Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: aMGoBXROODPwWqIoUC73ujf3e9J4Lx74UQoQJcRKU1Q=
Subject key identifier: 31:1A:9C:3D:54:9F:3D:83:1B:4C:F8:D3:A9:C5:0A:02:94:26:B1:39
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 0197C9F19872FA597B4C99E00BE406DEA41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 0233
Signing time: Wed 02 Jul 2025 07:02:22 +0000
Manifest this update: Wed 02 Jul 2025 07:02:22 +0000
Manifest next update: Thu 03 Jul 2025 07:02:22 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: PgqhSdFPm7IGy1wsN+jgzSrcXfThmy+Zs/EtIgygJ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:98:72:fa:59:7b:4c:99:e0:0b:e4:06:de:a4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Jul 2 07:02:22 2025 GMT
Not After : Jul 3 07:02:22 2025 GMT
Subject: CN=311a9c3d549f3d831b4cf8d3a9c50a029426b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:26:ec:be:ab:57:31:13:e3:23:e7:d2:02:
54:bc:02:dd:51:d5:f3:69:93:ff:f7:9c:70:a8:d9:
41:f8:09:41:b4:02:2a:63:38:1e:9d:c2:ae:dd:01:
3e:76:c7:cb:54:43:39:4b:5b:7c:94:4a:90:7f:cc:
5d:41:7a:c0:3a:1d:b2:48:ac:76:2b:07:65:fe:a1:
3a:b5:47:0f:22:2f:63:5e:5a:79:95:85:cc:e4:cc:
c3:44:5d:44:8d:13:cb:01:4d:ed:19:8d:ea:84:07:
1a:3c:be:c3:24:b0:03:f3:99:9a:9d:87:73:cd:61:
52:c8:61:0e:13:34:a4:e0:6b:c7:6c:b1:14:6c:9b:
28:d5:fe:0e:b3:27:07:d5:bb:ab:4b:ee:c2:f7:2c:
43:49:24:98:11:b0:08:68:2d:ec:25:7b:48:2c:bf:
3d:10:2c:92:cb:23:8b:b9:bf:22:72:59:35:c4:0e:
97:6a:d8:2d:96:99:78:b7:dc:26:5b:4a:4b:60:02:
0e:32:04:76:fb:da:5f:9a:e2:59:29:2c:f1:95:eb:
9e:80:e6:46:f5:d9:7a:32:32:6b:76:ac:8c:01:b5:
88:c4:b6:36:83:93:82:60:aa:e6:10:86:07:99:46:
b7:e5:1c:fb:ee:96:d5:27:25:19:55:a5:19:23:4a:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1A:9C:3D:54:9F:3D:83:1B:4C:F8:D3:A9:C5:0A:02:94:26:B1:39
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:89:85:52:77:c8:53:b4:7a:9c:b7:04:51:2f:70:5e:13:10:
a4:69:30:45:e2:a3:41:55:aa:f9:32:2d:c4:62:af:8c:c8:18:
3b:75:19:de:90:57:80:35:b8:df:81:6c:61:8e:e5:9e:52:7b:
9d:89:74:a6:30:25:41:52:ad:52:84:52:66:e9:35:4f:a7:f0:
7b:b6:ba:3d:77:11:a2:da:42:57:61:a2:15:c4:cd:26:a6:c4:
b2:48:ff:59:3d:c8:c5:6a:7a:85:1a:d4:47:37:2c:32:54:41:
f6:1a:b2:f0:c1:e7:1f:0a:2c:58:5b:ab:6d:6e:ed:67:79:3b:
22:01:37:59:c8:06:49:b1:0d:5e:9a:28:65:2f:74:50:a7:98:
30:10:69:f3:3c:51:ab:1d:aa:69:96:19:a4:59:89:50:60:44:
29:e5:dc:14:8a:65:18:e5:a2:a6:cf:04:47:9d:cd:82:f8:a3:
55:e8:25:9a:62:87:92:84:e5:9e:0a:8c:4a:68:17:bd:4b:65:
08:8e:9f:62:64:f8:20:34:5d:a8:b3:d9:a8:cc:7b:9f:21:af:
a5:d2:ac:13:c6:a5:05:bb:30:cc:f7:2a:2c:cd:44:b1:df:c8:
38:ee:c8:a8:3d:29:2e:4b:5d:f7:65:0e:3b:57:79:f6:9e:c9:
0c:d3:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:19:56 2025 by rpki-client