Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json)
Hash identifier: Bbn5MLtIpp66eP//zUS1mayvaRykPJfik3ivDhLdtug=
Subject key identifier: 6F:6C:77:E9:29:17:58:C2:49:77:48:41:E4:92:1E:C5:41:34:9F:0E
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 019A1D2C3FB503C0F54A8749190CE6DE9529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
Manifest number: 0CCA
Signing time: Sat 25 Oct 2025 21:00:30 +0000
Manifest this update: Sat 25 Oct 2025 21:00:30 +0000
Manifest next update: Sun 26 Oct 2025 21:00:30 +0000
Files and hashes: 1: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: Q1ZmIqV/cxO7oA/YKDBwV9Ik52OEMokP2rmItX0m5+w=)
2: UG2XZdsSP9vahLS8deUbiGwgM84.roa (hash: H+YkvMLky6FPgjSDWIrs7G2kpfOLt2YF+/59bitetA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:3f:b5:03:c0:f5:4a:87:49:19:0c:e6:de:95:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Oct 25 21:00:30 2025 GMT
Not After : Oct 26 21:00:30 2025 GMT
Subject: CN=6f6c77e9291758c249774841e4921ec541349f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:2f:b3:9d:0b:9c:7e:34:cc:e0:64:5b:d4:
bc:32:19:8f:1a:42:76:ec:a6:83:ad:48:c4:de:94:
70:af:17:e4:81:d4:0f:5c:79:c3:08:73:90:eb:76:
17:88:80:c7:fd:a4:15:de:f8:d8:45:81:41:f6:8f:
bb:89:0f:07:1d:c5:64:36:e2:6a:eb:3f:ad:ec:aa:
84:0b:7e:92:60:dd:87:67:a1:3c:38:ec:5d:30:8f:
32:b1:de:9c:a2:9c:4e:89:23:58:6f:16:8b:3b:5f:
12:4b:d9:83:01:04:56:fa:d8:45:cd:db:45:d8:57:
5f:7d:84:b6:2b:99:8a:2e:44:7b:60:81:e2:38:b4:
21:09:36:e8:a6:db:26:c2:50:37:14:a2:f6:07:00:
81:4a:71:db:36:bb:17:2b:44:9b:45:df:a1:55:50:
b0:94:5c:e9:01:88:44:d3:08:1b:e8:52:b2:08:81:
25:82:fa:c2:1b:ae:1c:1b:33:5d:42:51:d6:a7:5a:
cc:50:04:34:af:49:37:c3:48:34:8b:25:93:27:4f:
2c:2b:30:56:24:de:32:55:0f:04:3b:d1:ae:69:81:
5d:70:ae:9a:3e:ca:c6:c7:52:c5:1d:de:05:cd:a8:
a4:72:dd:9c:b1:06:ec:f2:b6:ed:58:0a:9e:b9:b0:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:77:E9:29:17:58:C2:49:77:48:41:E4:92:1E:C5:41:34:9F:0E
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:51:ba:09:c7:5b:92:e5:91:6f:4d:57:2d:79:ab:ce:44:e6:
24:af:a0:df:1e:13:b6:2d:a5:d7:34:24:42:82:0b:f9:42:de:
3b:27:af:b5:7e:cb:03:d4:30:05:1a:e3:bc:3d:89:9f:5a:5c:
c1:f8:63:0b:5a:15:c1:9b:24:c7:91:55:b6:f6:50:2f:01:f6:
fc:02:90:55:0d:5e:98:dc:b5:f5:17:7a:96:56:26:e0:19:39:
9b:40:ba:f1:4a:af:eb:c4:ad:8e:d8:2b:d9:1f:11:6c:eb:d9:
09:56:c5:0c:96:f8:89:e9:8f:b4:4b:14:25:c0:9e:32:ed:0c:
4d:09:f4:f7:49:48:58:1f:81:da:e1:8b:23:ea:f7:71:64:e1:
2f:d4:b9:4a:07:40:e7:dc:6e:cb:6a:30:1f:fe:c4:b2:d7:1d:
3b:5f:2b:ad:50:73:bf:c1:21:45:34:bd:a2:13:0c:4b:59:95:
af:71:3f:43:6a:e4:e9:ca:63:a5:3f:52:7b:ef:9e:55:5d:a1:
be:df:2f:d5:ef:33:5c:e6:0f:f9:3d:50:6e:67:63:d5:88:b3:
20:63:13:fb:52:34:89:c1:c4:4b:4c:4b:f3:00:e5:3d:62:79:
36:7f:86:07:45:da:6c:98:cf:65:75:7b:d7:56:e0:1b:ca:81:
05:59:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:12:09 2025 by rpki-client