Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ohv-an3Hf0ADcofKevZeOEhfxuk.mft
File: ohv-an3Hf0ADcofKevZeOEhfxuk.mft (raw, json)
Hash identifier: X8RdoxZA9zw5BR3JfLymWkPZ4fFt6wo+eUDl1j00LtY=
Subject key identifier: 70:2B:DA:5E:AF:69:34:C2:61:76:73:79:25:7C:C7:EF:C7:E9:BB:B0
Authority key identifier: A2:1B:FE:6A:7D:C7:7F:40:03:72:87:CA:7A:F6:5E:38:48:5F:C6:E9
Certificate issuer: /CN=a21bfe6a7dc77f40037287ca7af65e38485fc6e9
Certificate serial: 01984776995D30C674EBDB973F15FC9F63A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohv-an3Hf0ADcofKevZeOEhfxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ohv-an3Hf0ADcofKevZeOEhfxuk.mft
Manifest number: 0DFE
Signing time: Sat 26 Jul 2025 16:00:11 +0000
Manifest this update: Sat 26 Jul 2025 16:00:11 +0000
Manifest next update: Sun 27 Jul 2025 16:00:11 +0000
Files and hashes: 1: ohv-an3Hf0ADcofKevZeOEhfxuk.crl (hash: TVNzc7N2IqIh9ZjO1eyJcU86Dlszu8ihJtnPt0xxDKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ohv-an3Hf0ADcofKevZeOEhfxuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ohv-an3Hf0ADcofKevZeOEhfxuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohv-an3Hf0ADcofKevZeOEhfxuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:99:5d:30:c6:74:eb:db:97:3f:15:fc:9f:63:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21bfe6a7dc77f40037287ca7af65e38485fc6e9
Validity
Not Before: Jul 26 16:00:11 2025 GMT
Not After : Jul 27 16:00:11 2025 GMT
Subject: CN=702bda5eaf6934c261767379257cc7efc7e9bbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:12:ad:89:d6:f5:c2:f5:84:56:c8:df:18:
7e:0e:64:10:29:f8:26:59:eb:05:c4:be:fd:23:c0:
92:dc:1a:49:01:2d:1d:cd:97:58:1d:7f:c2:19:dc:
ab:bc:bd:4f:58:95:34:ba:77:e1:f0:1d:f7:a5:4f:
a0:d4:41:2d:a5:8b:95:28:dc:2e:fd:b3:55:6f:45:
51:90:12:e4:97:10:6f:b8:f9:a1:8e:05:35:0c:a5:
54:5a:34:6d:e5:59:7f:1f:63:b1:fd:7a:64:b9:41:
3f:7f:fb:24:e6:77:76:fb:6f:55:fd:db:75:d4:57:
43:72:b8:89:18:85:40:2b:a5:ab:93:c2:ec:3e:08:
01:37:04:8d:04:4e:e0:df:22:6f:1b:be:0c:db:68:
3f:65:e8:df:b5:b8:77:34:8b:8e:b1:50:18:61:96:
e4:6d:7c:af:ad:f4:88:f5:23:2a:67:e7:04:02:4d:
f3:26:b2:4e:d3:a9:66:4e:8e:df:5b:28:25:c7:a4:
f8:a5:93:c3:16:77:48:0e:69:3b:ff:ff:4e:2b:1b:
3c:9f:96:ca:89:cb:89:a1:b0:0c:ba:c6:07:d2:ab:
7c:3b:05:33:2e:2d:49:0d:f6:cc:f9:90:b6:d2:21:
53:32:81:68:e8:f8:e0:ad:bd:10:a7:8b:e2:26:88:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2B:DA:5E:AF:69:34:C2:61:76:73:79:25:7C:C7:EF:C7:E9:BB:B0
X509v3 Authority Key Identifier:
keyid:A2:1B:FE:6A:7D:C7:7F:40:03:72:87:CA:7A:F6:5E:38:48:5F:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohv-an3Hf0ADcofKevZeOEhfxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ohv-an3Hf0ADcofKevZeOEhfxuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cfb54d-a553-4324-b541-0b535120f327/1/ohv-an3Hf0ADcofKevZeOEhfxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:86:83:02:f1:08:81:58:be:aa:54:67:74:ab:96:5c:c1:1a:
4b:ea:67:3f:62:ec:1b:9d:81:28:0a:23:21:eb:92:94:c1:0d:
38:aa:4f:52:ae:d1:a5:81:4b:b5:9f:85:cd:8b:d7:71:2f:da:
f9:96:42:e5:61:39:f7:eb:e4:21:d9:f8:44:47:42:be:dd:e6:
53:e5:86:87:30:21:56:46:ec:d8:ad:8d:0f:16:f6:4e:ed:d5:
af:c8:7c:21:1a:55:97:6e:07:06:2a:f5:d2:e0:41:89:44:91:
70:1b:12:b3:cc:5d:ad:e8:47:67:db:8b:db:dc:c3:33:78:b2:
58:f4:23:cc:c1:4d:8c:42:dc:89:9f:1f:6e:ab:05:0c:32:93:
17:77:ef:81:e9:3c:2d:62:af:5f:ba:67:cb:0f:82:1a:88:ac:
97:7d:7e:1d:a4:bf:c9:63:a7:fe:b7:03:4e:40:d8:0e:3d:e7:
b8:0d:41:6a:c6:4f:dc:0f:e4:26:1f:8e:7a:2c:8b:61:4f:06:
2a:7e:61:fe:51:c7:92:25:7e:f0:bc:d5:23:56:29:12:cb:63:
8d:2c:37:52:14:14:d9:c0:6c:d9:8b:b5:0c:cb:42:60:06:7d:
b3:f2:05:34:64:2a:b3:23:64:7a:49:8e:39:ce:d5:d6:c5:d8:
59:54:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:01:08 2025 by rpki-client