Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier: FR9Wf7Rj8xcykj831EhfQqeOAKUgNLOXeh400kDgrMc=
Subject key identifier: 8C:33:EA:2A:64:03:B1:DD:10:C7:B5:5A:F9:DD:56:33:93:51:E2:60
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial: 0197B88FEE9E9739827CF547910C48C2FA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number: 0A2E
Signing time: Sat 28 Jun 2025 22:02:09 +0000
Manifest this update: Sat 28 Jun 2025 22:02:09 +0000
Manifest next update: Sun 29 Jun 2025 22:02:09 +0000
Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: xKoC7KPGeaQ4TLXqfo8daE9fYIDHtJSRPQzPTy4MV3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ee:9e:97:39:82:7c:f5:47:91:0c:48:c2:fa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Validity
Not Before: Jun 28 22:02:09 2025 GMT
Not After : Jun 29 22:02:09 2025 GMT
Subject: CN=8c33ea2a6403b1dd10c7b55af9dd56339351e260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:e8:ba:fd:5d:33:81:19:fa:e1:45:eb:04:
d8:67:a0:4b:c2:00:f9:0a:aa:a1:c3:3e:dd:b4:d5:
00:99:87:12:5a:df:8d:cf:14:95:d4:9b:b2:cb:8b:
35:a3:ce:07:ec:89:c1:94:2f:f3:70:60:8b:60:cb:
1c:64:00:89:ed:92:b2:6d:6b:c8:e2:99:c2:e3:e5:
a4:e3:af:34:b1:c1:ea:c6:f3:c7:db:64:dd:4d:2b:
29:ae:25:5a:5b:1e:4b:0b:e7:4b:17:49:0d:74:52:
2b:d2:44:91:02:b7:7c:9d:ac:e3:01:de:8c:43:0c:
80:6c:26:1d:eb:50:58:0d:35:b7:3a:3b:76:95:34:
10:5e:f0:19:cd:72:f1:87:ec:e4:cc:a8:21:7b:c8:
81:47:46:41:70:43:37:4b:a0:78:e4:4f:43:37:e4:
e3:91:a4:d3:4b:9d:42:73:de:3b:64:d8:b8:00:62:
65:f4:ff:f9:5e:be:26:ff:1f:f2:64:f7:ae:9c:55:
55:08:ac:54:e4:70:62:f4:69:4f:0f:23:c5:33:f6:
2e:05:bd:b1:13:02:74:af:58:45:90:ac:9a:b2:58:
8d:fe:0b:37:47:f6:62:a7:fd:fd:6b:85:1d:fc:30:
55:22:2c:47:ef:3f:6e:5e:8b:b0:83:1f:39:67:3b:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:EA:2A:64:03:B1:DD:10:C7:B5:5A:F9:DD:56:33:93:51:E2:60
X509v3 Authority Key Identifier:
keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ea:ac:53:56:75:39:6a:26:56:25:59:5b:16:7c:86:06:d3:
7a:7d:8a:ea:e7:65:82:b7:1c:ef:63:36:55:14:2d:a5:19:c6:
9a:b0:fb:c9:44:7c:0c:e3:c0:10:73:da:26:21:67:24:9b:98:
26:ea:c3:ba:d3:2d:47:ce:73:89:34:98:35:7c:04:97:7d:e8:
41:b9:0f:30:3f:80:97:40:d1:6c:51:3c:c8:da:2d:fe:99:43:
3a:39:ea:83:47:1b:52:73:3c:df:e5:9a:94:81:50:1c:2c:0d:
5e:75:76:ef:67:21:7d:b8:92:4a:e0:fe:06:3a:22:70:e7:13:
6f:58:f1:a6:3d:88:8c:67:c5:b9:38:e7:b6:b7:09:c7:10:a3:
c2:9c:a3:c5:ff:ea:42:79:d8:0d:d8:18:0e:67:39:c5:ce:46:
ec:25:b6:da:86:0f:9a:98:0a:61:b4:08:04:7b:f1:54:b7:e4:
06:eb:dd:2f:68:2e:05:b3:96:d7:5f:cd:6b:a4:c7:18:c7:b5:
f1:aa:f0:20:03:96:dc:f6:e9:03:24:dc:b3:30:d9:65:c8:33:
f4:67:32:70:f7:f7:f2:41:d0:d6:2e:fb:46:6b:20:34:3b:6d:
65:36:78:e0:ff:2d:3a:78:24:ae:91:4d:a6:59:b6:88:dd:79:
c5:7b:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:39:24 2025 by rpki-client