Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: EyxM91qvM+547rI3wKpvfUCn7Q23eowKvK1zY5iIOXw=
Subject key identifier: 08:CC:1A:6F:95:8D:61:BA:AB:7E:E2:3B:2B:60:78:F4:94:4F:DA:D2
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019A71B8D7DB8F5CAA3F8C846CC6538568D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: e59jh1HkxxSgkvN5kaS1DeRUzCmptDL7cA3lzBRkKXE=)
2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d7:db:8f:5c:aa:3f:8c:84:6c:c6:53:85:68:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=08cc1a6f958d61baab7ee23b2b6078f4944fdad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:9c:6a:21:9f:37:91:ac:94:89:83:45:52:
b4:f7:d1:bd:ad:d0:6f:1f:75:25:4c:59:e1:e7:fc:
3c:b5:78:7c:8a:56:fb:82:71:e0:aa:5a:34:8b:21:
9e:5e:52:4c:89:c7:2d:fb:15:21:0e:2e:9b:95:24:
de:95:ad:42:3b:2e:9c:55:87:bd:95:4b:e0:be:bc:
a1:ad:17:f7:a8:4a:9a:70:8c:34:17:e0:2b:78:fd:
fc:43:06:3c:82:d1:46:de:58:b2:a2:8c:ea:85:30:
95:ff:41:54:2a:85:03:40:cb:71:25:99:35:3e:b7:
39:c5:c1:5b:46:73:1d:4d:80:5f:0a:e0:de:18:10:
ac:74:15:36:b5:3a:01:ab:a2:fb:77:09:4c:cc:0a:
22:c6:0e:90:cf:f4:03:41:33:f6:24:a0:22:1b:69:
b9:91:1d:3a:0f:6d:10:37:ee:b3:00:ec:33:e4:97:
59:99:6a:29:90:b1:06:ff:59:8b:ef:cc:b6:bd:13:
a4:e4:52:4e:41:46:63:8e:cc:5f:70:11:11:19:de:
95:1a:93:4f:cb:bb:a0:ce:34:5d:48:c4:26:3a:db:
89:a0:bc:46:9c:bc:b5:00:da:4a:bc:3b:e1:0f:b9:
29:f9:a7:72:03:47:c5:cb:08:a3:d4:95:48:f8:a4:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CC:1A:6F:95:8D:61:BA:AB:7E:E2:3B:2B:60:78:F4:94:4F:DA:D2
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1a:a2:e0:24:44:34:66:41:92:d6:bf:81:8a:06:f0:1f:76:
97:08:8f:17:98:47:0f:1e:11:e1:df:79:71:6a:42:3c:d7:eb:
8a:98:01:93:53:b3:ef:66:7e:8e:24:e6:6d:c1:1c:b5:2b:f1:
f8:67:17:aa:93:5d:6f:d6:2a:dd:9c:2b:14:8a:9b:96:b4:5f:
20:75:6c:e1:31:e1:03:72:f1:25:b2:e8:24:9d:5d:4b:0f:05:
a6:f2:25:99:b2:a2:8e:ef:37:86:3a:78:01:77:04:d9:2e:03:
45:ae:d1:95:8f:63:b4:ce:e0:68:78:ae:6c:bc:c2:1b:a2:37:
22:40:2c:fb:3c:2c:4d:cf:92:c0:57:64:7f:d6:21:f5:06:63:
d7:56:ad:4c:c3:94:e8:ec:1c:9b:5c:f9:65:f4:4d:bc:d2:2f:
8b:d5:76:57:f8:d4:4e:5b:26:54:a4:f0:f6:f6:f9:63:ea:f9:
7c:87:42:55:ca:c2:d9:d3:32:31:55:b6:61:8d:3d:26:99:9b:
29:99:41:ca:50:99:21:56:68:ec:48:fb:ff:d9:d0:dc:5b:a3:
97:36:bc:31:45:3e:af:f4:6a:38:d0:2e:e4:59:93:3d:b7:9c:
26:0f:a1:d8:30:6a:39:00:fc:f0:10:00:f8:cc:34:b8:a1:c8:
08:d8:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:46 2025 by rpki-client