Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: USQVm+Z8J7kdXemWCKOI8TKG3NlWBGEdjTdFEU/rcAw=
Subject key identifier: F7:37:FC:F9:03:91:29:7C:A3:79:E6:BA:07:04:23:4C:12:8D:F2:4A
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 019A4EF5B3D1A1EE37F80456355B4018B04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 0381
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: +xuTX8+HxtMUEPnXo5FKlgMuhTK0ALOwRSMbgFhHSF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b3:d1:a1:ee:37:f8:04:56:35:5b:40:18:b0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=f737fcf90391297ca379e6ba0704234c128df24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:a2:ec:03:3f:10:7b:36:d3:c4:3a:2c:6e:
8c:f3:e9:1b:53:f2:26:79:d8:06:2e:4a:c7:c7:ba:
63:a7:e2:43:ac:bb:d7:65:43:2f:85:fb:bb:ce:a7:
aa:fd:7f:50:52:80:4d:0a:28:36:08:61:bd:01:ec:
df:a5:7a:f2:a4:63:58:91:7a:f6:25:fd:76:94:cf:
46:ea:a5:ee:b8:a2:23:d6:76:9c:f1:00:29:27:53:
80:84:8a:03:b2:1e:b8:db:84:e0:f3:b1:a7:bc:48:
9d:76:db:13:70:69:77:f4:4f:de:cb:17:ec:2a:6b:
82:c0:c4:7e:ed:64:3a:7b:f2:3b:dc:7f:f5:ca:8f:
80:f2:57:7e:94:e1:11:0d:54:4f:05:9f:ef:14:05:
ea:6b:a4:68:d4:c2:23:2f:c4:7f:b2:41:9d:52:b8:
00:9a:73:5e:46:aa:3e:f0:bd:c8:1b:86:7b:ec:0d:
75:85:b5:ed:c6:b4:3d:21:f8:ea:35:ce:06:b8:6a:
23:d0:3b:e4:c6:cf:ae:4f:43:94:0e:29:8f:81:9a:
2f:22:5a:82:cd:23:94:16:86:4a:40:48:04:cc:b1:
72:9f:a1:65:62:d7:f1:02:00:69:c4:a1:2a:d5:6b:
3f:e0:95:dc:8c:5e:3c:1a:60:6b:80:97:6c:ee:74:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:37:FC:F9:03:91:29:7C:A3:79:E6:BA:07:04:23:4C:12:8D:F2:4A
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:45:01:4b:8f:24:fb:e2:f0:de:d5:19:ad:79:aa:7e:2a:
cd:0d:e3:2f:a7:54:f6:ac:ac:ed:ee:7c:94:d6:b0:26:10:6a:
37:e6:dd:5d:00:24:f0:85:bb:ed:19:d7:61:cc:5f:35:28:01:
66:cb:38:ac:5b:e7:b9:ba:92:e4:2d:1d:0f:46:9a:c5:e5:99:
47:54:d5:7a:6e:fd:94:6d:37:8e:53:f5:bf:35:a5:92:d7:14:
3b:8f:a6:1c:a9:30:99:3c:f2:7c:98:4a:bc:ce:e7:d6:63:b7:
36:6f:95:4c:21:dc:94:70:15:15:12:62:a9:97:47:9f:41:ae:
aa:ac:a4:47:c0:b1:60:c5:99:3c:22:bc:a0:2e:aa:37:34:9d:
4f:62:29:b0:b7:7f:8b:ee:ef:b2:46:22:7a:b3:5e:ba:51:69:
0c:e5:04:50:8f:5b:41:df:28:1d:a7:44:f8:1b:21:b6:fc:50:
a1:9d:ca:24:e6:97:9f:a4:26:2f:a0:01:48:e7:d0:73:25:a5:
aa:76:b5:ad:ff:e2:f1:45:65:54:f2:53:74:2d:d3:90:0a:54:
5c:5b:b3:22:55:7b:31:7b:9b:06:ad:e2:fa:84:b6:5c:fa:05:
0e:58:30:35:9c:57:ce:a1:66:42:32:aa:46:f0:9b:96:3b:60:
aa:6f:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:26:28 2025 by rpki-client