Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json)
Hash identifier: nlLH9huhsYpdtAhLwsSlwOTkelohbjsOoX2DlNGC66c=
Subject key identifier: 2D:49:78:DE:6F:38:68:00:AE:FA:84:06:B8:52:24:C8:B8:34:66:15
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 019A533F8B5C597F08A86201AF3006F1D6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
Manifest number: 160F
Signing time: Wed 05 Nov 2025 09:01:04 +0000
Manifest this update: Wed 05 Nov 2025 09:01:04 +0000
Manifest next update: Thu 06 Nov 2025 09:01:04 +0000
Files and hashes: 1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: /ku4Vac0WVB0FdPDRh6KpAFgaeVSN0VSVHW7vxNIp/0=)
2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:8b:5c:59:7f:08:a8:62:01:af:30:06:f1:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Nov 5 09:01:04 2025 GMT
Not After : Nov 6 09:01:04 2025 GMT
Subject: CN=2d4978de6f386800aefa8406b85224c8b8346615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:a3:d1:a0:b6:42:08:0a:c3:2a:28:14:2d:
63:7d:0f:d3:6d:f4:91:e3:0a:70:b3:3a:f3:c6:40:
78:59:64:b1:bc:ee:66:67:49:44:39:e0:fc:60:25:
2e:3a:d4:8a:c0:63:7e:39:3b:bd:3b:4f:41:90:96:
29:e5:fe:0f:70:18:c2:40:c6:41:ce:84:ff:75:2e:
0e:d1:19:19:d7:e1:ae:af:b0:71:f0:3c:ea:50:e8:
0f:26:c1:c0:46:18:c5:0a:f5:94:3a:35:19:b1:05:
29:ac:6e:d0:e6:7c:b4:e4:61:93:b9:f1:7d:43:eb:
37:2d:9f:43:bb:3b:f2:37:fc:03:62:bb:e5:f9:ef:
26:c9:93:0d:33:a6:87:fd:1c:9b:4d:da:93:19:a5:
58:20:06:19:09:98:54:d5:b0:a9:c0:2c:e2:09:f6:
a9:7b:89:06:22:cb:7d:62:67:a3:c0:10:e9:f2:24:
83:62:76:45:53:7a:4d:85:17:f5:f7:62:9e:04:68:
ed:68:ea:a4:69:9d:0f:c0:10:a9:1e:ca:13:27:0e:
30:7c:e1:de:de:f3:7b:ec:b5:c9:98:65:01:c7:ec:
82:0a:be:82:f0:9d:f1:29:da:ec:70:c1:68:9c:2d:
13:7d:43:7d:a1:93:4d:2c:d3:d4:b3:09:be:2f:81:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:78:DE:6F:38:68:00:AE:FA:84:06:B8:52:24:C8:B8:34:66:15
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0a:28:6d:6e:db:aa:c3:9e:f1:1b:12:f2:66:f4:b4:cd:95:
fd:cb:9c:0b:e1:7c:d3:86:82:33:80:ba:fc:39:4a:96:f4:e2:
04:f8:ac:34:02:01:2f:ba:58:a8:d2:6a:d2:03:ac:61:d9:fb:
9a:bc:b3:34:e1:58:b8:00:2d:4c:ff:20:32:43:d9:19:50:1e:
03:c2:4f:ae:c6:a1:dd:b3:33:a6:9b:d8:26:c7:fe:8f:39:af:
f0:98:f3:a9:46:31:e5:8e:75:33:4e:fa:86:01:40:bf:fe:35:
f0:88:c1:1a:f3:15:d3:59:b6:f5:b5:a5:4c:ec:5b:97:43:0a:
b0:6a:99:03:b6:11:4c:64:af:33:5c:98:d9:d6:fa:be:1d:13:
e3:86:b0:7e:8c:c5:63:71:1c:24:2f:a0:56:b5:4f:b0:45:62:
98:ef:07:2c:43:ca:25:07:a3:78:22:4d:47:2d:ce:f8:a5:b3:
a2:e6:6d:d5:f0:90:88:95:d8:52:da:87:d3:e0:69:5d:0e:e2:
ce:e9:a9:24:d1:ef:68:bf:1e:48:d6:14:d5:27:45:02:f8:5c:
8e:31:3b:cd:aa:42:24:63:da:e0:7c:af:f4:91:c7:bf:6f:9c:
bf:65:b6:fa:84:af:90:8d:95:e9:c3:ee:55:71:9c:f1:85:1c:
71:d0:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:10 2025 by rpki-client