Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier: Mb+XF74ScAeNvHHuE3hHsVQa816wahCZI9sQINmxqng=
Subject key identifier: 61:31:58:DB:54:FD:BC:E6:E6:F3:88:DB:32:E5:72:4D:C5:D1:ED:C5
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 01976F9A19FE3114E2D1036601DF77A8DCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number: 1490
Signing time: Sat 14 Jun 2025 18:00:59 +0000
Manifest this update: Sat 14 Jun 2025 18:00:59 +0000
Manifest next update: Sun 15 Jun 2025 18:00:59 +0000
Files and hashes: 1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: oAn2cuBpquINNEKeOkWrdAqn/10xIInMPafJrZ+JsH0=)
2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:19:fe:31:14:e2:d1:03:66:01:df:77:a8:dc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Jun 14 18:00:59 2025 GMT
Not After : Jun 15 18:00:59 2025 GMT
Subject: CN=613158db54fdbce6e6f388db32e5724dc5d1edc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:00:2c:14:06:65:89:37:9e:6c:2a:2b:47:
9d:e4:00:5c:f7:17:23:33:bc:0e:61:b9:97:73:29:
68:21:5f:2b:85:26:52:f6:68:f6:fe:73:3c:2f:53:
38:94:95:e7:04:db:c4:7c:53:3c:50:68:c0:50:6d:
f8:ce:a0:fc:46:35:2f:44:0a:6d:af:01:22:32:6e:
81:c0:8b:8a:9b:54:51:da:3b:b5:da:92:12:0a:a7:
56:31:fb:a8:6f:3b:56:05:8b:8e:83:5a:7b:f8:94:
b5:24:c1:68:6a:08:64:22:1f:42:e1:b6:32:df:8e:
5e:da:b5:c4:f4:5f:70:89:1a:7a:aa:ba:d4:17:12:
bf:f5:59:8c:ba:e6:df:b1:99:05:88:7d:07:55:79:
af:7b:d3:54:d6:2a:73:4a:fe:2e:48:36:80:53:34:
1e:36:24:66:33:09:91:f7:fe:50:f5:4d:6f:c3:72:
e6:72:fb:6f:2b:11:60:ad:af:6d:52:56:af:15:2f:
f1:bb:30:b6:e8:63:08:81:bb:6f:2a:aa:e0:e8:c4:
a5:22:a0:bd:c0:11:bf:1d:51:c8:a9:c9:7a:85:57:
ae:23:8b:33:a8:01:b2:b2:39:a3:a8:76:17:b1:d5:
22:2d:43:e9:09:39:47:b4:fc:fd:60:04:c9:b8:de:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:31:58:DB:54:FD:BC:E6:E6:F3:88:DB:32:E5:72:4D:C5:D1:ED:C5
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3b:c9:bd:0c:66:12:63:2b:24:e4:cb:e1:a4:5a:c8:e8:08:
42:f1:0d:18:0f:28:22:43:84:43:b9:04:42:a6:13:02:8e:a9:
8b:ea:82:4b:0a:ae:7c:4a:12:50:2f:ff:8d:59:e8:22:97:d0:
2f:b2:d5:ee:0e:b1:60:9a:30:5f:ab:8c:77:90:6c:44:41:2c:
cd:e0:c7:96:1b:6f:c1:30:c8:fa:bc:39:34:47:c3:90:75:dd:
b0:89:70:d5:02:70:c0:c1:52:aa:f0:20:50:20:74:86:c2:7f:
5b:0d:ef:04:df:89:c8:dd:cf:59:b2:cb:da:8b:9c:a4:4e:31:
6b:1d:14:49:9a:0f:2e:c1:0c:16:af:0c:48:d9:fa:b8:75:52:
b3:d3:2f:28:9a:03:3e:da:c7:b1:1c:8c:5b:a4:68:8d:51:7e:
a1:cf:63:11:d9:81:00:d9:e6:ef:c0:cb:de:64:0a:9a:d8:bd:
72:12:c0:48:34:be:55:13:1f:46:80:f4:7a:7e:0b:80:42:23:
9a:d8:23:99:2d:01:1d:91:15:c9:7b:8c:8b:dc:e3:76:a1:26:
5e:8e:c8:97:2f:87:5c:08:0b:d6:f6:53:75:4d:a1:75:3b:7f:
1a:a3:8a:bc:05:b2:5e:fb:f3:3b:da:1a:09:f3:14:0b:f7:73:
fb:03:6e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmhn+MRTi0QNmAd93qNzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTI4NTRhODQwMGQ4Yzg3ZWE0ZGU3YTIyZmRmMWJmNTc0
YTkwMzEwHhcNMjUwNjE0MTgwMDU5WhcNMjUwNjE1MTgwMDU5WjAzMTEwLwYDVQQD
Eyg2MTMxNThkYjU0ZmRiY2U2ZTZmMzg4ZGIzMmU1NzI0ZGM1ZDFlZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmEALBQGZYk3nmwqK0ed5ABc9xcj
M7wOYbmXcyloIV8rhSZS9mj2/nM8L1M4lJXnBNvEfFM8UGjAUG34zqD8RjUvRApt
rwEiMm6BwIuKm1RR2ju12pISCqdWMfuobztWBYuOg1p7+JS1JMFoaghkIh9C4bYy
345e2rXE9F9wiRp6qrrUFxK/9VmMuubfsZkFiH0HVXmve9NU1ipzSv4uSDaAUzQe
NiRmMwmR9/5Q9U1vw3LmcvtvKxFgra9tUlavFS/xuzC26GMIgbtvKqrg6MSlIqC9
wBG/HVHIqcl6hVeuI4szqAGysjmjqHYXsdUiLUPpCTlHtPz9YATJuN7WlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGExWNtU/bzm5vOI2zLlck3F0e3FMB8GA1UdIwQY
MBaAFDoShUqEANjIfqTeeiL98b9XSpAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMt
NjgyOWQ2OGUyYTU0LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMtNjgyOWQ2OGUyYTU0
LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzvJvQxm
EmMrJOTL4aRayOgIQvENGA8oIkOEQ7kEQqYTAo6pi+qCSwqufEoSUC//jVnoIpfQ
L7LV7g6xYJowX6uMd5BsREEszeDHlhtvwTDI+rw5NEfDkHXdsIlw1QJwwMFSqvAg
UCB0hsJ/Ww3vBN+JyN3PWbLL2oucpE4xax0USZoPLsEMFq8MSNn6uHVSs9MvKJoD
PtrHsRyMW6RojVF+oc9jEdmBANnm78DL3mQKmti9chLASDS+VRMfRoD0en4LgEIj
mtgjmS0BHZEVyXuMi9zjdqEmXo7Ily+HXAgL1vZTdU2hdTt/GqOKvAWyXvvzO9oa
CfMUC/dz+wNudA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:04 2025 by rpki-client