Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: aeq1dz+p7C0gxf9YE7BZAVvreaY+5PKyEdumiS0TJDE=
Subject key identifier: F2:4B:C0:FC:D5:A6:4C:80:DE:CA:7E:8D:F9:9C:AC:C1:EE:ED:7A:D9
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 0199FBEB7B85BE5720F50783D2A3FB25B263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 0356
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: iHBZclYaW2U2XwPXmRZ1aN5g/TYwzlNrwky9OzH7ytU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7b:85:be:57:20:f5:07:83:d2:a3:fb:25:b2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=f24bc0fcd5a64c80deca7e8df99cacc1eeed7ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:de:76:47:ad:b2:bb:43:de:d3:8f:13:2e:
b9:6d:15:a6:b4:7a:73:11:e5:12:a6:6e:65:7e:19:
56:ea:0e:c5:da:93:3c:45:3d:f5:d3:49:22:f8:a3:
27:48:8b:29:b3:cb:8d:2f:c6:74:a1:61:a7:19:8b:
cc:2d:a1:4b:86:9c:64:8f:9b:f7:90:ab:fa:64:49:
31:f3:7d:f0:9e:87:6c:89:19:b4:88:94:17:f7:33:
34:eb:60:c8:74:dc:41:cf:03:c1:f2:5a:2b:a9:70:
ff:18:46:67:54:e9:14:ea:69:ee:1c:f7:65:ac:2f:
d4:4a:53:fe:5d:b1:8b:78:79:9c:1e:01:27:c7:f7:
4d:8a:24:54:6c:cf:79:60:58:75:6a:6f:53:49:56:
bd:04:01:f3:8c:13:93:0f:1a:66:84:e9:95:bf:ad:
92:49:4a:22:24:f4:fe:87:d0:3a:5b:9d:68:b7:6c:
0e:8b:1b:73:b9:a0:e2:08:a7:d2:34:3a:ed:47:7c:
68:ef:6d:79:75:e8:a0:30:e7:e0:9d:31:a6:06:c5:
9d:4e:8f:ea:4e:0b:17:89:2d:59:93:b2:16:f4:50:
56:5a:e9:0c:d1:05:9f:9b:ca:04:10:27:d7:4a:e1:
c4:7f:54:c6:fb:7d:c4:92:83:ff:bd:81:e0:73:ad:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:C0:FC:D5:A6:4C:80:DE:CA:7E:8D:F9:9C:AC:C1:EE:ED:7A:D9
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ed:c1:5c:ea:45:34:23:48:cc:a7:b2:c5:c7:63:2f:8e:29:
07:da:1c:c1:54:80:9c:0e:7e:d3:c5:d7:f2:88:d1:84:6b:c2:
78:88:43:b2:bb:98:57:f6:1f:63:3c:e9:71:09:83:12:1b:e4:
29:3f:c8:56:0b:24:3c:e1:99:f4:84:c8:8f:24:34:b4:d6:be:
db:6d:60:58:b9:57:25:ea:50:2e:29:0c:0f:6f:40:7e:f9:cf:
0c:cd:8b:3a:c1:fe:bd:62:a6:7b:99:29:33:6c:d9:4d:f2:d7:
1f:7b:4d:fb:43:75:e6:5d:44:5c:a4:bf:68:be:00:2b:84:c2:
38:fa:93:ac:83:e3:50:15:00:7f:2a:93:d5:de:f1:06:86:bd:
9d:7b:a7:42:6f:cd:22:49:30:69:97:27:e6:18:b3:a0:80:c0:
dd:a5:7d:59:45:a7:a1:ab:58:1b:fe:8d:33:90:ed:6a:8a:e6:
3c:1c:0d:fb:7c:83:87:65:82:95:ba:d7:db:73:6f:6c:f2:00:
7e:af:ff:a8:0e:d6:66:a1:d2:db:61:41:c9:bc:26:c6:c2:dc:
6c:e2:57:f1:5f:cf:f8:33:25:7e:51:4d:16:71:e6:88:6d:c4:
bc:1d:8c:d1:94:b4:ca:28:1b:54:63:0d:03:30:48:be:76:5b:
44:0e:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:56 2025 by rpki-client