Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: s3ITwN12pwpqRXbf4GaKU/38pciqhh0J29L6zmSjRgY=
Subject key identifier: 46:5F:FC:A9:9F:35:49:D6:82:39:E2:F4:9E:75:96:49:46:63:0D:3A
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 0196B85A3755559AE1EFB06575A4BBC4B2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 1419
Signing time: Sat 10 May 2025 04:00:42 +0000
Manifest this update: Sat 10 May 2025 04:00:42 +0000
Manifest next update: Sun 11 May 2025 04:00:42 +0000
Files and hashes: 1: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: sJnEyA4GkuUIvDc44y2yX69405na/PdSf4mhMBCRTsk=)
2: VIlea1HGjGCn_MVKwJV926-pJjE.roa (hash: A01QP610OFwth+XnetlpJQSsjmOQSdq9hALxJi5jMPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:37:55:55:9a:e1:ef:b0:65:75:a4:bb:c4:b2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: May 10 04:00:42 2025 GMT
Not After : May 11 04:00:42 2025 GMT
Subject: CN=465ffca99f3549d68239e2f49e75964946630d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:bc:70:c1:60:58:9b:ce:11:b6:4a:a2:5b:
19:47:b8:3c:2f:3d:5c:a8:e3:6b:3d:51:10:de:e7:
02:32:42:63:61:66:68:bb:0d:03:8d:f5:02:ef:56:
e7:4c:c9:2c:2c:b8:f6:6b:dd:e6:b2:99:c0:cf:2e:
c4:71:bd:4c:7a:7d:fb:2d:2a:5e:80:ed:59:15:c2:
f8:ae:7e:82:74:80:89:06:95:af:53:47:61:88:25:
e2:58:15:16:b5:9d:09:10:9a:04:d8:2f:82:06:bc:
eb:dc:68:30:0a:41:1a:1a:21:ff:f2:c2:92:7c:b3:
b6:32:f2:57:8f:1a:0e:a4:a4:c1:c5:c7:16:42:c8:
77:17:67:8f:48:a0:8c:c0:4c:35:9a:65:5e:1d:af:
76:c8:56:ff:56:dd:2f:ee:eb:9b:a5:3f:01:9e:8a:
c0:ff:7e:a4:c0:3e:92:22:43:e5:1b:5e:4f:44:30:
cc:5c:72:f6:dc:5c:29:45:17:2c:d5:0d:9c:4d:62:
52:77:44:3b:28:65:3a:cb:fe:73:33:83:71:2d:53:
0c:85:95:e6:60:0e:d3:5d:7b:14:9e:8f:c0:04:8a:
7c:7d:2e:ad:f0:9e:7f:98:4d:ef:94:2a:c5:b4:5e:
48:80:24:d5:4c:de:5c:a9:f6:30:40:43:92:8e:a9:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:FC:A9:9F:35:49:D6:82:39:E2:F4:9E:75:96:49:46:63:0D:3A
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2f:56:69:11:11:9d:25:c8:cd:3d:e5:cf:ae:16:e0:f6:55:
44:f5:94:c8:2b:77:71:54:7c:1f:e8:9d:de:7f:c4:a1:07:7e:
2d:ce:f4:54:e0:2f:d5:07:f0:a2:97:5c:ef:27:38:5e:d1:b5:
2c:aa:0c:f1:63:cb:f4:6e:81:39:c0:b0:ca:d8:79:2f:c6:33:
38:90:bb:71:86:a5:a1:89:e1:95:02:ba:f9:77:e2:1c:8b:5b:
fa:18:ec:5b:2e:11:92:9b:18:ab:43:69:48:d2:d6:1f:77:21:
4f:3a:11:6d:6b:a5:70:7f:ff:aa:09:a8:d2:ff:64:fc:ea:34:
d9:04:07:ec:28:16:91:75:f4:a1:80:d5:1a:78:9f:61:6b:72:
b7:0c:c8:e9:6d:9e:80:b2:83:37:ee:ff:ad:02:86:5a:b3:a7:
88:08:82:a1:b0:f0:60:e4:b2:8b:03:5f:0d:3f:4f:9a:09:bb:
2d:cb:5f:49:d8:84:ec:60:e4:6f:35:bb:a1:23:6a:ae:96:cb:
86:b8:b5:a5:59:1a:5b:69:67:f7:01:3e:6e:b1:c5:a5:c6:dd:
5c:76:49:bf:f3:07:3f:45:2c:de:f7:22:5e:7e:03:61:9f:6b:
4a:31:82:3a:b6:ad:f8:de:06:9d:06:6b:33:16:de:69:40:bc:
cc:39:46:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WjdVVZrh77BldaS7xLK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NzI4ZTliZDM3Mzk5ZGY5ZmZhZTU4N2JkMDY4ODRiMzUw
YTY1YjcwHhcNMjUwNTEwMDQwMDQyWhcNMjUwNTExMDQwMDQyWjAzMTEwLwYDVQQD
Eyg0NjVmZmNhOTlmMzU0OWQ2ODIzOWUyZjQ5ZTc1OTY0OTQ2NjMwZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ28cMFgWJvOEbZKolsZR7g8Lz1c
qONrPVEQ3ucCMkJjYWZouw0DjfUC71bnTMksLLj2a93mspnAzy7Ecb1Men37LSpe
gO1ZFcL4rn6CdICJBpWvU0dhiCXiWBUWtZ0JEJoE2C+CBrzr3GgwCkEaGiH/8sKS
fLO2MvJXjxoOpKTBxccWQsh3F2ePSKCMwEw1mmVeHa92yFb/Vt0v7uubpT8BnorA
/36kwD6SIkPlG15PRDDMXHL23FwpRRcs1Q2cTWJSd0Q7KGU6y/5zM4NxLVMMhZXm
YA7TXXsUno/ABIp8fS6t8J5/mE3vlCrFtF5IgCTVTN5cqfYwQEOSjqn37wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZf/KmfNUnWgjni9J51lklGYw06MB8GA1UdIwQY
MBaAFDhyjpvTc5nfn/rlh70GiEs1CmW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzIt
ZjhjZmEzM2Q2ODRlLzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzItZjhjZmEzM2Q2ODRl
LzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASC9WaRER
nSXIzT3lz64W4PZVRPWUyCt3cVR8H+id3n/EoQd+Lc70VOAv1Qfwopdc7yc4XtG1
LKoM8WPL9G6BOcCwyth5L8YzOJC7cYaloYnhlQK6+XfiHItb+hjsWy4RkpsYq0Np
SNLWH3chTzoRbWulcH//qgmo0v9k/Oo02QQH7CgWkXX0oYDVGnifYWtytwzI6W2e
gLKDN+7/rQKGWrOniAiCobDwYOSyiwNfDT9Pmgm7LctfSdiE7GDkbzW7oSNqrpbL
hri1pVkaW2ln9wE+brHFpcbdXHZJv/MHP0Us3vciXn4DYZ9rSjGCOrat+N4GnQZr
MxbeaUC8zDlGPQ==
-----END CERTIFICATE-----
Generated at Sat May 10 08:41:33 2025 by rpki-client