Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: VDflv+ZO3nju5+lfs9lNjz3Ctj0ul2AvO2oXcCqtC1k=
Subject key identifier: BF:FD:3B:C1:1C:2E:25:59:07:58:85:5B:E5:D9:AD:9B:33:3B:38:EF
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 0197B6A0CEC051D45B86CA3F42A163538C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: svDujXfT47hXCjU92RqOp7DGJwAwnAK9GkdlGqI0gwc=)
2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ce:c0:51:d4:5b:86:ca:3f:42:a1:63:53:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=bffd3bc11c2e25590758855be5d9ad9b333b38ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:07:f2:cc:f5:6d:d3:c9:2d:7d:da:97:c5:
c8:cc:34:e4:56:5d:56:77:1b:03:f3:7d:62:a4:78:
31:89:3a:62:f9:f1:35:78:80:4b:17:00:60:ab:05:
cb:af:f9:bc:7f:c9:70:ef:b7:1a:ce:8a:65:a0:23:
20:1a:91:18:c5:a6:c7:46:eb:3b:46:74:9d:7d:66:
54:dd:00:b2:57:fd:4f:f7:ca:12:29:00:3f:79:17:
d2:c4:ab:80:a4:8d:a0:12:98:12:34:0f:a7:c3:6a:
75:b7:c2:3f:b2:ab:0b:3e:95:9a:fd:6d:22:a7:f4:
d7:a7:71:84:f4:a0:77:41:2e:9c:66:26:56:ee:ff:
91:31:34:77:3e:58:1d:0d:5e:db:55:f1:b1:56:25:
9a:cd:10:98:75:03:35:36:a9:eb:1d:01:83:11:d1:
a2:a7:0c:d8:42:59:6f:fb:5f:1c:6b:73:4b:17:6d:
f1:5e:2f:75:af:84:7e:2a:56:e3:fc:c6:ba:f4:32:
cd:de:97:5a:37:ed:20:7b:a8:bb:32:2c:99:6c:93:
a8:bc:bd:73:20:96:44:75:87:83:6d:83:e7:40:49:
c4:a1:33:08:bc:f1:57:a9:e5:c9:ff:ac:87:79:2a:
68:09:05:0f:9e:7d:dc:18:46:f2:de:b3:6f:40:67:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FD:3B:C1:1C:2E:25:59:07:58:85:5B:E5:D9:AD:9B:33:3B:38:EF
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ba:f7:15:ee:e9:77:28:99:8c:cb:cc:ce:a4:ff:d8:0e:8a:
eb:d3:ec:76:6c:41:0b:96:78:82:fa:e6:e0:88:1f:83:65:97:
5f:20:5c:74:50:a6:e0:b3:b4:d1:2c:38:f0:f8:9e:0e:96:68:
1a:1d:22:7d:31:b0:4b:3d:21:8f:b8:26:ce:f4:50:95:0a:b3:
90:4f:6e:a8:27:51:3f:df:21:9f:97:73:6d:59:f7:ff:56:4c:
66:04:c7:8d:a2:86:c0:c9:3d:f8:7c:f7:b2:b3:93:5c:68:f6:
42:b1:c3:dc:82:06:aa:2b:0d:14:fe:45:92:fb:6a:66:44:50:
17:aa:57:f6:79:06:e7:8f:b3:69:74:f5:e4:b4:03:ef:04:4e:
f6:1a:2d:f1:08:bf:ea:0d:9c:73:b3:ea:7f:77:4e:76:bd:06:
ec:16:a6:3c:5e:f0:8c:14:4e:9c:da:35:d1:f8:22:33:70:78:
e6:9f:e6:8e:2d:74:1e:72:25:aa:26:cf:28:2f:36:9b:f1:12:
78:01:cd:03:67:56:0c:1f:2d:3a:46:d7:fb:0c:f6:59:57:e1:
c1:5a:82:78:bc:f0:24:d4:99:8d:78:c3:02:4d:99:30:74:4f:
28:be:a7:33:77:76:e9:cc:ce:11:c1:7f:3e:7d:a4:a0:ea:1a:
ab:a7:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:08 2025 by rpki-client