Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: T3w3s/iUykzdorqZIgqz0slHeeepQlUVmLjQu1GN9pg=
Subject key identifier: B6:7A:F3:24:2A:A7:08:1B:CD:44:E2:84:35:31:B4:B5:3A:28:BD:49
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 0197621526E4709B2066AA7678C6CE61CC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 0B60
Signing time: Thu 12 Jun 2025 03:00:42 +0000
Manifest this update: Thu 12 Jun 2025 03:00:42 +0000
Manifest next update: Fri 13 Jun 2025 03:00:42 +0000
Files and hashes: 1: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: 5/eApS4ZKDxoVzvWJ68EdneFnUmSyi5UnhxNs0UR3w0=)
2: UG2XZdsSP9vahLS8deUbiGwgM84.roa (hash: H+YkvMLky6FPgjSDWIrs7G2kpfOLt2YF+/59bitetA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:26:e4:70:9b:20:66:aa:76:78:c6:ce:61:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Jun 12 03:00:42 2025 GMT
Not After : Jun 13 03:00:42 2025 GMT
Subject: CN=b67af3242aa7081bcd44e2843531b4b53a28bd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:66:f7:a6:ec:d6:ea:36:bc:b4:4c:74:a9:
ad:09:db:4e:77:bb:f5:22:43:00:2c:e6:f5:00:25:
65:51:16:3c:e5:46:7f:b7:97:b7:af:a4:bc:c8:76:
27:d0:a5:6c:53:13:26:3e:cf:4b:d2:1d:3d:0d:63:
35:1a:2c:fa:b7:7d:fd:89:29:bd:6a:18:c6:df:1d:
c6:93:81:dd:6e:21:c8:fd:b5:0f:af:5a:1b:1a:d5:
d5:8f:61:62:44:3f:a3:9a:91:6c:e4:3e:27:ad:cc:
15:33:1a:1d:60:80:57:77:93:60:a5:33:4a:89:20:
82:44:a3:d5:be:e8:f5:cc:51:f0:b8:12:6f:1e:4a:
69:63:8f:b7:8f:c7:56:d8:a4:3c:43:aa:b4:bb:7b:
a9:4e:45:93:72:c8:6e:ec:0e:68:f3:7c:9f:19:f9:
1c:a2:37:1a:e9:42:14:4c:72:44:07:c5:6d:43:0b:
2f:0a:1c:8e:10:7b:fe:ce:42:90:01:12:0a:c8:6e:
f0:87:2e:4e:7a:68:c6:f9:d8:99:82:e6:5a:14:cc:
21:9d:92:cb:97:de:36:3e:4e:84:60:2a:05:16:4e:
1e:d2:67:48:b1:f8:e7:34:08:d4:53:2b:19:85:d0:
74:32:13:b4:bd:7d:69:03:98:27:67:52:77:2b:31:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7A:F3:24:2A:A7:08:1B:CD:44:E2:84:35:31:B4:B5:3A:28:BD:49
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:dc:bd:8e:49:6b:97:fa:be:fb:a8:aa:a3:b3:7e:b2:88:dc:
db:e1:fd:b8:87:1f:22:9f:5d:01:61:03:0a:aa:3b:36:f4:e3:
da:a7:91:35:29:ba:60:8a:ff:65:cb:38:5c:fa:c9:42:a6:f8:
5a:68:a9:90:ca:82:cb:32:ed:7e:68:fd:57:bf:db:e5:21:91:
63:0e:08:f8:b6:86:96:74:a9:ba:a4:92:e8:ec:f5:c4:96:2b:
75:4a:be:f7:4a:2d:48:dc:93:d7:22:e8:1a:2a:a1:d9:2a:dd:
5d:50:6c:76:26:e1:a6:30:31:ca:1d:b3:5d:aa:9b:b3:dc:7b:
55:7e:3b:bb:ae:ab:a1:54:1e:41:39:18:84:61:18:82:90:3c:
54:5c:92:f8:d8:49:7a:4f:e3:ac:8d:0f:3b:80:54:04:26:33:
e0:06:2b:87:0a:22:32:6f:87:31:2f:7d:1d:a1:16:fd:2c:ef:
d1:1d:3f:a8:19:4f:3d:54:e0:bf:97:74:60:c5:14:f5:f5:bc:
95:3f:5c:17:c4:bb:ea:c2:ea:0f:4c:bc:08:6e:7e:de:2b:e7:
45:fa:53:ec:48:91:7d:ae:cf:ab:76:a4:2b:20:9a:b4:3d:de:
65:7e:b3:66:b1:b0:17:d0:62:29:50:4b:61:a8:25:3a:96:4d:
20:ff:ec:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdiFSbkcJsgZqp2eMbOYcydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMWEwYzAwMTZiOWIzM2Y5M2U4YTdhMzkzZDA5MTkwZDVl
MTg0OTkwHhcNMjUwNjEyMDMwMDQyWhcNMjUwNjEzMDMwMDQyWjAzMTEwLwYDVQQD
EyhiNjdhZjMyNDJhYTcwODFiY2Q0NGUyODQzNTMxYjRiNTNhMjhiZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Zm96bs1uo2vLRMdKmtCdtOd7v1
IkMALOb1ACVlURY85UZ/t5e3r6S8yHYn0KVsUxMmPs9L0h09DWM1Giz6t339iSm9
ahjG3x3Gk4HdbiHI/bUPr1obGtXVj2FiRD+jmpFs5D4nrcwVMxodYIBXd5NgpTNK
iSCCRKPVvuj1zFHwuBJvHkppY4+3j8dW2KQ8Q6q0u3upTkWTcshu7A5o83yfGfkc
ojca6UIUTHJEB8VtQwsvChyOEHv+zkKQARIKyG7why5OemjG+diZguZaFMwhnZLL
l942Pk6EYCoFFk4e0mdIsfjnNAjUUysZhdB0MhO0vX1pA5gnZ1J3KzEKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZ68yQqpwgbzUTihDUxtLU6KL1JMB8GA1UdIwQY
MBaAFDoaDAAWubM/k+ino5PQkZDV4YSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjkt
MGI2NDU5Nzc1YjY0LzEvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjktMGI2NDU5Nzc1YjY0
LzEvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdy9jklr
l/q++6iqo7N+sojc2+H9uIcfIp9dAWEDCqo7NvTj2qeRNSm6YIr/Zcs4XPrJQqb4
WmipkMqCyzLtfmj9V7/b5SGRYw4I+LaGlnSpuqSS6Oz1xJYrdUq+90otSNyT1yLo
Giqh2SrdXVBsdibhpjAxyh2zXaqbs9x7VX47u66roVQeQTkYhGEYgpA8VFyS+NhJ
ek/jrI0PO4BUBCYz4AYrhwoiMm+HMS99HaEW/Szv0R0/qBlPPVTgv5d0YMUU9fW8
lT9cF8S76sLqD0y8CG5+3ivnRfpT7EiRfa7Pq3akKyCatD3eZX6zZrGwF9BiKVBL
YaglOpZNIP/sOA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 10:48:53 2025 by rpki-client