Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: HTukssT09QO3zx8Qmi7AhMQRIa6OEBDYVgCcvty8/w4=
Subject key identifier: 1F:68:CE:BF:65:42:C8:B4:6E:29:1D:1C:42:B8:28:71:47:8B:DD:B9
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 0199387011817EE97ED9749AF69D9869194F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 15C1
Signing time: Thu 11 Sep 2025 11:01:32 +0000
Manifest this update: Thu 11 Sep 2025 11:01:32 +0000
Manifest next update: Fri 12 Sep 2025 11:01:32 +0000
Files and hashes: 1: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (hash: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=)
2: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: AzjI2Ddw9cpTZNgXgtovvDnwTcxfEIp/EA65spQZiM4=)
3: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (hash: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=)
4: y3TTdcjKoEjXwgjO1xfh0tYATdA.roa (hash: 7D4/Czv6H7eCbZASUzHWZokIq1S56p3iwes3EPnUWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:11:81:7e:e9:7e:d9:74:9a:f6:9d:98:69:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Sep 11 11:01:32 2025 GMT
Not After : Sep 12 11:01:32 2025 GMT
Subject: CN=1f68cebf6542c8b46e291d1c42b82871478bddb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:8c:65:55:e8:46:b2:91:87:5f:a0:d1:b9:
c1:1a:09:6e:1a:b0:c9:a7:0c:1d:18:5c:b8:28:1e:
15:88:1e:83:26:a5:3b:26:7e:ad:86:b4:a3:35:d9:
44:f0:89:9c:e6:4e:aa:cf:62:28:84:16:33:2d:6e:
fc:bd:67:26:24:91:9e:21:66:ba:cc:2d:b2:eb:b9:
49:1c:70:e3:69:6a:f0:36:4a:5f:b7:06:40:17:70:
9e:10:0f:1c:76:51:43:ec:61:98:6a:04:29:27:74:
2a:de:01:8b:4c:90:df:ce:90:8d:e4:cd:13:0e:d6:
9f:ff:91:b2:e6:ef:14:ed:91:f8:2e:3e:59:bb:66:
0e:84:bf:fe:ae:3a:10:74:92:0a:9d:36:50:31:b4:
1c:02:d8:85:ab:1d:2a:fd:dd:96:d2:80:e1:f7:45:
a3:e5:66:c4:e8:fa:75:2b:7b:2f:d4:b4:a6:7a:95:
c0:d6:ff:69:8d:6a:c7:22:5d:19:28:5d:2e:0b:5d:
27:ec:a5:62:14:c9:79:56:0c:15:4d:06:99:d5:47:
01:65:67:fc:8f:4d:20:d7:c7:11:c5:52:f2:25:b0:
46:0e:55:29:12:7a:09:f4:f1:66:cb:d4:da:f8:83:
00:0e:14:e4:d6:4f:04:72:59:eb:10:67:7e:e9:e2:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:68:CE:BF:65:42:C8:B4:6E:29:1D:1C:42:B8:28:71:47:8B:DD:B9
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:74:8a:0a:33:44:54:9b:6a:0d:55:ed:8e:e8:b1:c6:6e:88:
4f:27:e1:7b:17:73:96:09:24:83:c8:75:6b:ba:1a:e0:f5:77:
62:53:de:4d:12:d4:f6:d1:8a:93:c5:e1:8a:0a:c3:f6:36:51:
29:15:1d:cf:05:7c:b0:09:c3:94:57:d4:42:22:d3:cd:85:3b:
ca:17:17:e5:4a:0c:06:f9:38:06:eb:a2:51:b2:49:1f:d8:40:
c5:1f:db:24:12:a0:89:c6:4f:40:6d:bc:bd:9c:ed:69:2c:bc:
24:d3:6f:0c:02:80:e9:f1:b2:70:9b:eb:a1:cd:cd:e9:b0:40:
0d:f7:78:e8:7f:db:ef:c4:76:25:69:96:e4:61:b5:15:3d:52:
44:c1:bf:3c:24:73:2d:78:ec:1b:0d:7e:3e:ec:aa:ba:c7:84:
f2:f5:5d:7c:83:bb:7c:8b:d3:c8:1c:8a:50:47:c7:31:83:52:
4f:5d:a9:c5:58:11:96:a0:f9:e1:2a:de:92:23:81:ed:b7:5e:
1e:dc:18:d1:4d:fb:a8:25:ea:a1:45:e4:8f:6d:3f:b3:9d:86:
b0:c9:a0:a8:8e:32:46:cf:3f:5d:ad:d3:f3:26:b7:56:4c:82:
02:c3:ef:39:e1:26:3d:95:47:d6:40:90:8f:d9:7b:76:d2:10:
bc:ca:c8:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4cBGBful+2XSa9p2YaRlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjg1Y2Y4OGE3ZmM0M2ZlMWM3ZmUzNGE2ZmYzZGRiYjQx
NGYwYjUwHhcNMjUwOTExMTEwMTMyWhcNMjUwOTEyMTEwMTMyWjAzMTEwLwYDVQQD
EygxZjY4Y2ViZjY1NDJjOGI0NmUyOTFkMWM0MmI4Mjg3MTQ3OGJkZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFOMZVXoRrKRh1+g0bnBGgluGrDJ
pwwdGFy4KB4ViB6DJqU7Jn6thrSjNdlE8Imc5k6qz2IohBYzLW78vWcmJJGeIWa6
zC2y67lJHHDjaWrwNkpftwZAF3CeEA8cdlFD7GGYagQpJ3Qq3gGLTJDfzpCN5M0T
Dtaf/5Gy5u8U7ZH4Lj5Zu2YOhL/+rjoQdJIKnTZQMbQcAtiFqx0q/d2W0oDh90Wj
5WbE6Pp1K3sv1LSmepXA1v9pjWrHIl0ZKF0uC10n7KViFMl5VgwVTQaZ1UcBZWf8
j00g18cRxVLyJbBGDlUpEnoJ9PFmy9Ta+IMADhTk1k8EclnrEGd+6eKIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9ozr9lQsi0bikdHEK4KHFHi925MB8GA1UdIwQY
MBaAFDpoXPiKf8Q/4cf+NKb/Pdu0FPC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDct
NTlkNmNhNjVjY2JjLzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDctNTlkNmNhNjVjY2Jj
LzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3SKCjNE
VJtqDVXtjuixxm6ITyfhexdzlgkkg8h1a7oa4PV3YlPeTRLU9tGKk8XhigrD9jZR
KRUdzwV8sAnDlFfUQiLTzYU7yhcX5UoMBvk4BuuiUbJJH9hAxR/bJBKgicZPQG28
vZztaSy8JNNvDAKA6fGycJvroc3N6bBADfd46H/b78R2JWmW5GG1FT1SRMG/PCRz
LXjsGw1+PuyquseE8vVdfIO7fIvTyByKUEfHMYNST12pxVgRlqD54SrekiOB7bde
HtwY0U37qCXqoUXkj20/s52GsMmgqI4yRs8/Xa3T8ya3VkyCAsPvOeEmPZVH1kCQ
j9l7dtIQvMrISg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 19:12:39 2025 by rpki-client