:ab:8b:f0:d8:
25:16:00:a7:d2:06:d7:2f:8a:e6:1c:9a:85:b5:66:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:3A:D8:02:B6:BC:B9:B5:3C:7F:72:19:D4:EB:67:27:CC:E6:D4
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:83:78:e1:dc:7e:0e:a7:02:54:25:a0:07:71:d1:e8:56:db:
ae:43:25:b4:f4:57:d5:d5:37:91:7e:6d:b4:9a:a2:e4:c3:11:
f7:96:47:ab:68:35:a0:69:d7:18:a9:0c:9b:ed:9b:68:55:46:
dd:78:fb:83:8c:48:05:6f:91:ad:10:5e:b0:c7:f3:95:df:34:
66:ed:6a:19:29:54:4e:47:3d:52:50:de:4d:28:10:c5:84:d6:
a4:7c:58:15:86:31:93:f5:ed:26:a4:20:05:a8:d8:ed:6f:0e:
4c:e8:ae:40:8d:38:04:c9:0c:26:e9:0f:30:79:dc:eb:9e:01:
5f:8d:66:c0:60:d5:fe:cd:af:3b:69:05:be:d7:7c:b3:7a:a7:
f3:46:ba:d8:4b:d8:b8:08:c8:fc:5a:6e:fd:0f:9a:45:99:b8:
73:41:79:19:f7:89:c6:b9:f8:46:39:21:62:72:a5:eb:f9:e9:
21:63:af:0c:2e:94:37:1d:10:d7:ef:33:b8:b8:48:26:83:a3:
ec:54:bb:68:47:1d:55:4e:db:7c:54:05:0e:64:31:8c:b1:cc:
0e:40:c9:c1:aa:7f:e2:58:cd:97:20:b9:e7:7c:f3:70:85:9d:
cf:ae:35:70:32:3f:36:76:1c:1e:b4:11:61:5a:f9:24:93:f6:
0d:04:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:08:19 2025 by rpki-client