Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: dX/89oJTQfkC1GveBDiBjuFpqP3oa+28kQe9Tg9YDYI=
Subject key identifier: 9A:6E:91:4D:19:BD:3A:B8:2C:0F:0B:0C:CD:E0:9D:13:90:37:8A:D6
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 0199FC58E37F34B1D87417C66F8BF84A982C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 1085
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: JjOOc5iAPa8ZFXBLASFDA1jBpTfyOkFNGrpJkoIJkdQ=)
2: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (hash: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e3:7f:34:b1:d8:74:17:c6:6f:8b:f8:4a:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=9a6e914d19bd3ab82c0f0b0ccde09d1390378ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:16:5d:fa:2e:b5:0a:50:82:4f:78:22:7e:
f3:64:a0:0c:a6:c0:0e:b3:69:d3:eb:e6:f7:cc:30:
05:16:26:96:58:5f:aa:69:23:60:1d:51:03:32:bb:
e9:83:55:28:1b:a4:fe:5e:24:7e:77:5d:54:e3:a6:
27:06:7e:54:ef:08:97:93:7c:8c:92:f6:22:af:02:
91:04:d3:28:27:c6:49:7d:d0:5c:dd:fc:50:1b:40:
f7:e3:30:91:3f:86:6d:47:10:81:86:7b:45:49:69:
37:e1:09:f6:49:4e:2a:4e:9b:cf:71:8e:84:dc:0e:
be:20:00:3d:00:69:70:50:d4:f1:4b:ed:2c:6f:2e:
34:e3:77:38:80:15:d3:73:80:df:9d:61:5b:37:2e:
9e:4e:5c:9c:bc:5c:d3:fa:72:18:b3:6e:8a:1b:b3:
6e:83:eb:b8:45:72:f2:6a:c3:dc:9a:c8:21:c3:47:
c3:3a:ab:8a:42:d9:27:6d:b7:2d:e6:24:d7:44:e5:
48:3b:59:cc:46:3c:39:2f:4e:5c:48:8a:98:40:98:
34:ad:08:2a:26:30:ce:27:1a:dd:28:9c:b1:f6:68:
fc:47:7f:87:96:2c:db:1b:2f:f1:8e:96:31:21:5c:
ee:35:ff:0d:c2:af:b7:a4:fb:99:68:2a:17:ee:cd:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:91:4D:19:BD:3A:B8:2C:0F:0B:0C:CD:E0:9D:13:90:37:8A:D6
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cb:cf:93:25:a5:92:7c:d9:e2:db:c2:0d:69:92:f3:ca:aa:
f2:55:21:cb:90:52:62:10:76:d4:07:21:84:e6:c2:3d:60:13:
33:09:aa:cf:cd:cf:66:2d:9e:51:6a:b1:9c:62:44:0d:9b:4d:
e6:81:4e:1e:b1:40:fe:36:64:88:f2:b1:6b:5e:a7:05:d8:eb:
65:f5:78:78:35:0d:5d:ed:17:db:d3:2b:95:c8:cb:73:d1:e2:
b9:d4:9c:42:e3:84:57:b1:d1:02:a9:f8:8f:6e:9e:86:d9:4c:
51:c2:ed:ac:93:66:a6:cb:87:07:6f:b2:d6:59:64:e4:9c:4f:
2c:25:4c:ea:ca:b0:00:30:95:c7:39:57:79:69:44:b0:6e:78:
c1:15:d5:6a:3a:8d:ad:58:52:0f:a3:61:9c:cc:f6:11:8e:25:
46:1d:a7:95:be:aa:9e:29:f2:5e:bf:da:1a:c8:24:fe:29:33:
50:a2:fe:c9:99:e9:77:23:a6:21:18:21:73:8a:4b:7d:bd:c1:
c4:81:0a:f0:34:e1:b7:22:93:a2:0c:22:fb:77:49:18:e8:35:
ff:09:23:7b:33:09:76:59:21:94:ff:36:d7:f6:5f:21:e4:66:
05:af:74:87:20:e9:78:d8:d9:21:a1:a5:41:ef:32:24:96:f7:
10:91:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:38 2025 by rpki-client