Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: Y82vWldyLWYgSn/ObL5Hr3NF+X2eNE6lPCZwCBW+EfM=
Subject key identifier: 7D:FA:01:4E:81:C3:C2:D5:97:CE:AB:37:34:E8:7B:DA:66:2D:5D:E8
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019A2BC3746F0E86B18CA1CC271D13D7EEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 163F
Signing time: Tue 28 Oct 2025 17:00:20 +0000
Manifest this update: Tue 28 Oct 2025 17:00:20 +0000
Manifest next update: Wed 29 Oct 2025 17:00:20 +0000
Files and hashes: 1: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (hash: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=)
2: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: OY3JVTcQsWv0rgGhyr8Nx0ZaUdFysFPXpGX5jxyr+ms=)
3: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (hash: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=)
4: y3TTdcjKoEjXwgjO1xfh0tYATdA.roa (hash: 7D4/Czv6H7eCbZASUzHWZokIq1S56p3iwes3EPnUWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:c3:74:6f:0e:86:b1:8c:a1:cc:27:1d:13:d7:ee:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Oct 28 17:00:20 2025 GMT
Not After : Oct 29 17:00:20 2025 GMT
Subject: CN=7dfa014e81c3c2d597ceab3734e87bda662d5de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:36:f0:f4:22:6f:9f:da:31:40:fa:be:7a:
dc:3f:6b:6c:5e:c5:23:33:d6:31:a1:e8:f3:96:03:
c6:a6:af:37:38:3d:57:a1:51:1a:32:67:a2:56:43:
16:5f:e8:70:12:d1:87:31:61:4b:09:82:a2:c9:1f:
6e:e9:47:64:cc:8b:d4:4a:44:70:4e:48:93:a4:da:
d4:a8:aa:52:aa:4d:79:d2:31:67:14:18:69:7d:99:
b2:d8:eb:2b:6a:c4:63:a9:51:53:8e:64:79:c2:b2:
56:f0:90:42:91:be:b2:6d:a2:f5:6f:6e:65:bd:0a:
8d:3f:1a:61:1c:6f:cf:ef:b2:ca:31:25:d7:a0:ed:
fa:dc:5b:c1:35:b8:c3:9e:8f:74:2b:49:05:e0:b1:
75:a3:42:f5:39:02:36:56:46:38:ed:d9:39:c2:7e:
75:f6:d8:b8:73:ca:92:f3:8d:da:ef:35:55:c6:11:
55:33:90:a2:ce:72:01:92:4d:0b:3e:63:18:40:53:
eb:38:e5:f0:c3:5d:96:d7:2c:44:51:dd:6c:46:39:
e0:00:76:11:ed:94:ab:21:af:2d:81:1d:c5:f1:37:
78:4a:7c:ac:9e:2c:5f:25:0c:48:8e:2a:32:a9:b5:
50:c8:a8:48:64:d3:8c:b3:99:c9:00:93:ce:f0:e9:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FA:01:4E:81:C3:C2:D5:97:CE:AB:37:34:E8:7B:DA:66:2D:5D:E8
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:53:06:fb:c4:65:c9:b8:f5:71:30:bc:75:c4:b6:52:44:c5:
97:f2:b7:f9:b7:57:82:3f:b2:66:27:27:49:0a:97:09:6e:75:
d4:b8:9b:ce:e1:32:fb:df:97:c7:0a:72:67:6c:d4:93:6f:ce:
22:17:c1:61:f3:1c:8c:4b:ef:4d:92:3b:61:a4:be:c7:8a:af:
b3:a4:fe:a3:4a:32:13:44:33:b7:e2:71:0c:f1:34:f6:f6:ac:
04:2e:bd:97:93:00:a8:03:82:81:51:40:18:45:58:56:e7:15:
f7:91:47:eb:df:bd:c6:bf:c1:38:ea:71:69:53:02:c2:76:81:
c6:7f:8e:dc:47:fa:09:b4:ef:f2:42:92:c9:2b:fe:04:10:c2:
cd:7a:b3:1b:57:2d:53:1f:1b:34:ac:f8:fb:8f:5d:6e:b1:7e:
f1:50:34:a9:14:63:29:2c:37:8f:4e:95:fa:ed:c3:3b:1a:eb:
08:1f:f6:4b:5b:1c:25:c2:5e:26:63:90:29:84:6c:eb:5d:ed:
c4:ab:1d:ea:72:f3:c0:59:b1:c4:2b:61:9f:59:b1:02:25:ff:
ad:51:35:b0:82:5e:5d:0a:5c:41:08:86:6c:53:68:c3:9f:04:
ae:73:1e:7e:0b:9f:4e:11:22:13:00:9d:53:eb:89:ad:81:35:
d6:3c:8f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorw3RvDoaxjKHMJx0T1+7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjg1Y2Y4OGE3ZmM0M2ZlMWM3ZmUzNGE2ZmYzZGRiYjQx
NGYwYjUwHhcNMjUxMDI4MTcwMDIwWhcNMjUxMDI5MTcwMDIwWjAzMTEwLwYDVQQD
Eyg3ZGZhMDE0ZTgxYzNjMmQ1OTdjZWFiMzczNGU4N2JkYTY2MmQ1ZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnks28PQib5/aMUD6vnrcP2tsXsUj
M9YxoejzlgPGpq83OD1XoVEaMmeiVkMWX+hwEtGHMWFLCYKiyR9u6UdkzIvUSkRw
TkiTpNrUqKpSqk150jFnFBhpfZmy2OsrasRjqVFTjmR5wrJW8JBCkb6ybaL1b25l
vQqNPxphHG/P77LKMSXXoO363FvBNbjDno90K0kF4LF1o0L1OQI2VkY47dk5wn51
9ti4c8qS843a7zVVxhFVM5CiznIBkk0LPmMYQFPrOOXww12W1yxEUd1sRjngAHYR
7ZSrIa8tgR3F8Td4SnysnixfJQxIjioyqbVQyKhIZNOMs5nJAJPO8Oni+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH36AU6Bw8LVl86rNzToe9pmLV3oMB8GA1UdIwQY
MBaAFDpoXPiKf8Q/4cf+NKb/Pdu0FPC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDct
NTlkNmNhNjVjY2JjLzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDctNTlkNmNhNjVjY2Jj
LzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlMG+8Rl
ybj1cTC8dcS2UkTFl/K3+bdXgj+yZicnSQqXCW511LibzuEy+9+XxwpyZ2zUk2/O
IhfBYfMcjEvvTZI7YaS+x4qvs6T+o0oyE0Qzt+JxDPE09vasBC69l5MAqAOCgVFA
GEVYVucV95FH69+9xr/BOOpxaVMCwnaBxn+O3Ef6CbTv8kKSySv+BBDCzXqzG1ct
Ux8bNKz4+49dbrF+8VA0qRRjKSw3j06V+u3DOxrrCB/2S1scJcJeJmOQKYRs613t
xKsd6nLzwFmxxCthn1mxAiX/rVE1sIJeXQpcQQiGbFNow58ErnMefgufThEiEwCd
U+uJrYE11jyPUQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:46:52 2025 by rpki-client