Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: 3GUlbhV/z5UdWSAgSIazwbeNZAMwPNHvYs6fBzwXhUU=
Subject key identifier: 94:23:8D:23:20:45:DF:1D:2C:D8:3C:23:30:04:40:63:37:E5:48:5E
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 0196BF00A1ECB51F30C195A501D16C79B20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 11:00:11 +0000
Manifest this update: Sun 11 May 2025 11:00:11 +0000
Manifest next update: Mon 12 May 2025 11:00:11 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: 0IRQx8KlkaVgkAIkwmzF3mFzVnGd+Um5ZIUa1eaf4Do=)
2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:a1:ec:b5:1f:30:c1:95:a5:01:d1:6c:79:b2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: May 11 11:00:11 2025 GMT
Not After : May 12 11:00:11 2025 GMT
Subject: CN=94238d232045df1d2cd83c233004406337e5485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:24:20:85:35:b0:fa:c9:30:38:b9:a8:f7:d3:
2b:6a:58:73:de:b3:8c:be:ea:2c:cc:38:71:ea:42:
a1:b9:d5:cf:25:49:17:96:54:92:e7:fa:b2:9e:c2:
a8:ba:15:aa:0a:0e:b5:f5:ea:5e:e5:c0:0f:98:64:
de:f9:f9:91:e3:06:33:7e:81:cc:23:cc:5d:70:61:
d7:b2:25:4c:7e:4c:03:7c:f7:a0:6f:f9:fb:a7:32:
0c:f7:18:7f:58:7c:07:93:85:71:4a:39:49:93:89:
9f:be:fd:ab:c0:45:12:f4:93:42:fa:06:bd:1f:7d:
5d:80:af:37:0d:87:4a:96:c2:84:d2:01:6f:3e:00:
3e:6d:f5:9e:94:7c:8a:8d:ea:95:bd:12:86:1e:c3:
50:05:5f:3b:8c:99:a1:bb:e6:f3:02:6e:15:96:2f:
24:22:cc:c3:3d:2a:a6:bf:eb:91:2f:73:8d:0c:0e:
f1:e7:d2:e4:33:0e:9b:da:08:e0:bc:23:39:1c:e7:
6e:a9:24:e1:c1:00:c0:c1:9d:0b:8f:7c:81:ff:3b:
f4:66:0b:b3:47:7e:36:84:3e:4f:1c:11:e5:98:b6:
92:33:f1:9d:97:1d:ce:b1:1d:21:6c:d9:4d:1b:3a:
f5:57:e8:22:87:52:ca:4e:73:c4:09:c1:63:09:71:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:8D:23:20:45:DF:1D:2C:D8:3C:23:30:04:40:63:37:E5:48:5E
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7c:3d:48:0e:7c:3d:21:7f:32:c6:ce:d6:bb:ce:ea:65:8c:
c3:eb:4d:a8:fe:48:85:20:d5:b4:c0:86:da:51:c8:d1:a4:ba:
90:18:9e:c3:62:5f:ff:26:bd:17:bb:40:e8:79:1c:be:a7:fa:
d4:83:c6:d1:50:03:ef:80:eb:c8:14:1e:2f:22:9f:20:ac:fa:
98:5b:1c:81:a8:f0:bb:a7:14:24:2a:41:41:74:69:2c:33:ed:
bf:b3:38:9a:14:27:84:27:ef:70:28:59:e8:79:f7:14:15:0d:
fe:44:b3:9e:53:89:b1:8a:42:43:c0:c4:a6:d0:22:6a:57:61:
a7:76:a9:1a:26:c9:f9:df:08:41:d4:76:63:2e:69:64:12:30:
04:77:10:1f:40:04:a4:a1:cc:ac:8e:da:9b:cd:dd:69:76:77:
6f:f1:1b:c5:2c:fe:91:6a:dc:bb:31:24:33:ea:74:02:b9:d9:
ed:83:27:99:f9:7c:ab:e7:e2:a3:20:d1:63:db:35:2b:1d:d7:
1a:b6:3b:da:93:86:ae:1f:41:bd:ff:79:20:94:e2:d4:59:9e:
77:ca:ec:2d:06:66:b7:61:14:2c:59:e0:c8:4d:45:9d:1b:8b:
53:91:a2:18:f4:2c:5d:46:fd:c5:2d:61:25:ac:5e:72:1f:66:
d4:60:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:15:08 2025 by rpki-client