Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: BByjbgdNYaHLtLl/bmliTnsO+3cadta9nzYdI+ZvooY=
Subject key identifier: B9:E5:7F:5D:B4:A4:42:FB:61:F7:28:75:F7:F7:09:17:80:59:02:74
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 0199FB460AD2424A55A8F61B216DD2E2B1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:35 +0000
Manifest this update: Sun 19 Oct 2025 07:01:35 +0000
Manifest next update: Mon 20 Oct 2025 07:01:35 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: UVJP0z2IehEFAbWoBZ0AH7ar8fw3GeOmNKROib5q/YY=)
2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0a:d2:42:4a:55:a8:f6:1b:21:6d:d2:e2:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Oct 19 07:01:35 2025 GMT
Not After : Oct 20 07:01:35 2025 GMT
Subject: CN=b9e57f5db4a442fb61f72875f7f7091780590274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:a0:a9:14:66:fa:08:7b:be:16:2b:76:2e:
9d:77:cb:0f:45:bf:a6:b4:83:ad:12:02:58:cc:40:
02:38:ec:68:b0:f6:78:28:1b:3b:04:2e:f9:75:f3:
78:ce:49:61:1c:85:93:95:f1:d6:4d:29:41:b4:b1:
1a:3e:df:fd:f1:7c:c5:1e:5d:e1:49:5f:01:68:f6:
26:3a:67:49:31:f6:e1:b7:31:9b:65:26:c6:df:d0:
ac:ac:f5:0b:10:9d:a6:8a:3b:41:2d:42:ec:f4:ff:
15:54:7a:94:96:66:b7:3c:cf:12:c3:7e:8f:94:5a:
14:fe:b7:6e:15:75:1d:b3:9b:47:e7:ff:11:95:65:
fe:0a:06:d7:61:a1:32:88:fb:e8:a4:e0:19:a2:8c:
af:de:bf:a1:75:75:2d:06:d9:8b:06:67:9b:d9:87:
d0:b5:e4:1d:7c:96:b9:79:68:5a:2f:ac:36:86:0a:
fa:4d:cc:9d:9d:2b:ed:32:39:e0:2c:03:0f:da:a8:
8d:f2:5a:b6:5e:5b:db:d7:cb:d9:b5:df:16:08:8e:
8b:b3:fa:26:0a:8c:00:3b:e1:99:7b:84:61:d0:ce:
2c:02:e9:46:31:5b:22:47:0a:14:8c:2a:36:c2:94:
60:1a:10:85:95:d8:06:8c:10:91:13:22:23:e7:a8:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:7F:5D:B4:A4:42:FB:61:F7:28:75:F7:F7:09:17:80:59:02:74
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6e:84:e1:9c:d4:3b:2b:55:87:66:5b:5d:cd:4e:ca:38:df:
4b:b9:1e:2c:63:eb:9f:6f:db:7c:4f:a7:27:b7:68:0a:76:87:
6f:b8:d0:9d:11:89:4e:e0:37:1f:57:5a:f8:0c:8f:b1:d2:3f:
bf:1d:23:99:d5:1e:1d:9c:60:45:ec:0b:2d:04:e1:6b:1b:9a:
6d:ed:45:45:c0:85:d0:bf:79:32:7c:4a:f2:fc:2d:64:aa:77:
fb:3b:49:a1:40:f7:0f:12:3b:6f:b8:e0:7f:51:60:05:e2:7e:
fd:4d:5a:3c:8b:2f:b6:29:10:03:a3:c9:05:72:5f:f2:99:6e:
53:f5:27:48:a5:de:b8:f6:20:21:1f:92:57:a7:6f:7d:c8:42:
03:4e:cc:e6:8e:fb:bb:e3:9c:16:75:b3:79:46:32:c4:3c:62:
49:ab:6d:5f:45:be:4f:98:1e:ef:05:26:3e:62:39:7c:65:7b:
d8:9a:45:0f:ee:a7:3a:7b:c6:e6:7e:0e:b9:3b:a8:44:b8:fa:
09:19:35:bb:89:5e:af:bc:25:52:cb:92:ed:a4:93:a3:6d:71:
00:24:68:08:2d:8a:84:4c:4f:ce:f4:44:e8:62:ba:cc:7d:95:
4d:d9:76:ef:73:e2:93:22:9a:1d:5c:db:01:97:cb:4a:59:22:
ab:3d:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:45 2025 by rpki-client