Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json)
Hash identifier: vGMcuNPBHu6ZS8XC/vYdH8lkSFEI83964u4OR5MG1UI=
Subject key identifier: 32:C2:FF:14:FA:05:06:AC:4E:F2:31:BA:4A:82:F5:F7:A2:CB:BD:3F
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 0199FC8FB7BA8D3865D1318A43B3A7335582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
Manifest number: 15CA
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: R7hUu6ZqMxGpHSuBpVDvfI7OsmC+ZpV7eib1WVmGjdY=)
2: VIlea1HGjGCn_MVKwJV926-pJjE.roa (hash: A01QP610OFwth+XnetlpJQSsjmOQSdq9hALxJi5jMPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b7:ba:8d:38:65:d1:31:8a:43:b3:a7:33:55:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=32c2ff14fa0506ac4ef231ba4a82f5f7a2cbbd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2b:c8:77:8e:1f:e2:a9:38:aa:9e:f6:83:95:
83:7e:e3:ee:35:02:86:a0:08:ac:de:fa:37:c3:24:
53:48:e1:52:cd:14:a2:a7:f7:28:ad:b0:cf:df:d1:
cb:e5:53:e1:db:b6:e1:1f:36:21:4f:6e:b6:db:4d:
0a:af:9a:41:0c:7d:f3:fe:a9:de:0b:d0:c3:d0:e7:
2a:d6:c7:08:9c:70:cc:7a:dd:e3:1a:5e:fa:08:98:
4d:be:da:77:42:b2:ee:3b:c1:9f:98:2b:1e:f0:1b:
39:5c:65:4a:1b:3b:f0:e2:ca:c6:0b:99:a7:a6:fa:
67:0b:f8:b2:03:09:40:1e:41:c1:b1:b7:93:da:d2:
62:12:16:2b:d5:bb:5e:dd:b5:c0:b2:29:77:1c:4a:
a2:92:10:f2:25:77:f8:97:c8:c1:1b:63:df:62:02:
0a:81:12:d9:34:61:43:9c:1a:89:30:ff:41:41:17:
be:4b:24:da:9b:01:9f:1d:fb:02:68:53:90:6c:56:
04:94:5c:f3:33:9e:a8:80:73:55:8a:31:be:e8:ea:
fa:f6:d8:59:3e:9a:08:c0:03:ca:84:da:3e:e8:2d:
77:87:31:6c:d8:1c:41:da:24:f5:58:79:c1:12:d5:
80:4a:54:90:52:6e:bf:9b:c7:fe:56:ab:8b:2b:49:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:FF:14:FA:05:06:AC:4E:F2:31:BA:4A:82:F5:F7:A2:CB:BD:3F
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:94:24:3d:c4:10:f2:ec:85:54:a1:0e:28:54:ba:72:82:db:
38:cb:a6:f2:25:91:cc:e1:be:e7:e2:74:46:23:6d:18:80:f3:
44:dd:ab:18:d3:3e:6a:81:8a:b6:f7:a8:3d:b6:0b:27:ca:f7:
31:74:04:27:27:11:1f:8b:52:07:0d:50:e9:27:3a:24:9d:29:
9b:b6:16:be:9a:34:6c:e9:b2:65:b7:ac:9b:7e:0c:6f:63:26:
25:d5:b5:bb:a1:df:10:b0:e2:ab:da:f9:41:64:13:73:4c:fd:
c1:a0:78:61:5f:8d:96:08:05:95:cf:78:fc:e1:6d:4c:ff:52:
91:7d:76:b3:74:e9:01:c3:18:35:05:03:ea:61:0f:a8:a5:6e:
f9:a9:9f:fe:22:27:67:d3:43:f2:ea:31:74:e2:6d:cc:44:db:
0d:92:8e:e2:e6:4a:32:fc:a1:97:8b:df:f6:53:83:ea:03:46:
21:27:e7:7e:2a:1f:72:e3:ba:1a:fd:63:b2:03:a3:98:5a:fc:
db:2a:13:d0:ba:55:7f:cf:fa:b0:1c:2d:f8:b6:5f:b1:f5:97:
83:33:51:94:db:11:51:1e:24:78:aa:f6:ec:76:5f:2b:29:a3:
33:98:85:b9:ea:9f:35:2c:d0:b8:ec:4e:ef:ea:3b:96:32:57:
28:d7:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:57 2025 by rpki-client