
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: myqaDHjyVmxZH5VNAXlPOkOE/LEB5IJ3jVXPq5Py0QM=
Subject key identifier: 25:BB:EB:95:BA:1A:D0:23:48:1B:07:A3:0D:B1:01:F1:A8:48:6D:A4
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 0197B820CDA456C57419AC688A45A875BF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: 3kdzVkVIKa2iluCzOk2Dzxs6TBImfs5IPS01BEn4dAc=)
2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cd:a4:56:c5:74:19:ac:68:8a:45:a8:75:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=25bbeb95ba1ad023481b07a30db101f1a8486da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:0c:13:3b:19:25:2e:8b:56:6e:29:ae:f4:
dd:ce:cd:af:51:67:09:7c:33:f5:79:56:b3:33:a6:
9d:ee:2c:5a:e4:9b:ea:63:fd:59:fa:a5:1d:51:3e:
c9:4d:b5:f2:30:d7:12:ce:d3:83:55:de:2c:e2:86:
79:df:8b:b5:3c:4e:c6:55:69:25:b7:cf:a7:64:71:
9d:67:8a:1b:a3:c6:14:9b:e1:71:10:1a:f3:59:8f:
5c:98:37:4d:8c:3b:01:20:99:ab:e6:5b:97:32:8a:
5e:bf:10:35:a1:76:55:f6:ce:e0:b9:66:e2:44:ee:
63:c2:e3:39:21:c1:6c:35:0f:5e:5b:92:39:ef:1c:
6b:a9:0f:2e:34:9c:87:d5:d9:9e:e6:dd:b6:82:fb:
13:d0:94:34:c6:c8:0a:e2:e2:01:43:3b:f8:4e:d7:
09:d7:5e:e2:01:2c:e0:35:be:62:3e:5a:01:54:70:
b3:f4:ec:fe:47:54:89:54:34:26:fe:e3:b4:c4:df:
58:76:39:6e:36:b4:50:bb:0b:ef:07:65:cc:0a:12:
e0:fc:0d:23:a2:c9:74:d9:74:02:50:23:39:8d:7b:
e0:48:be:29:c3:36:33:cb:0e:af:e5:b8:80:f6:0a:
aa:c2:63:cb:bb:60:28:ba:07:aa:65:1a:c5:c0:8e:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BB:EB:95:BA:1A:D0:23:48:1B:07:A3:0D:B1:01:F1:A8:48:6D:A4
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:b0:0a:a3:7e:b5:49:b9:73:f2:39:8a:cc:85:3e:83:18:
c0:7b:10:dc:bc:78:5d:89:42:5f:43:ab:86:58:4a:27:6a:33:
cb:0b:d1:a3:31:31:95:f3:ab:b5:32:fc:ff:b0:b5:11:c2:88:
3f:55:c0:fa:fe:f5:0b:58:ad:9c:b0:fe:bd:e9:f9:c7:f2:3a:
e7:ea:37:6a:36:92:52:b1:33:2c:d8:4f:57:35:c6:6f:6f:d8:
68:cd:fc:c6:8f:27:ce:b0:73:90:85:e7:47:bb:b1:87:e3:b5:
12:0b:82:52:dd:7f:c8:bd:17:c9:f0:e5:6e:ed:62:eb:7e:86:
d4:ec:64:51:a6:57:ec:99:2c:d1:7e:7b:3a:e8:15:f7:d7:f0:
86:3a:05:d8:23:0f:b2:52:f1:9c:cc:79:d0:2c:b0:8c:80:e6:
d0:5d:09:c3:f1:eb:53:bb:b4:eb:00:1a:53:d1:0e:d0:d0:4b:
2d:be:b6:74:06:43:8a:2d:59:3c:82:62:24:c1:d5:28:f1:c0:
0a:3a:5b:95:e7:7e:9c:29:25:9d:ee:dd:7f:52:08:a1:00:0a:
6e:73:b0:79:7f:19:64:78:04:4c:6b:ed:19:57:24:83:59:55:
bf:06:a9:62:56:76:5a:ef:98:f1:1e:f0:d1:e8:b0:98:78:2d:
bb:fa:be:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:35 2025 by rpki-client