Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: XiEdWOfocGWLVseOe+FlQV6RkTrh59LxIJVnXUil7T8=
Subject key identifier: 39:BC:76:8C:A9:C0:21:4A:1E:CB:55:2D:A4:92:73:FF:91:C2:2B:11
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 01964556B10817AF73F5DF46E24160B3CEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 20:00:31 +0000
Manifest this update: Thu 17 Apr 2025 20:00:31 +0000
Manifest next update: Fri 18 Apr 2025 20:00:31 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: lJwfF3RY/iRtvoS5116JAgnQrgBVqxnYAs/OgTKSWJI=)
2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:b1:08:17:af:73:f5:df:46:e2:41:60:b3:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Apr 17 20:00:31 2025 GMT
Not After : Apr 18 20:00:31 2025 GMT
Subject: CN=39bc768ca9c0214a1ecb552da49273ff91c22b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:8b:7b:7d:ec:8c:a5:64:f4:ee:b9:31:ca:
60:cb:a4:64:c4:54:b1:3d:19:f3:0f:ba:d3:ec:3d:
7c:89:e5:71:cb:50:ef:47:8f:e0:c6:65:07:79:e7:
c2:20:b6:62:9f:b0:cf:b7:af:fd:df:8d:e5:17:7a:
3a:37:18:16:59:68:4d:c1:a9:0d:80:36:53:2f:72:
be:8a:08:5a:59:da:aa:e2:8b:e1:33:f2:26:c6:24:
56:aa:73:8c:3f:1c:1e:3b:0c:49:4b:14:de:eb:49:
0b:87:93:ef:38:9a:16:21:ca:33:09:2e:2f:81:06:
08:56:a7:d4:dd:57:78:04:69:28:e0:36:08:9b:54:
93:b3:a6:b5:72:c4:4d:40:93:97:e8:2e:bf:24:da:
2e:70:3b:ff:bb:63:4a:ef:bc:7f:9d:7a:fc:65:67:
a6:6d:13:be:2a:06:48:b3:ec:53:af:63:9e:bf:64:
53:d0:c4:40:aa:3c:06:fe:ec:1b:34:e7:89:d0:26:
c0:df:17:0f:fd:25:95:15:ce:2e:e9:8f:fc:b3:6e:
ab:a3:4b:f3:b4:1c:ca:74:be:3c:89:9e:5b:7e:14:
20:00:b0:a8:37:cd:cf:f8:40:a1:4b:56:20:0f:9f:
4a:ac:fc:04:8f:a5:e7:2c:31:77:0b:86:46:50:7e:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BC:76:8C:A9:C0:21:4A:1E:CB:55:2D:A4:92:73:FF:91:C2:2B:11
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:25:1d:66:be:c4:07:79:29:c4:81:4d:6b:a3:43:8e:b0:10:
60:36:8b:1f:11:78:d2:d6:b5:7d:34:e9:c2:64:7d:e1:6f:59:
8b:88:ad:89:b1:c1:6a:20:f3:f1:69:6b:bb:7e:76:6b:a8:1f:
bf:27:d2:70:62:ba:ee:c2:db:4d:ba:0c:f0:47:ab:35:f8:2f:
cb:1e:27:33:2b:f7:ae:c4:df:59:50:30:ee:e1:17:64:f8:6b:
7d:57:cb:57:db:21:cf:bf:54:c0:c0:7d:66:f5:c4:50:1b:fc:
6c:dc:ea:bf:00:28:59:dc:0b:e9:9a:0f:63:c7:c5:c4:53:aa:
28:89:40:fa:95:71:93:bb:b2:e6:b5:ed:fa:60:fd:8a:0c:1b:
0c:65:da:35:6b:3a:d1:8a:7f:06:5c:14:99:cb:df:e7:68:08:
94:51:84:a1:75:bb:46:6b:4d:20:2c:db:22:f6:27:4f:c8:3b:
0a:6e:42:59:3a:a3:13:e6:06:13:4d:e1:6b:5f:7a:88:dc:8e:
42:17:15:be:53:31:97:b1:2b:83:7e:f3:71:81:91:fa:38:b3:
32:1a:b8:33:4d:23:6c:6c:5e:0f:92:af:ea:5f:b2:14:e4:a0:
3a:cc:b0:e8:48:a8:92:18:8c:dc:3f:34:89:dc:53:bc:8b:f7:
fa:6c:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:13:47 2025 by rpki-client