Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: ppoWce41BrXu4Vm7JmCUPzTm9l1VMa8K+C0Ud6gKH8Q=
Subject key identifier: DA:07:B7:C1:7C:2F:E3:53:26:C8:33:42:91:43:54:64:FE:FA:E5:F1
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 0197B745273BD2DD1A42F293B8B047065CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 149D
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: cK1ekQsBhMVCN1mgIdmMcQmtMfJgwLb+8tUYRb9jcl4=)
2: VIlea1HGjGCn_MVKwJV926-pJjE.roa (hash: A01QP610OFwth+XnetlpJQSsjmOQSdq9hALxJi5jMPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:27:3b:d2:dd:1a:42:f2:93:b8:b0:47:06:5c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=da07b7c17c2fe35326c8334291435464fefae5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:45:25:1b:c9:8d:c4:3e:9c:00:6b:a7:32:
c7:cc:6d:17:68:e1:77:bf:8c:0c:7e:d8:c7:c5:13:
ea:f7:7a:fd:b7:df:0f:11:9e:ba:d2:b7:7b:82:55:
ff:a6:80:d1:34:86:42:44:b3:63:a0:61:fb:c5:9c:
3d:01:31:08:16:f0:95:2d:b2:7a:b1:25:21:e2:07:
e4:19:50:21:bc:8c:31:80:6a:d3:3e:38:39:d9:70:
24:34:6d:a3:22:95:24:34:d1:0c:86:fb:23:8f:9c:
68:13:f1:3f:3a:2c:fb:11:55:0a:8d:73:8c:b3:88:
43:73:3e:af:cd:de:b9:1d:d8:a5:39:34:8c:bc:54:
67:8d:de:57:63:3f:6e:f8:59:24:e9:44:9c:79:43:
fd:1d:48:aa:03:a6:91:4a:a4:74:ca:69:ff:c7:b1:
82:81:b8:37:1e:c6:e7:f0:e8:06:37:41:47:a2:12:
54:5c:68:86:05:15:fc:4d:c0:c7:5c:76:ec:d3:fb:
19:e9:0d:15:66:6d:4e:18:f4:d3:6c:e3:7b:dd:0a:
eb:65:e8:6a:15:02:20:fe:30:0b:16:2e:a4:7d:34:
c9:13:b2:ff:d0:74:ff:a8:f6:64:98:d9:9a:7a:75:
6a:5c:43:a4:ce:5a:66:43:61:ae:2b:8a:0a:c3:54:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:B7:C1:7C:2F:E3:53:26:C8:33:42:91:43:54:64:FE:FA:E5:F1
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:55:2b:77:88:65:a7:46:31:5b:6a:0a:4a:c3:84:9f:2f:f1:
40:6a:85:17:17:df:64:87:31:27:de:74:96:aa:b4:e0:5b:60:
ae:93:8a:4a:d3:bb:3c:68:8f:48:46:fe:7b:de:8e:6a:0f:93:
cb:ca:15:cd:57:d4:17:a5:4f:ca:18:74:e4:15:76:87:72:74:
20:93:07:49:63:00:df:34:0e:4f:28:74:c8:e4:ba:0f:d4:07:
90:6b:53:26:4f:6e:8f:cb:47:ce:ed:8b:6a:28:2c:a8:4a:7f:
3b:9d:6b:95:18:10:0f:f4:5a:e2:75:07:e7:dc:a5:ea:69:18:
9b:81:37:8a:16:a7:05:ee:3b:77:69:0d:b5:e4:bf:c1:d1:16:
3b:e0:18:fd:8a:1e:80:8a:00:31:04:23:5b:cc:e8:76:1d:28:
14:b6:55:ef:26:f3:0a:9d:1a:87:8c:ce:64:d5:19:13:e5:5c:
39:68:cb:b8:45:60:34:94:7a:a3:c2:f5:65:21:6c:32:a4:bb:
c5:e6:51:06:c1:b4:f7:10:1c:72:8e:49:5a:0e:6d:58:02:31:
90:7d:da:b5:7b:8e:43:44:31:1f:78:11:7a:bc:fa:c8:20:2b:
64:aa:3f:7e:9e:c0:dc:83:77:4f:19:b6:76:81:44:0a:5c:8c:
76:a7:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:20 2025 by rpki-client