Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: v7Z22Lz6Ma6r+JDfTLuO+Pe1oJWZHegGSMTDGfEp4As=
Subject key identifier: 2C:B5:E2:54:93:DD:35:B4:77:2E:6F:E9:24:2F:FE:FC:86:4B:85:B1
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 0197469E8B99B133B06C0A7B0E4689F159C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 19:01:24 +0000
Manifest this update: Fri 06 Jun 2025 19:01:24 +0000
Manifest next update: Sat 07 Jun 2025 19:01:24 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: +9EldxFZSNSqgmnSuzwuvqbRCepjXtkbER+VwX8Rsp4=)
2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:8b:99:b1:33:b0:6c:0a:7b:0e:46:89:f1:59:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Jun 6 19:01:24 2025 GMT
Not After : Jun 7 19:01:24 2025 GMT
Subject: CN=2cb5e25493dd35b4772e6fe9242ffefc864b85b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:7e:b1:38:a1:66:c5:92:c2:c1:28:af:65:
44:30:eb:4b:ec:bc:e3:a9:4a:e2:26:c2:63:92:f1:
79:01:2b:1b:69:5b:db:52:5b:8a:8f:27:f1:41:5c:
d6:d2:8c:6f:95:64:a5:8d:d1:13:f0:1d:c7:60:6a:
c5:ee:e9:66:25:52:b0:5a:f9:f7:73:82:73:63:2c:
53:22:11:db:4c:f7:83:98:b2:f7:18:a0:80:46:7b:
73:9f:0f:fc:aa:f8:63:78:14:30:78:f4:45:6f:33:
03:af:ae:91:c6:8d:a2:9a:36:e0:98:bf:ad:81:f3:
b2:c4:6d:db:1b:e3:45:0a:e5:40:83:c5:84:91:98:
be:07:e2:b2:d1:6a:0f:f8:15:15:fc:29:9c:bd:6a:
62:be:fd:34:6d:04:0d:ee:6a:bc:e3:cf:e4:e3:71:
3a:6a:14:9c:b8:68:73:b4:a1:f0:c7:3a:de:e6:a3:
e5:e6:b0:43:dc:47:97:67:73:48:ac:97:70:96:0a:
0d:00:e3:74:41:06:a4:b5:ce:d8:6f:e5:c0:9a:93:
77:b0:56:89:f6:8e:c3:b9:5a:c0:2f:0a:54:d0:1e:
7a:59:e6:00:65:e2:57:e2:5a:be:12:f6:ee:b0:f1:
f5:b4:f9:0d:b3:c5:d1:48:ea:7c:fc:12:30:28:69:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:E2:54:93:DD:35:B4:77:2E:6F:E9:24:2F:FE:FC:86:4B:85:B1
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4a:f3:32:34:51:b8:f2:3d:7b:37:d0:80:ea:f8:05:41:2e:
f0:f4:14:36:00:ba:73:ea:b1:0e:54:4c:73:9d:74:02:c5:70:
bc:b2:df:4b:03:df:82:76:9e:65:89:c2:cc:58:66:5b:3e:c3:
c6:ac:6a:2a:98:5f:fd:90:21:6b:45:76:b4:1b:0a:c1:67:15:
e6:96:9b:d7:59:3b:00:60:1a:20:0c:db:1a:5a:db:91:4f:e0:
01:7b:4c:20:23:dc:ce:6a:d8:78:f4:3c:09:d9:5d:db:41:fc:
ea:6c:e9:c9:5b:5c:ed:e9:9e:7f:9f:6e:86:f8:e3:6c:42:ad:
fa:2e:0b:23:47:79:d2:83:e8:30:19:d6:2b:22:de:8b:88:07:
c2:d3:a2:9e:4b:fe:c4:63:53:ca:cd:1c:ae:3d:77:86:fe:6c:
d1:06:ea:45:1c:b8:e6:08:96:01:ea:2a:37:da:c5:fc:a4:a1:
3f:e6:99:71:a7:0c:cd:f6:2b:17:43:51:65:6a:4f:06:85:34:
04:56:3f:87:c6:fa:20:86:ee:44:82:ca:6d:22:46:93:5b:4b:
d0:65:c6:3e:28:70:e8:f2:f6:65:d5:92:73:f1:2a:7b:b4:7c:
a1:55:6e:39:68:3f:a7:6b:42:f4:fc:c2:b8:0d:45:3e:16:2e:
8a:c6:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:43 2025 by rpki-client