Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: /5S/AXzUZqLkb0dtuWliNod5na5KVUaK76kAN6nFkUc=
Subject key identifier: AD:43:B9:BE:BC:BE:F6:F4:39:4B:6E:76:2C:96:E3:21:E0:2D:04:A8
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 019769CEE07CA8D7F22C548B8ACFA3932A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 0B64
Signing time: Fri 13 Jun 2025 15:00:54 +0000
Manifest this update: Fri 13 Jun 2025 15:00:54 +0000
Manifest next update: Sat 14 Jun 2025 15:00:54 +0000
Files and hashes: 1: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: blQrHZlqxql0Y7gaHOPelfsgk9hiWA6oqOMBN0ORnLU=)
2: UG2XZdsSP9vahLS8deUbiGwgM84.roa (hash: H+YkvMLky6FPgjSDWIrs7G2kpfOLt2YF+/59bitetA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:e0:7c:a8:d7:f2:2c:54:8b:8a:cf:a3:93:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Jun 13 15:00:54 2025 GMT
Not After : Jun 14 15:00:54 2025 GMT
Subject: CN=ad43b9bebcbef6f4394b6e762c96e321e02d04a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:bf:ee:88:64:44:fd:9a:44:b8:4e:60:a1:
aa:d9:45:c0:e2:0e:2e:22:c2:de:bb:30:79:60:e4:
97:ac:f0:39:25:87:58:f6:86:bf:fb:d6:65:31:58:
c3:1f:9d:5d:c7:de:c1:ed:78:a3:de:b8:41:34:e4:
bf:b2:cd:44:8d:39:7c:4f:74:ea:6f:19:43:23:f6:
a7:18:9a:d1:a1:93:e6:c0:54:3a:69:c7:56:a8:a1:
d2:6d:60:a9:c6:fc:df:ce:90:78:9c:33:53:d8:66:
eb:1d:63:26:86:40:18:43:f7:4d:6f:d4:d8:0b:3e:
e5:87:5f:49:b5:b7:c6:0a:fd:a4:a9:cc:37:ff:b7:
91:8f:9c:1d:f1:31:f3:c6:a2:da:29:45:5a:8e:bf:
7c:70:41:97:4d:bd:0f:eb:37:e0:eb:55:45:54:5a:
47:2e:10:fa:c7:af:61:f4:43:bb:31:c8:76:ed:57:
02:bc:56:9a:bf:d8:7e:2d:db:20:7a:b0:03:5a:35:
ad:5c:a6:e3:1b:b2:0f:a3:9c:c8:6b:5c:29:c1:dd:
11:0b:a9:ab:3b:97:97:06:53:c2:71:24:f6:54:bb:
09:63:f8:ce:0a:dc:df:e1:87:1a:3d:2c:5b:7a:a1:
7b:eb:fb:ed:6b:3e:a3:5a:99:64:6a:75:69:7a:d9:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:B9:BE:BC:BE:F6:F4:39:4B:6E:76:2C:96:E3:21:E0:2D:04:A8
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6f:14:1f:aa:0c:8d:01:e0:f1:34:d3:84:7c:d9:ee:8c:32:
8a:a1:18:30:af:9f:08:7f:6e:6b:9c:a5:d1:47:42:19:24:0e:
ae:df:c0:15:fe:c4:bc:2e:99:f4:ac:dd:fe:9e:22:48:07:90:
30:77:be:49:02:39:cf:9d:35:a3:9f:a0:cb:73:bc:63:e1:1f:
ea:9c:8d:12:39:6c:25:7b:6e:05:f7:b8:d9:8f:37:71:96:7a:
05:4b:55:7f:41:49:b0:15:69:4e:f6:90:5f:51:f3:30:4c:51:
24:23:5c:ba:06:ae:fd:14:f8:17:f9:97:ad:37:98:35:cf:b9:
0d:64:64:83:a0:fc:83:19:30:f5:f0:78:80:69:a8:0c:c6:c2:
94:b8:e3:c9:3a:e1:fe:6b:bd:9e:b8:6f:86:c5:06:cf:26:aa:
9c:fd:57:c0:16:f6:43:5d:fc:23:01:45:b4:ae:c1:bc:8a:68:
07:3d:4a:2a:6c:f2:ad:8e:98:bd:d1:f4:20:23:26:eb:c4:c1:
52:9b:e2:c4:49:46:41:37:8d:b1:63:4e:f7:65:42:d0:aa:b2:
0a:09:47:4d:a9:81:34:3d:6e:94:4d:27:38:30:36:4c:20:47:
82:41:6f:6c:e0:10:7e:1f:6d:d5:02:dd:76:6a:ea:14:95:76:
90:23:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:18:30 2025 by rpki-client