Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: WbC12HnvLXqX7Tn80SHsjfkV+A90VhNTPXQKofO2hAo=
Subject key identifier: 41:EB:4D:EE:95:F1:A1:8B:B2:12:FF:04:C0:BC:BF:51:AD:16:F1:85
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 019880F92654C951A82A454698B37EA771AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 20:01:08 +0000
Manifest this update: Wed 06 Aug 2025 20:01:08 +0000
Manifest next update: Thu 07 Aug 2025 20:01:08 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: gz1ULdS5vsXcLQn6AHPomd29XTUrltJI5refLT1VUSQ=)
2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:26:54:c9:51:a8:2a:45:46:98:b3:7e:a7:71:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Aug 6 20:01:08 2025 GMT
Not After : Aug 7 20:01:08 2025 GMT
Subject: CN=41eb4dee95f1a18bb212ff04c0bcbf51ad16f185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:2d:5b:86:65:83:80:23:18:5b:4c:f9:c4:
6b:4d:46:d5:7e:19:4e:e6:d5:e3:99:1c:01:46:9d:
f7:5f:22:a6:ce:5b:01:9d:8e:97:54:e0:8e:c0:9f:
9d:44:f1:3f:2a:13:9a:c4:e1:6f:3d:2f:62:e3:1a:
a1:69:29:f9:14:9e:13:f6:a3:c8:47:f6:74:83:8e:
e7:91:e9:4b:5a:50:0f:c3:85:27:23:85:b4:07:2a:
00:ae:13:4e:2b:25:97:ec:2d:86:b5:98:bd:02:f1:
7f:b5:23:c4:03:55:d7:25:c6:68:4c:b6:07:2a:50:
c4:ef:fd:4d:33:76:8c:eb:e9:70:f7:3d:3e:48:0f:
20:33:b9:c5:6a:ab:3a:35:49:2e:e2:41:f8:dc:75:
6b:73:ed:68:7a:58:02:ca:7c:e4:8d:37:45:37:25:
90:31:01:da:c9:46:a9:77:02:9a:d7:bf:d6:cf:c6:
2c:2c:18:95:4e:c7:96:d2:58:fe:d4:8a:9e:c0:f0:
02:64:21:b6:be:a2:f7:4c:d3:59:24:a8:2d:de:89:
2e:a6:f1:dc:d7:ef:1c:6c:2a:bf:26:da:da:50:63:
3c:be:b7:9d:66:ad:00:c9:be:9c:25:55:ad:d9:53:
12:f0:02:fc:b4:2d:a7:28:51:6a:92:01:1a:59:7b:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EB:4D:EE:95:F1:A1:8B:B2:12:FF:04:C0:BC:BF:51:AD:16:F1:85
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0f:79:4d:fa:67:d5:36:ef:e3:fa:21:7e:bd:44:ed:e1:03:
4d:d0:56:8a:44:70:a9:f7:fa:20:75:64:8a:7a:2b:f6:83:3a:
55:28:76:4d:72:3c:aa:a9:6f:7d:75:da:47:f9:f1:f4:80:5f:
20:7b:2d:3a:0e:06:34:a6:58:d6:a7:98:1c:7b:4e:04:db:3c:
99:a8:4e:d0:86:a7:f5:df:82:ef:c1:fa:08:60:01:54:e0:fd:
8b:65:6f:f9:23:4e:b4:c1:1d:cf:53:65:04:9e:0c:9d:da:c1:
27:03:59:0d:dd:22:00:6e:54:ff:08:c9:60:e0:4e:6d:28:a1:
9d:6e:f2:8c:34:e1:d2:68:68:20:c0:d6:aa:26:21:bf:30:e4:
d6:20:3a:59:89:1e:08:cb:c9:98:f7:15:db:80:26:5a:07:40:
0e:9f:70:93:f5:21:77:5d:eb:0a:82:74:9a:91:af:44:15:ed:
10:99:75:d5:6c:0c:76:89:dc:61:44:7c:80:60:c2:a4:7f:c1:
63:32:2c:6a:87:fc:e8:49:80:f9:d7:4e:b8:d6:d5:49:36:73:
12:58:c9:dc:14:74:8d:6e:6b:49:96:21:89:86:97:6b:5d:42:
da:8f:5e:e3:d8:33:68:f5:ff:2e:9d:34:3b:b8:3c:dd:ad:69:
0f:37:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:14 2025 by rpki-client