Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: Y3qtoXB6pnbAOHXjx568KTcy4JPZwFlRASDKThglB7M=
Subject key identifier: 64:41:99:90:99:FC:7D:9C:BB:A6:5C:7C:89:9C:F5:8E:E3:07:F6:FB
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019873E3A1208E7D112878E3EDB57136F061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:02:34 +0000
Manifest this update: Mon 04 Aug 2025 07:02:34 +0000
Manifest next update: Tue 05 Aug 2025 07:02:34 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: qDz8d9d0JQG7trKorTHhvix5qsleUZqKrMSA5OyeKg4=)
2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a1:20:8e:7d:11:28:78:e3:ed:b5:71:36:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Aug 4 07:02:34 2025 GMT
Not After : Aug 5 07:02:34 2025 GMT
Subject: CN=6441999099fc7d9cbba65c7c899cf58ee307f6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:27:4b:27:bd:65:ce:be:e4:61:ce:25:0b:
90:f0:35:e2:da:45:dd:5f:fc:f5:08:e6:d5:99:7c:
23:0d:79:ee:ad:0e:92:ef:af:a3:b8:30:b2:ca:49:
ec:5e:e2:5a:a7:c5:e2:07:7d:dc:35:95:da:bc:e5:
8a:98:76:9d:73:a4:7f:ed:2d:6b:f1:a7:64:4d:3a:
be:a2:78:e7:e3:44:70:74:d6:34:d2:f4:0b:c8:89:
1b:01:74:98:9d:21:36:a7:73:f4:9e:e8:0f:95:33:
2d:7d:10:78:03:6b:de:fc:07:b6:32:ea:28:ac:4e:
7e:63:5c:59:93:d1:d0:ec:9f:a3:ff:88:e4:d0:da:
fb:1a:e3:6d:d6:38:db:6f:62:3e:6c:a9:52:c8:6c:
85:36:a2:7c:f7:80:83:b3:8f:11:c7:33:a0:d9:5d:
52:a5:91:46:24:dd:10:db:ff:c1:67:df:a3:17:1a:
e1:1c:da:06:3c:50:6d:b8:50:a3:57:af:c1:fe:0f:
49:1e:09:be:15:f3:fb:53:51:04:c0:fc:81:93:e1:
32:74:0f:6a:bc:04:ad:20:c5:85:02:5a:46:01:26:
94:55:f1:f1:6e:17:04:bb:f5:7e:60:c4:b3:7f:4a:
77:cc:be:c6:60:10:26:bc:76:cc:92:07:45:58:bb:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:41:99:90:99:FC:7D:9C:BB:A6:5C:7C:89:9C:F5:8E:E3:07:F6:FB
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0a:56:c8:c3:22:15:d0:0d:03:e2:f7:1f:bb:9b:49:3e:ef:
c6:be:d1:4e:fc:3d:d2:e6:9a:77:83:38:e2:dc:11:30:da:60:
c4:90:4c:15:bf:9f:9e:0b:cb:e3:e8:f0:52:cd:88:48:33:e1:
be:4c:13:75:bf:95:3e:67:0a:c0:0a:8c:4d:d9:ad:f7:ea:1f:
b4:0e:fb:dc:f1:f3:fc:91:50:82:f9:1a:01:e7:13:c1:93:64:
c1:9d:13:6b:6c:1b:11:2e:5f:dc:0b:80:5c:ac:bd:8f:fc:1f:
49:a1:64:a5:5e:fd:f9:7a:9a:61:5e:3c:13:7b:be:10:f3:11:
5b:49:2d:b3:b0:a0:38:03:1d:b9:10:92:46:da:96:26:4a:90:
be:c6:7f:cc:e6:03:4d:05:56:52:88:73:f9:4c:10:fc:78:c4:
f3:97:e9:2f:cc:95:36:53:37:fb:14:b2:bd:0d:90:fc:c0:80:
f1:10:8f:f7:bf:d7:45:79:6f:3d:51:c8:f3:67:42:c1:b7:22:
ff:45:65:5b:0e:4e:4f:1c:35:66:ef:63:12:3a:af:bc:8f:67:
72:97:e2:3d:6b:76:4a:5a:a1:55:46:d1:eb:4a:39:4b:a5:68:
c2:d2:95:83:65:55:eb:8e:fa:f4:06:3f:5e:81:d3:c8:4b:4f:
db:30:e7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:33 2025 by rpki-client