Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: qS3sEwQpxaTgi2ivjPJ0pqhIAAoOhGqbfcePwo4i7fM=
Subject key identifier: F3:B6:DF:73:C5:C6:FA:84:49:D6:30:E3:E4:10:9D:80:41:01:48:6A
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 019891475A431B257300E0E8B16382A610F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 0FC9
Signing time: Sun 10 Aug 2025 00:00:29 +0000
Manifest this update: Sun 10 Aug 2025 00:00:29 +0000
Manifest next update: Mon 11 Aug 2025 00:00:29 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: TxMbYS6kTtFHe6gWpCZbUX1+xN+4B2lpgN6w00TE7Ww=)
2: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (hash: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:5a:43:1b:25:73:00:e0:e8:b1:63:82:a6:10:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Aug 10 00:00:29 2025 GMT
Not After : Aug 11 00:00:29 2025 GMT
Subject: CN=f3b6df73c5c6fa8449d630e3e4109d804101486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:55:88:59:77:45:e4:e2:d8:3c:f8:bd:32:
5b:c7:57:c3:fc:f0:fb:20:d2:3b:65:ae:9d:97:85:
8a:8c:e6:3c:66:9c:58:8e:86:e3:41:f6:af:bc:ab:
86:77:92:2f:51:91:9b:85:1f:a8:20:b0:53:19:c8:
26:0f:fb:b4:1c:3a:87:c0:5c:05:c4:49:6d:0b:72:
99:68:27:e4:d1:6d:44:18:e3:8b:5b:ce:16:3a:69:
86:10:d4:40:ba:b7:a4:97:ec:6d:62:45:2d:6c:96:
c5:32:ce:34:76:59:24:ce:57:bf:90:e0:f1:da:c1:
bf:c1:9e:82:35:0d:8c:24:3f:ff:5b:6f:18:02:0d:
4c:00:f1:8a:ff:61:cf:35:37:6e:a8:cb:3b:11:73:
ee:53:0d:bf:8a:ed:95:61:c2:2e:fb:c1:bd:92:0f:
fa:a6:28:ae:d4:64:d7:d3:11:cd:e8:24:d8:47:65:
3b:71:16:cc:ae:3d:b9:f0:37:35:1a:25:72:d5:30:
20:fc:e7:f3:18:8d:52:61:94:fa:58:8e:b4:7f:9c:
38:20:83:dc:f8:75:a9:55:c9:7c:0c:da:75:72:56:
90:52:d6:20:df:3c:13:4d:55:44:af:6f:06:08:14:
78:db:b6:4e:18:c4:1b:2d:4a:19:e3:1d:23:0a:07:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:DF:73:C5:C6:FA:84:49:D6:30:E3:E4:10:9D:80:41:01:48:6A
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:25:f1:79:6e:15:99:1f:53:bb:18:8d:70:28:53:b4:10:
a4:de:f3:63:d2:79:6b:5f:a7:0c:d5:8e:91:c1:59:ad:06:6d:
78:2a:b6:a6:36:8e:72:69:b5:1a:44:8a:4a:22:de:4a:b4:ca:
8d:70:5b:1c:a3:b1:ea:1b:95:9f:0f:1e:ee:56:f3:55:f2:75:
73:35:5a:44:56:64:b6:44:c5:74:2c:41:4b:89:ce:ba:61:29:
97:5f:3d:a3:fc:4b:0d:57:2d:49:fd:16:78:02:84:c9:eb:64:
ae:31:62:21:58:29:90:7b:cd:a7:5e:34:b1:85:9c:61:e2:d8:
e4:e8:42:08:9e:db:38:41:7b:c8:47:71:12:b9:b9:5a:9a:6b:
cb:bf:4a:db:7f:5e:48:db:90:eb:1c:10:5d:25:a0:3e:1d:ac:
a1:76:9f:a4:60:ab:a2:93:e5:7e:d7:9d:ce:dd:60:d6:55:5d:
f9:e2:e6:e9:36:a6:d9:9c:0e:20:39:6e:08:6a:ae:6d:a1:63:
32:0f:3b:a6:93:d7:39:c8:aa:91:81:72:18:d1:1f:f6:25:7f:
7c:3a:8e:f7:3d:e5:37:25:40:6d:ca:90:c8:84:4d:51:d6:a7:
ce:1e:c4:93:c4:57:c1:2d:6b:bc:09:63:57:94:11:e0:7d:ea:
f9:90:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:43:48 2025 by rpki-client