Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier: R5zgt2m6Y8Ns6KuCg9ETv/CtKauu3yGjqyTe3Ca1RsU=
Subject key identifier: 8D:72:E4:E8:B3:58:00:C9:F8:98:8E:0B:CB:40:0E:14:1D:A4:18:41
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 0197B70EAEF6659D4C5AB476B3B5529E30AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number: 14B5
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: bTl1SfHNuKoHqnPnIw7pAEY1U6ObkW52aKvMXocrfDE=)
2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ae:f6:65:9d:4c:5a:b4:76:b3:b5:52:9e:30:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=8d72e4e8b35800c9f8988e0bcb400e141da41841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:bd:a3:95:30:a8:69:0d:86:8d:ae:50:04:
79:47:8c:08:d6:d9:1e:31:76:51:41:14:37:dc:6f:
f3:11:4b:1e:a6:7b:24:d3:54:a8:fe:a0:8f:1a:8a:
c1:d5:81:7a:b6:ea:1b:4f:ee:ad:63:32:e7:c6:67:
f5:94:77:e6:90:64:d6:e9:3c:75:31:ac:73:ef:76:
43:1f:63:b3:fc:a6:5c:7c:2b:12:46:ff:0f:9f:1b:
9e:bd:f4:47:a7:de:57:02:28:d1:14:7c:8b:07:47:
32:dc:30:78:8c:e6:81:be:06:11:c5:75:67:29:69:
6e:76:37:55:66:2a:65:58:98:91:2d:cd:cc:d3:d2:
4b:24:f3:3c:ff:a8:e9:86:ba:f3:09:fd:e2:59:66:
34:4c:fa:dd:1e:30:1d:b6:0e:a3:a9:8d:57:97:a6:
0e:10:d2:1a:70:2a:31:fc:68:13:8b:a1:5e:fb:20:
24:fb:e6:90:4a:bb:2e:96:a3:1b:72:b9:cb:9f:21:
bc:82:92:71:92:f0:c5:c3:c0:3e:be:1a:10:cc:22:
a8:84:ad:00:be:7e:cd:59:f5:01:d4:45:99:a3:87:
f7:d3:28:a0:21:c2:69:79:9a:0d:0a:6b:b7:c5:39:
68:3a:8d:d0:02:fa:a3:f6:34:45:82:92:0f:2e:25:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:E4:E8:B3:58:00:C9:F8:98:8E:0B:CB:40:0E:14:1D:A4:18:41
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a5:cb:37:a5:43:61:2f:12:28:a8:6c:5b:05:fd:18:08:67:
d2:ef:9d:51:88:1a:e2:7c:06:03:30:cc:6c:c6:30:59:cc:4b:
4c:af:f6:cf:d0:4c:8e:e7:6f:d4:ca:c5:3d:84:b6:40:52:b4:
cb:91:43:93:9a:71:bb:5f:45:28:43:36:84:a7:6e:bf:a5:50:
93:a7:ed:17:1c:af:83:81:53:78:0d:14:48:8c:15:7b:5e:b5:
87:d6:60:d9:a3:54:40:07:f5:d2:55:e8:5f:d2:ff:d3:6a:52:
d8:9a:a0:5f:d6:58:98:47:a1:83:52:ff:75:f0:cf:7a:67:9a:
5b:9d:fe:b9:c9:22:be:ed:d2:7e:b6:d4:c6:d2:28:df:70:64:
56:99:39:ce:84:72:1c:a3:db:c0:54:00:fa:f6:02:27:c8:21:
48:21:e5:33:04:08:c2:0d:a9:69:b7:a0:3b:65:e3:02:72:a3:
20:56:57:c1:ff:0e:6b:c3:b9:94:4a:81:79:9b:cf:b5:ec:c6:
2f:33:ea:86:1a:6e:46:7d:04:9f:84:c9:eb:0e:28:91:d9:29:
65:97:78:87:28:50:5b:e7:2c:22:7c:a3:b8:35:04:fc:a8:92:
f8:a6:59:38:c0:b1:02:31:1d:d0:e8:02:c5:02:23:f2:66:57:
97:3d:c7:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dq72ZZ1MWrR2s7VSnjCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTI4NTRhODQwMGQ4Yzg3ZWE0ZGU3YTIyZmRmMWJmNTc0
YTkwMzEwHhcNMjUwNjI4MTUwMTIyWhcNMjUwNjI5MTUwMTIyWjAzMTEwLwYDVQQD
Eyg4ZDcyZTRlOGIzNTgwMGM5Zjg5ODhlMGJjYjQwMGUxNDFkYTQxODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz69o5UwqGkNho2uUAR5R4wI1tke
MXZRQRQ33G/zEUsepnsk01So/qCPGorB1YF6tuobT+6tYzLnxmf1lHfmkGTW6Tx1
Maxz73ZDH2Oz/KZcfCsSRv8PnxuevfRHp95XAijRFHyLB0cy3DB4jOaBvgYRxXVn
KWludjdVZiplWJiRLc3M09JLJPM8/6jphrrzCf3iWWY0TPrdHjAdtg6jqY1Xl6YO
ENIacCox/GgTi6Fe+yAk++aQSrsulqMbcrnLnyG8gpJxkvDFw8A+vhoQzCKohK0A
vn7NWfUB1EWZo4f30yigIcJpeZoNCmu3xTloOo3QAvqj9jRFgpIPLiU1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1y5OizWADJ+JiOC8tADhQdpBhBMB8GA1UdIwQY
MBaAFDoShUqEANjIfqTeeiL98b9XSpAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMt
NjgyOWQ2OGUyYTU0LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMtNjgyOWQ2OGUyYTU0
LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaXLN6VD
YS8SKKhsWwX9GAhn0u+dUYga4nwGAzDMbMYwWcxLTK/2z9BMjudv1MrFPYS2QFK0
y5FDk5pxu19FKEM2hKduv6VQk6ftFxyvg4FTeA0USIwVe161h9Zg2aNUQAf10lXo
X9L/02pS2JqgX9ZYmEehg1L/dfDPemeaW53+uckivu3SfrbUxtIo33BkVpk5zoRy
HKPbwFQA+vYCJ8ghSCHlMwQIwg2pabegO2XjAnKjIFZXwf8Oa8O5lEqBeZvPtezG
LzPqhhpuRn0En4TJ6w4okdkpZZd4hyhQW+csInyjuDUE/KiS+KZZOMCxAjEd0OgC
xQIj8mZXlz3HqA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:32 2025 by rpki-client