Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: hsQcJ7HxlOdZ2DpgQvMakile6J8dsE4FiRsFYwdrAPI=
Subject key identifier: 58:9D:B8:4B:14:91:92:20:9F:69:89:C3:68:B9:A8:A1:1F:EC:B4:8C
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 0198D4043E8D0DE27A6EA2AE1BC4942858E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 1647
Signing time: Fri 22 Aug 2025 23:01:44 +0000
Manifest this update: Fri 22 Aug 2025 23:01:44 +0000
Manifest next update: Sat 23 Aug 2025 23:01:44 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: ybod4rnIGyRWHm2IpNzRTNo/pvTMO4PZQ1VI7t+c5jo=)
2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:3e:8d:0d:e2:7a:6e:a2:ae:1b:c4:94:28:58:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Aug 22 23:01:44 2025 GMT
Not After : Aug 23 23:01:44 2025 GMT
Subject: CN=589db84b149192209f6989c368b9a8a11fecb48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:6a:28:39:3b:67:dd:e7:5b:06:d5:81:5b:
a1:6b:0d:33:26:79:ba:54:8e:10:ea:67:7f:e0:0f:
7f:d1:73:0d:52:94:7d:19:e5:f2:39:23:1f:dc:ba:
80:0c:00:b9:56:4f:26:58:a4:78:9a:6d:08:5c:3b:
82:d9:64:84:a2:8f:54:56:1d:e7:7b:79:50:98:05:
44:13:91:c9:98:51:d6:9a:3d:f9:4e:65:6f:f0:18:
d1:5c:9f:60:5a:82:ff:57:d4:63:36:6c:a1:96:c0:
5d:52:c5:76:06:97:17:ec:0a:20:35:e6:ae:49:06:
53:85:81:77:34:ca:38:e0:f8:c0:b9:15:29:66:5d:
24:fb:d0:bc:f3:9c:e8:86:22:1b:bf:eb:15:fe:ea:
cd:bf:a8:10:2c:dd:ec:e7:8b:79:91:1e:70:f5:c5:
e3:df:c4:04:98:c4:84:1b:ee:5c:ea:07:e9:96:8a:
c9:87:60:9f:76:48:cc:a5:d8:8a:4d:e8:50:77:a9:
04:59:14:c3:36:fe:ad:cb:3f:54:07:cf:bb:c1:57:
2e:8c:1f:f3:10:aa:ec:8c:ef:3d:37:59:6f:31:ba:
0c:f2:f1:af:98:1d:de:76:bc:2a:99:72:d1:7a:f4:
4f:09:70:c3:4d:da:f5:ca:c8:25:f9:f6:31:43:96:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9D:B8:4B:14:91:92:20:9F:69:89:C3:68:B9:A8:A1:1F:EC:B4:8C
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f3:7e:4a:45:1f:eb:00:5a:9a:ab:cd:43:37:95:d7:5f:4d:
e9:05:85:6a:bc:2d:69:67:f1:c7:72:d5:b5:a4:92:53:37:b6:
cf:36:c3:a8:dc:5e:e3:f9:92:55:2f:52:fb:7f:3c:83:b5:28:
98:6c:f7:b6:e1:4b:db:8b:4b:56:ef:4d:7d:3a:7a:c4:55:a8:
b8:b3:5a:74:72:b4:93:cd:0f:04:ef:78:07:6e:11:90:ec:6a:
e1:44:67:fe:3d:4f:69:32:27:a6:c8:53:e1:36:d3:0f:fd:36:
c4:cb:5c:d6:c3:ff:0e:19:47:fd:3c:26:ee:da:8a:22:af:5f:
54:2e:d0:08:9f:ba:73:51:30:3e:8d:88:55:b4:d8:95:14:66:
b1:65:a4:c1:a4:78:87:56:1a:05:c3:9c:6f:db:87:af:57:51:
32:a1:c2:ff:73:a2:a5:b1:65:5a:7c:00:dc:7f:0b:a1:08:87:
00:46:64:a3:26:bb:62:62:de:f2:83:c1:2a:a3:3b:73:93:c1:
65:78:c8:73:a7:d0:ba:7d:8f:36:d7:f5:48:46:20:07:04:1a:
cb:d5:c6:3e:3e:7f:b1:25:f8:85:b7:0b:3b:25:a0:71:91:89:
e3:ea:83:48:a4:c5:c8:af:58:f1:3e:7d:54:a9:94:8b:3c:a1:
b6:fb:64:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:53 2025 by rpki-client