
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: xpT4UnwY8G/3D89yhv8pdfTqFOCiXOZvPv6MPuueoos=
Subject key identifier: E1:84:A1:6D:95:3A:B0:CD:C9:C3:88:E4:CC:D1:10:0A:BD:C3:02:CE
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 0199FBEAC4A4FE9645C7C0B0292DDA008F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: 5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa (hash: XAzmjxdrpIx5mLyehPHseK/+jaakSPTIZ07v9R3ktfQ=)
2: 7gpUO99SfoacmIWvz5o-z3ESpPc.roa (hash: jBBU4x8HtuG0AJgjijT3pv++S+IgCjRtCv3AjftIABQ=)
3: JOJ9b2WkEIXJpzQl9CDXk_CHY94.roa (hash: SAmYAd0xvQRGMk1x62ICIfIVJyfWTunRcVeOhZ1E3l0=)
4: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: uN2tD6GLGMKsK5RIzp0ggc9qTYJ8c1fRRL2+IpA+b8M=)
5: _MMbboen6fjGZxdl1sjrAWa0F6o.roa (hash: lasMNF+CDNUkmhfnkFUMcQ2+Q/sn4RwC142SJaDCsYo=)
6: qTT5EzYYejgHx_-gozkgtiyWSxE.roa (hash: WcMM5EKO8L7zVDvgOOXzTCPHLyfkpMtxpa7CTFKHemk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c4:a4:fe:96:45:c7:c0:b0:29:2d:da:00:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=e184a16d953ab0cdc9c388e4ccd1100abdc302ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:a8:6b:df:ee:17:5a:5a:65:3c:f8:8b:f5:
3d:de:c1:c5:01:7c:2c:3f:15:59:ed:cc:8b:38:8f:
2d:44:4d:c7:85:23:6b:a6:15:a9:58:bc:fc:8c:dc:
b9:ed:6e:79:df:9c:6e:e2:9e:7c:8d:07:dd:c0:2b:
c5:44:13:73:97:48:e1:75:78:f5:28:ff:5e:5b:ea:
4b:8c:f9:8c:6b:2f:3f:27:55:a0:0c:0a:94:a6:ba:
10:41:9d:9e:d9:ff:47:f2:62:7a:5b:16:e9:9e:24:
b6:e1:38:43:66:cb:09:a6:aa:f2:47:e6:05:6d:a6:
af:42:5b:b0:b8:d3:81:64:e0:64:da:99:10:6d:7f:
12:45:80:9f:01:44:4a:75:17:ad:0b:89:b5:58:5f:
b0:05:74:67:ae:3a:e1:1d:30:6b:15:b4:b1:7a:6a:
07:2f:63:63:7e:a1:b5:6c:9b:f6:fa:33:e2:62:a2:
ef:f9:d6:97:f0:48:32:39:ba:37:b5:f5:ab:7a:29:
2c:70:81:fd:8a:aa:8a:00:30:06:13:73:45:81:1b:
ee:08:2a:f7:14:53:02:0f:c4:f0:6d:7e:cc:5e:71:
3b:90:11:6c:43:23:8e:7e:d5:07:d4:72:ea:58:70:
35:fd:d1:95:a4:2f:d0:ea:66:2e:f0:16:ee:cf:77:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:84:A1:6D:95:3A:B0:CD:C9:C3:88:E4:CC:D1:10:0A:BD:C3:02:CE
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e6:67:dc:75:07:45:29:aa:91:f1:a0:79:d6:c4:fd:6c:9c:
f9:4e:80:b3:8c:54:9b:70:0c:44:ad:7e:9e:a6:5a:f1:20:18:
71:90:d9:0c:2f:db:7a:5d:07:84:96:ee:7a:0f:8b:6b:b6:75:
39:82:ef:41:4b:68:bb:df:70:b6:1f:d7:35:22:a6:7f:7e:88:
98:6b:ec:00:3b:39:df:99:2b:03:a4:5d:0a:52:99:d7:09:6a:
84:a4:99:89:14:19:db:44:12:7b:56:76:c7:92:e7:f9:b1:94:
b5:28:0d:80:c7:52:3c:09:34:bc:00:6d:49:7f:93:41:e5:3c:
41:5a:97:29:54:bf:0c:96:14:dc:09:ef:e5:89:af:5c:f1:ef:
45:da:3e:17:a6:29:e6:64:cb:8f:0a:8b:25:e9:f0:cd:f4:b7:
7c:e4:28:67:d4:0e:6b:87:b3:ce:52:8b:77:30:3c:49:a2:04:
14:01:21:3a:95:65:1d:58:0c:f8:b3:b5:d4:58:15:9d:bf:83:
8f:43:79:87:33:38:ad:b2:3d:bf:26:3d:7d:a2:25:e6:8c:39:
38:04:5e:59:8f:16:91:42:71:7e:83:b4:8e:c9:1c:88:25:f1:
2b:61:af:44:c5:01:d4:24:ae:4b:24:48:b6:61:58:79:af:e6:
7e:c8:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:13 2025 by rpki-client