Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: iLQEdNA1zYM5/uMAE6ptREhDcH1PZfiEQlRci/GBoaI=
Subject key identifier: B5:B0:11:70:C8:22:7B:84:26:71:00:0C:47:9A:C9:90:4B:0C:32:FE
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 0199239F7CF3DB7E68041AB5163CAC2FD542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 02E6
Signing time: Sun 07 Sep 2025 10:01:18 +0000
Manifest this update: Sun 07 Sep 2025 10:01:18 +0000
Manifest next update: Mon 08 Sep 2025 10:01:18 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: K1WkQ43fAs9BnG1XvmhD2AVURqEVZdHnjJUu+rVJX30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:7c:f3:db:7e:68:04:1a:b5:16:3c:ac:2f:d5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Sep 7 10:01:18 2025 GMT
Not After : Sep 8 10:01:18 2025 GMT
Subject: CN=b5b01170c8227b842671000c479ac9904b0c32fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:03:01:d2:64:f8:6a:f2:0a:a5:32:32:4e:
39:66:58:48:d6:d5:9e:40:d3:fc:e3:89:83:d4:0a:
11:bc:fb:5a:2a:4a:62:1a:1d:7e:e8:19:c6:5a:7b:
7f:e7:cb:d9:04:75:d8:75:5f:70:dc:3e:e1:cc:9c:
15:50:b3:e8:cb:ba:6e:85:dd:d4:b3:13:39:18:55:
bd:2b:21:cb:1f:88:ee:49:bf:f2:97:25:fe:36:50:
34:fd:46:0c:67:e6:8b:0c:d4:8a:be:63:3a:d9:d6:
b7:45:8f:9e:da:c9:23:a1:74:77:82:ad:31:c1:a7:
00:28:7d:9b:88:aa:44:e4:e8:66:95:9d:5c:4f:e2:
a4:c6:a5:9a:90:84:23:f8:62:e2:da:2a:c6:1b:6a:
73:7d:9a:fc:fe:f0:c4:9f:90:5d:6f:e7:64:9c:72:
ca:49:1e:c8:2b:4d:b0:51:57:f5:33:80:04:e0:2b:
4a:08:64:34:0b:0d:27:8a:b5:0b:70:4b:2b:bc:d0:
15:d1:66:a1:df:fd:63:0b:14:b6:66:22:bb:0c:76:
8e:0b:66:d0:84:b8:59:47:af:17:97:69:73:d3:9c:
0c:9b:5e:1e:b2:4b:6c:00:30:35:49:d5:b5:cb:83:
f4:17:29:da:53:3d:fb:e4:13:dd:bc:22:93:b8:61:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B0:11:70:C8:22:7B:84:26:71:00:0C:47:9A:C9:90:4B:0C:32:FE
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8f:f6:76:84:f5:45:b3:9d:e3:a5:fb:0b:ea:e5:7a:d7:c6:
7d:c7:56:e9:f6:eb:cd:ea:bc:09:4c:1f:bf:ee:48:e8:65:41:
73:3b:3e:eb:72:1c:c5:5d:91:88:e7:a6:3d:40:ac:39:be:3f:
a0:a2:d7:78:7f:51:f1:fb:6c:5d:a0:cb:ef:2c:c9:85:cb:c6:
05:ec:18:5d:94:b8:be:ad:e9:9d:f7:f6:c9:fa:54:5c:03:2a:
6a:8a:d7:3a:d3:09:1c:36:1d:ed:f0:c7:04:ff:ee:ec:a8:48:
51:8d:64:3b:e0:18:c0:38:1c:29:1c:9d:45:81:55:a0:6a:fa:
13:49:1f:af:92:76:8e:8d:40:5b:28:77:6b:6c:cc:68:c6:70:
dd:92:8f:7b:5c:1d:f6:9d:21:15:45:ed:a8:37:6c:f7:4d:09:
89:95:28:b7:7d:48:a8:09:72:7e:8a:01:8e:49:da:74:a5:04:
51:a9:cc:cb:88:8a:d3:1e:69:f6:13:28:e7:ac:b2:bf:fd:59:
1b:79:07:84:a4:e5:e3:7d:c2:3a:88:68:f9:6d:02:6f:62:da:
2d:36:78:b8:eb:5f:ef:13:d6:f8:03:7a:66:80:78:97:89:9b:
89:c6:fb:4b:61:ba:57:c3:81:ae:38:38:93:b6:8b:6f:0e:d5:
c7:5b:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:09 2025 by rpki-client