Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: sRIKiJ0koi9YXAUrDgY7G5DpQGWZOzYwZkk7BxmuxaM=
Subject key identifier: AD:39:8C:A5:B8:22:14:C3:DB:C9:3F:AB:94:4A:C1:E6:5C:95:58:2A
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 0197602715D92CEDA63EFEC115CE826D0A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 0B5F
Signing time: Wed 11 Jun 2025 18:01:03 +0000
Manifest this update: Wed 11 Jun 2025 18:01:03 +0000
Manifest next update: Thu 12 Jun 2025 18:01:03 +0000
Files and hashes: 1: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: fHnk2HdgiYPCOLgFnysW/ORKM1vPFlRQhlud2Gm4VB0=)
2: UG2XZdsSP9vahLS8deUbiGwgM84.roa (hash: H+YkvMLky6FPgjSDWIrs7G2kpfOLt2YF+/59bitetA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:27:15:d9:2c:ed:a6:3e:fe:c1:15:ce:82:6d:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Jun 11 18:01:03 2025 GMT
Not After : Jun 12 18:01:03 2025 GMT
Subject: CN=ad398ca5b82214c3dbc93fab944ac1e65c95582a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:a4:d4:b0:1e:24:7e:76:0a:d8:29:20:0d:
2b:32:e1:1d:d5:49:c2:c8:0c:22:58:84:79:72:b6:
b7:64:89:71:9e:08:d0:e4:73:25:47:4d:9a:5b:66:
d4:34:50:18:5e:d3:07:b1:8a:e4:7c:b3:30:fc:1a:
08:06:89:53:59:1f:fb:cf:55:9a:89:e5:3f:2d:69:
20:61:f0:3e:f9:9b:0f:b0:1f:72:30:81:ed:e5:da:
03:34:9e:48:27:68:be:32:2b:27:69:d1:df:f7:85:
25:b7:8a:50:6b:f2:ad:2a:64:04:9d:5e:be:f0:5e:
ce:42:24:22:d1:02:64:a5:8f:cb:e3:0d:f6:9e:28:
38:2f:6d:dc:83:14:13:cd:14:19:0c:f4:23:46:66:
09:9f:cf:10:8d:9b:57:38:44:8e:04:dc:90:8f:c3:
71:65:84:53:4e:1a:fe:1c:e6:93:39:39:51:04:e4:
f9:c7:ea:e5:d0:65:39:88:7c:b9:da:62:d5:84:c9:
f0:fd:ee:dd:fe:a8:c9:f1:fd:78:7c:62:66:f8:6c:
fa:c1:5a:19:13:5b:f5:11:1e:e7:a7:2a:28:06:e2:
d2:df:6d:35:17:e0:10:e7:a6:20:77:ec:04:34:64:
c2:da:7b:08:02:31:db:08:d6:76:8e:cc:8d:11:46:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:39:8C:A5:B8:22:14:C3:DB:C9:3F:AB:94:4A:C1:E6:5C:95:58:2A
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:50:7c:a2:be:2d:77:84:4f:d0:25:5d:8c:2a:25:88:26:2c:
84:7e:3b:3b:43:2b:3d:45:d6:5a:a4:91:e3:2c:4e:cc:7a:e0:
76:0c:79:3e:da:50:13:d0:71:56:91:56:df:27:8b:4f:24:c0:
a2:17:14:9d:8c:17:15:97:61:26:4b:1d:5c:ed:3b:8f:11:69:
5f:f0:fb:af:ad:33:45:bf:de:1d:d8:fa:c0:66:75:ad:9a:7c:
34:f1:1c:1f:79:84:ba:b2:ee:cf:60:74:14:57:d8:50:22:b1:
2b:d7:c1:54:e6:ac:a8:ab:a1:9a:ec:22:79:14:ee:19:c9:e0:
3d:2e:4f:d6:98:10:ea:15:1d:bf:b9:2c:91:1a:28:ba:35:20:
6d:3e:ca:de:d5:70:ca:99:da:2d:1a:a5:b1:9e:8e:42:b4:db:
41:f4:cd:eb:68:ec:6e:cf:f5:fe:1e:d5:f0:b5:ed:24:51:53:
25:5c:48:6b:bc:80:23:c5:3c:89:b6:be:d8:f7:93:b0:9b:f5:
03:e9:b2:e8:9d:f2:ac:38:a5:27:1c:1d:e0:54:fd:dc:97:72:
e7:1a:5a:ef:96:a8:ee:a4:67:48:3a:a3:b8:08:60:b4:1f:d2:
fc:67:f7:f4:3f:5c:1d:e1:ce:2c:ad:12:4e:14:58:7f:33:7c:
66:4b:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:57:47 2025 by rpki-client