Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: WoFKYkhpOFQhXO4EN5u0cSdTL2hDbbCyukj3D5jg/uQ=
Subject key identifier: 15:AB:AC:16:89:26:48:AD:E1:23:36:73:4A:61:F6:11:EE:30:64:AD
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 019A71B846DA64927BCE708CB080969DDCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 0393
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: p5e1qZYPzsPgNelHSTJ80pXLgbQrmgsjcQTIqEKTtJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:46:da:64:92:7b:ce:70:8c:b0:80:96:9d:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=15abac16892648ade12336734a61f611ee3064ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:f3:ee:0f:57:41:dc:68:52:b4:9e:92:b8:
50:ba:17:df:a3:c6:3f:65:11:d4:1d:21:0a:bc:70:
72:e8:cd:50:98:69:ad:85:60:bf:b7:98:72:2a:b3:
55:2f:9b:e7:cd:ca:56:2f:de:bf:e0:eb:7c:92:48:
33:50:cc:68:dc:5c:50:74:46:70:f6:de:67:02:0b:
95:26:a5:d3:ae:b0:d9:7c:11:f8:09:c1:c9:b4:a1:
7b:47:5c:83:7b:0f:3b:b8:88:f3:50:3b:0e:a8:0f:
7f:c7:a9:66:6e:7e:bd:96:d8:3d:9d:2d:31:fe:43:
69:95:eb:c3:2c:f7:3a:06:e2:68:1e:82:df:e2:2b:
87:09:ee:b5:46:df:cc:fe:28:b3:3d:a7:05:f4:90:
53:c9:e0:77:e7:99:0e:15:f4:72:1f:cf:9d:0f:4d:
93:48:b5:d0:c7:3e:b2:5c:b5:c5:98:13:45:c7:cc:
f3:c3:4b:f9:b8:fc:b6:bd:43:2c:be:3e:b9:62:cf:
3e:63:1e:7e:50:0a:05:70:9e:40:bb:47:be:ba:cf:
13:06:45:b5:f0:6b:ee:c2:2a:3a:9b:bf:6d:37:a9:
2a:a7:69:ac:ff:d3:31:e2:88:73:a2:fa:53:32:38:
97:62:3c:11:5a:fb:9b:75:2d:b5:29:d1:fa:6d:6a:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:AC:16:89:26:48:AD:E1:23:36:73:4A:61:F6:11:EE:30:64:AD
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:93:78:bf:73:ba:3e:60:18:2e:5f:df:01:13:6d:c5:45:aa:
4a:23:d0:9b:d1:74:ba:82:cd:d6:8d:62:23:e9:2a:15:5d:db:
3a:f0:c4:84:e5:4b:e5:75:30:53:2b:8f:2d:78:6a:73:42:95:
ee:75:eb:42:f3:0e:1e:b3:ba:50:e3:e2:e1:ea:80:e5:92:c6:
88:bb:de:75:41:bf:99:cc:df:56:af:df:f5:7b:72:24:56:5f:
04:22:8c:5f:68:de:44:00:7e:55:3f:58:b6:dc:68:cf:3f:98:
c6:08:0e:51:41:f3:1d:70:08:1b:4b:c2:a9:21:66:01:84:6b:
de:12:fd:a9:13:cc:26:57:46:48:1f:a4:8a:84:53:5c:d7:fb:
ca:30:eb:bc:f4:60:89:9b:ad:87:e8:27:28:24:8f:b6:b7:7e:
86:eb:bd:17:9c:bb:62:a1:e1:5f:80:55:28:9b:fa:06:52:71:
f2:4d:2b:55:49:58:ee:e6:92:18:51:a6:56:71:4c:c0:82:48:
58:1a:3b:7e:2b:18:9a:3f:4c:df:47:57:1e:d6:26:df:06:8c:
aa:c6:97:45:93:80:f0:cd:f1:30:9e:0e:f3:eb:4e:d0:3a:90:
3e:55:f1:77:5f:31:6e:3f:c4:2d:e2:9f:48:bf:54:76:ba:59:
62:7f:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:43 2025 by rpki-client