Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier: Ws+nxScGpnDvV1Mi82buTS5Cso6sh0z5qb8X8AjcVNU=
Subject key identifier: 94:19:63:95:A8:BD:EF:21:81:D8:D6:02:AB:78:90:F6:FB:ED:57:A2
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 019A571C178CDFE51DD5E42B2874BCAD0CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number: 1611
Signing time: Thu 06 Nov 2025 03:00:50 +0000
Manifest this update: Thu 06 Nov 2025 03:00:50 +0000
Manifest next update: Fri 07 Nov 2025 03:00:50 +0000
Files and hashes: 1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: CQ9POgSx1MmyGT5gULYqvpDkkbE8inB8xgF960Dz6BE=)
2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:17:8c:df:e5:1d:d5:e4:2b:28:74:bc:ad:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Nov 6 03:00:50 2025 GMT
Not After : Nov 7 03:00:50 2025 GMT
Subject: CN=94196395a8bdef2181d8d602ab7890f6fbed57a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:b2:a0:d3:81:87:a0:4d:ce:31:0f:fb:9b:
a7:5a:0c:a3:8e:3d:f7:5e:b6:fc:4c:e0:fd:71:08:
6e:cb:f8:a7:49:78:84:8a:13:02:54:ef:1d:9d:1e:
d7:01:c2:7a:fd:1a:59:76:6e:b6:c0:30:7c:f0:a1:
90:d4:da:75:01:f6:09:10:b8:34:4a:f9:dd:33:9a:
28:9c:17:fd:ba:ca:79:92:18:0e:4f:bb:9f:ed:d8:
c5:7d:64:b7:77:23:0e:3f:aa:81:67:7b:50:50:d1:
16:3c:79:36:15:48:33:5d:ae:d9:ad:60:56:6b:2f:
fe:75:b9:f5:dc:0c:f1:47:95:03:07:4c:09:f3:b5:
0a:4c:4d:4b:e3:75:a0:6f:ce:05:af:e3:33:2f:1e:
f6:53:51:e9:55:94:fe:16:0e:8c:8e:b5:55:c9:60:
e1:87:4b:de:b3:f0:97:71:4e:af:09:8e:5a:1f:91:
73:c4:58:d8:0d:40:41:d0:c6:03:59:3c:b1:5d:25:
8c:e1:49:e2:b7:68:51:32:6b:84:41:5f:58:06:86:
27:63:d1:d0:b8:ec:9c:70:7f:49:d2:29:c1:50:59:
17:4d:2a:39:10:44:31:82:8b:5a:40:e8:d4:34:d2:
f7:8e:d6:44:ae:d5:19:49:f3:45:c9:e8:30:af:44:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:63:95:A8:BD:EF:21:81:D8:D6:02:AB:78:90:F6:FB:ED:57:A2
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:46:32:e6:34:38:f2:c0:da:80:72:b6:7f:c6:34:c5:39:
f5:a6:ce:47:41:7c:17:16:50:63:d8:24:5f:df:90:37:1c:c4:
0c:0f:3a:cc:42:cb:1d:99:0c:c2:ba:8f:f8:84:cb:b3:a9:aa:
65:4f:f4:d8:98:dd:5c:d5:ab:6e:43:bf:f6:35:23:dd:89:ce:
1f:dd:90:bb:70:be:9c:eb:ae:fc:10:18:c5:2b:eb:ff:07:0d:
26:2b:f2:a1:55:23:d4:37:7e:5a:2f:55:1f:ec:e3:0e:0d:47:
9e:76:93:76:50:e9:24:e1:43:96:e6:4d:d2:71:6d:91:45:2c:
6c:74:fc:7a:ed:38:7d:0c:29:7e:ac:b5:64:67:6f:18:12:15:
8a:66:36:6c:da:72:bb:27:1f:01:50:41:28:33:a5:02:07:d6:
a3:eb:f2:0d:54:82:82:03:10:56:71:27:a7:de:5b:69:78:4a:
d1:8c:39:6a:ff:d5:fd:41:2b:98:a7:1b:ee:15:f4:a8:7c:b0:
7a:d8:1b:ec:5a:fd:da:a7:b2:97:d2:b5:a6:3c:75:db:d1:24:
12:1f:2b:de:84:b8:42:63:b3:5f:80:5a:25:59:af:c1:c5:05:
03:91:7c:ab:48:55:dc:b5:18:aa:fa:54:42:f3:24:82:a9:c9:
fc:ba:a6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:39 2025 by rpki-client