Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: FMP5U9xXRgw5znJeZbid3R52oAN2UJnPZ+U9v4bOE14=
Subject key identifier: 4A:95:07:A3:83:67:D7:C8:58:06:0B:A2:9E:57:17:1D:C4:5A:F5:01
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 0197CE3ACF8C572A8435364840D1E321EC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 0F64
Signing time: Thu 03 Jul 2025 03:00:49 +0000
Manifest this update: Thu 03 Jul 2025 03:00:49 +0000
Manifest next update: Fri 04 Jul 2025 03:00:49 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: rd3xAdcqyqDV0RW8e4IYwDYI2PZ6w3piLJBVxv2wqbs=)
2: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (hash: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3a:cf:8c:57:2a:84:35:36:48:40:d1:e3:21:ec:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Jul 3 03:00:49 2025 GMT
Not After : Jul 4 03:00:49 2025 GMT
Subject: CN=4a9507a38367d7c858060ba29e57171dc45af501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:9a:c4:60:55:a8:df:fe:09:49:57:c4:08:
12:7d:a9:6b:43:74:80:42:7f:16:7f:ef:53:4b:16:
64:c4:6a:70:f3:31:94:0e:6b:88:8d:f4:f7:b7:a6:
b9:57:ff:80:5b:60:66:cd:53:e4:63:b5:30:e9:88:
26:c9:d6:7e:e2:4f:7e:5b:4e:e2:ef:46:58:7a:3b:
6e:e3:6f:13:0f:10:10:cf:52:50:c2:83:16:81:16:
23:ab:47:87:f9:8d:35:2e:0b:0e:a8:75:cf:4e:2f:
6a:f8:3e:fc:c3:c3:47:7c:55:a3:e8:38:ee:63:dd:
c6:dc:cc:0f:af:e9:bd:27:24:72:77:6a:cb:2a:99:
7c:14:71:bc:4f:b0:71:98:17:a0:55:a4:54:9f:c7:
e7:44:1d:fe:7c:f9:32:42:c7:6a:b1:70:d9:60:41:
9a:04:d4:e7:fc:17:a0:28:74:cf:b0:46:88:04:28:
1e:4f:0f:1c:2e:0a:87:fb:e5:83:24:65:ad:42:aa:
86:23:04:72:8a:f6:b2:e9:97:b2:d7:28:ac:59:a8:
68:3b:a1:18:d0:40:ed:c2:7b:2d:eb:b1:de:f0:8c:
12:b4:b0:24:9f:41:b3:48:aa:cd:c5:7a:aa:11:59:
f6:60:68:ea:8b:4f:9a:ce:a3:79:a6:f3:fd:44:f2:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:07:A3:83:67:D7:C8:58:06:0B:A2:9E:57:17:1D:C4:5A:F5:01
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:74:e7:ed:d9:2c:86:10:fb:96:84:72:ce:34:c6:66:75:
cf:80:63:d8:fc:a7:57:15:b0:67:10:98:65:3d:51:7c:24:e6:
e3:0c:1a:8d:3d:53:09:dc:10:6e:75:d4:3e:f0:ef:23:4e:48:
77:d3:9a:e2:13:8c:2f:b1:85:ac:07:e0:95:63:8d:d1:10:5e:
37:d8:df:c4:f2:11:49:7b:f7:1f:ec:98:52:a5:06:0f:40:16:
10:fa:05:58:db:bc:3c:e1:5b:28:bd:c4:7b:ce:4b:60:d2:5d:
43:6b:45:da:05:34:a6:46:99:ab:9f:52:6b:ca:6c:8b:3a:52:
9f:03:43:cf:f8:a3:88:dd:af:5c:87:11:c2:a6:c0:59:39:4b:
a3:09:bb:76:71:92:3c:4c:e7:17:d2:77:81:e3:04:ab:66:c2:
13:67:d0:98:c6:a4:2d:0d:21:c9:3e:74:ad:de:f0:46:c3:4c:
da:0e:61:2f:18:6a:d7:9d:f0:a0:ca:3e:41:b8:42:02:69:f6:
a5:51:35:99:7f:3d:17:d4:78:1b:42:a1:4f:a3:56:f1:db:3c:
3d:10:d9:e9:94:61:b1:52:b0:ee:30:5d:73:72:4d:48:45:c7:
31:f5:85:54:5f:20:4c:43:33:83:1b:dc:12:79:18:e9:2f:b9:
63:5c:ce:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOOs+MVyqENTZIQNHjIeyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTRmYWJmZWYyMDNhOGVlMDhjY2I0N2RkNjQ3M2ZjZTc5
OWEyOGYwHhcNMjUwNzAzMDMwMDQ5WhcNMjUwNzA0MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg0YTk1MDdhMzgzNjdkN2M4NTgwNjBiYTI5ZTU3MTcxZGM0NWFmNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseCaxGBVqN/+CUlXxAgSfalrQ3SA
Qn8Wf+9TSxZkxGpw8zGUDmuIjfT3t6a5V/+AW2BmzVPkY7Uw6YgmydZ+4k9+W07i
70ZYejtu428TDxAQz1JQwoMWgRYjq0eH+Y01LgsOqHXPTi9q+D78w8NHfFWj6Dju
Y93G3MwPr+m9JyRyd2rLKpl8FHG8T7BxmBegVaRUn8fnRB3+fPkyQsdqsXDZYEGa
BNTn/BegKHTPsEaIBCgeTw8cLgqH++WDJGWtQqqGIwRyivay6Zey1yisWahoO6EY
0EDtwnst67He8IwStLAkn0GzSKrNxXqqEVn2YGjqi0+azqN5pvP9RPIMDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqVB6ODZ9fIWAYLop5XFx3EWvUBMB8GA1UdIwQY
MBaAFKIU+r/vIDqO4IzLR91kc/znmaKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYt
MjVjNWY3MTIzZTM1LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYtMjVjNWY3MTIzZTM1
LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyV05+3Z
LIYQ+5aEcs40xmZ1z4Bj2PynVxWwZxCYZT1RfCTm4wwajT1TCdwQbnXUPvDvI05I
d9Oa4hOML7GFrAfglWON0RBeN9jfxPIRSXv3H+yYUqUGD0AWEPoFWNu8POFbKL3E
e85LYNJdQ2tF2gU0pkaZq59Sa8psizpSnwNDz/ijiN2vXIcRwqbAWTlLowm7dnGS
PEznF9J3geMEq2bCE2fQmMakLQ0hyT50rd7wRsNM2g5hLxhq153woMo+QbhCAmn2
pVE1mX89F9R4G0KhT6NW8ds8PRDZ6ZRhsVKw7jBdc3JNSEXHMfWFVF8gTEMzgxvc
EnkY6S+5Y1zO5w==
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:08:58 2025 by rpki-client