Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/628406-3e2c-4896-82ea-250544277d5c/1/OhsBRND2_wuDzON2eUYxdFt8p6A.mft
File: OhsBRND2_wuDzON2eUYxdFt8p6A.mft (raw, json)
Hash identifier: h7nxBbngweZYTIEJv/F3vHhBG3FqEts+S1cIL4yfw7k=
Subject key identifier: 4F:3D:4A:6E:EB:60:9B:51:B2:AC:EF:D0:7D:D3:E3:6D:C8:3A:54:77
Authority key identifier: 3A:1B:01:44:D0:F6:FF:0B:83:CC:E3:76:79:46:31:74:5B:7C:A7:A0
Certificate issuer: /CN=3a1b0144d0f6ff0b83cce376794631745b7ca7a0
Certificate serial: 01976A3CB35E27F642717DFCEEA407643AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhsBRND2_wuDzON2eUYxdFt8p6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/628406-3e2c-4896-82ea-250544277d5c/1/OhsBRND2_wuDzON2eUYxdFt8p6A.mft
Manifest number: 10BE
Signing time: Fri 13 Jun 2025 17:00:52 +0000
Manifest this update: Fri 13 Jun 2025 17:00:52 +0000
Manifest next update: Sat 14 Jun 2025 17:00:52 +0000
Files and hashes: 1: OhsBRND2_wuDzON2eUYxdFt8p6A.crl (hash: gdtwPAlUQldQDEcQOHrHXFlAz+2M6mpf+y8omhiqG+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/628406-3e2c-4896-82ea-250544277d5c/1/OhsBRND2_wuDzON2eUYxdFt8p6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/628406-3e2c-4896-82ea-250544277d5c/1/OhsBRND2_wuDzON2eUYxdFt8p6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhsBRND2_wuDzON2eUYxdFt8p6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:b3:5e:27:f6:42:71:7d:fc:ee:a4:07:64:3a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1b0144d0f6ff0b83cce376794631745b7ca7a0
Validity
Not Before: Jun 13 17:00:52 2025 GMT
Not After : Jun 14 17:00:52 2025 GMT
Subject: CN=4f3d4a6eeb609b51b2acefd07dd3e36dc83a5477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:e5:09:b0:f4:e1:cc:71:2b:a9:89:7b:25:
60:ea:61:12:b4:40:8b:53:84:eb:d4:8e:a1:10:af:
29:92:f2:80:4a:0c:bb:91:9c:aa:c9:96:14:d9:11:
c2:fd:7c:ec:cf:c7:c6:94:95:2a:fd:db:79:4a:a8:
b4:8d:f9:dd:cc:c3:4b:64:92:30:cb:9b:c9:ec:f5:
b2:3d:49:ce:02:78:76:dc:71:05:20:ed:6a:29:ea:
cf:02:1d:f2:38:c6:a3:bb:54:62:8f:04:b1:82:b7:
28:97:e0:70:64:04:23:e2:d2:b8:7f:3a:5a:3c:b8:
64:f4:c8:08:6e:31:d7:56:c7:b4:a5:e8:3a:19:36:
bc:0a:a9:07:50:bf:1a:04:b1:19:3b:8f:8d:a1:16:
e0:b1:1d:38:c3:29:45:b4:4e:21:aa:61:61:9e:95:
be:7b:4c:42:08:23:36:86:55:b3:96:c1:70:25:d2:
80:76:cd:1c:2b:60:d5:1c:bb:c9:a8:c5:a3:5d:32:
20:63:56:a1:15:9c:48:d1:1a:90:e4:d7:d2:eb:fd:
c2:df:49:78:11:a5:99:1e:bb:0b:1b:0b:6b:32:f6:
45:a3:4f:eb:eb:0c:1f:9b:da:d5:3c:07:2f:0f:b7:
a1:a0:cf:ee:56:05:83:d5:50:75:c5:30:55:43:59:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3D:4A:6E:EB:60:9B:51:B2:AC:EF:D0:7D:D3:E3:6D:C8:3A:54:77
X509v3 Authority Key Identifier:
keyid:3A:1B:01:44:D0:F6:FF:0B:83:CC:E3:76:79:46:31:74:5B:7C:A7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhsBRND2_wuDzON2eUYxdFt8p6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/628406-3e2c-4896-82ea-250544277d5c/1/OhsBRND2_wuDzON2eUYxdFt8p6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/628406-3e2c-4896-82ea-250544277d5c/1/OhsBRND2_wuDzON2eUYxdFt8p6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:18:29:0a:92:b9:68:99:97:99:5f:1e:13:bc:2c:6b:e0:
8c:a1:63:ff:47:59:9d:17:5c:12:2d:b2:dd:a4:ce:26:a8:a4:
cd:47:fd:2f:66:83:43:cc:75:14:2d:42:43:b7:2d:db:03:4c:
23:2e:3c:47:45:97:d4:5b:b9:3a:33:c9:60:2a:0d:4a:01:d2:
56:9d:18:fd:28:9d:07:ad:3d:cd:74:95:ec:d2:34:e9:a6:68:
49:c8:eb:28:d3:62:8b:98:c2:5b:36:c7:02:95:16:61:2a:12:
d3:86:e7:38:7a:28:c5:a8:79:28:3c:eb:40:93:04:62:32:b2:
33:19:c5:9e:be:61:49:00:85:7a:ed:31:f8:2d:ab:a1:75:58:
3a:bf:ad:d5:51:65:fa:df:1c:58:42:20:63:7f:3b:08:77:50:
bf:2b:03:7f:00:b9:7b:f0:3b:f2:85:49:a7:46:04:bd:58:37:
8c:71:13:ae:f0:f0:c7:57:32:0c:09:ff:3e:c6:86:3c:a9:ed:
35:fa:d1:b3:92:71:7e:17:42:e2:91:d9:b0:9b:67:6c:98:28:
b0:cd:6c:79:c8:d8:20:ef:d3:94:3c:9c:16:be:a5:f1:c0:c2:
33:e1:d7:5d:5b:08:f6:5f:e8:f5:19:63:0d:85:44:95:6d:9f:
68:88:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:06:01 2025 by rpki-client