Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: pmHq0cKW0pSADq29APz8OGIkyhJBWO6j/MKnGN9y6xk=
Subject key identifier: 87:A7:47:A1:16:27:CB:30:3D:7D:F3:D1:3F:CD:17:E4:F6:09:48:2D
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 0198A04CE13B658B9A14E534B4A8F545BEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 02A2
Signing time: Tue 12 Aug 2025 22:00:49 +0000
Manifest this update: Tue 12 Aug 2025 22:00:49 +0000
Manifest next update: Wed 13 Aug 2025 22:00:49 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: 7JHOeV2BspO6Sog7wgzg/MXXuLqvi3q22gOdXGCoZU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:e1:3b:65:8b:9a:14:e5:34:b4:a8:f5:45:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Aug 12 22:00:49 2025 GMT
Not After : Aug 13 22:00:49 2025 GMT
Subject: CN=87a747a11627cb303d7df3d13fcd17e4f609482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:a1:25:cf:79:e1:c4:44:47:7a:3f:c1:28:
ae:bb:9d:af:ae:a1:59:86:f0:db:8c:ff:49:da:79:
5c:01:db:bb:bd:61:ba:e2:42:1c:71:0f:53:4b:7a:
90:a1:8c:06:57:7e:74:e0:8a:5a:15:d5:3b:20:91:
c8:43:54:c8:d7:a1:65:e0:79:09:13:43:b7:4e:ee:
73:5c:a9:a4:37:6d:47:45:e9:50:72:55:af:e1:8d:
b1:e3:ec:c3:54:07:22:24:56:69:d8:d8:62:86:8c:
e9:aa:15:ca:d9:df:37:e8:b0:13:46:8d:05:57:79:
24:40:d9:43:40:43:8f:6f:00:de:37:7b:cf:f9:ef:
ce:f5:f8:a2:f2:b3:38:4b:f7:56:ea:4b:58:19:a3:
c3:13:e2:f4:fa:3f:94:6b:1b:41:4d:76:d5:7e:12:
78:44:06:37:af:1d:e1:f1:a3:47:d0:5d:73:f8:9b:
52:f1:f0:6a:16:99:9a:10:89:d6:53:a2:ae:25:6e:
e7:b7:50:ac:c7:35:0b:d9:f3:ab:cd:9c:eb:a2:4b:
55:58:30:62:2c:25:7c:8f:b4:ee:b9:f8:0a:00:0c:
e0:b4:67:7d:45:26:6b:a6:90:04:d3:bb:03:b2:a6:
a6:57:38:72:5a:c1:e2:be:7e:09:f1:89:59:3e:27:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A7:47:A1:16:27:CB:30:3D:7D:F3:D1:3F:CD:17:E4:F6:09:48:2D
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ad:2e:d8:2b:45:a7:85:16:a0:0f:48:05:e8:bf:57:d9:f8:
52:79:96:95:f9:dd:9e:1d:a9:f3:5e:95:f5:1c:25:34:bf:49:
55:4e:75:a1:65:b0:e0:9c:a5:13:62:74:59:36:12:68:c1:78:
5f:b5:91:32:8b:91:5e:f9:88:8d:ad:4c:60:82:1c:d7:8c:28:
97:99:eb:1b:cd:5c:1c:c4:41:75:38:4a:19:db:09:7f:ac:7c:
a5:50:d1:b5:c8:fa:80:16:c7:86:53:24:ea:37:76:c1:d6:ff:
33:5b:db:86:ff:b7:f4:24:bf:72:26:b3:1b:b8:ce:9c:1d:ee:
62:cc:53:2f:0d:a9:4b:2a:00:80:d6:bb:84:a2:2d:66:cf:74:
cc:f1:6c:b8:49:74:64:63:4a:7e:ae:5d:76:b7:18:6e:db:78:
2b:30:80:f6:b6:41:fb:3c:30:e3:72:4c:66:e1:6b:d3:5c:16:
31:8b:44:90:e9:aa:e8:34:16:7f:a7:7b:6b:84:d2:3f:43:77:
45:2f:58:9b:f7:bb:7e:09:fc:3a:ec:dc:33:8c:6b:8f:5a:f4:
35:f0:d0:ff:2f:90:6c:44:3c:1f:65:10:a8:47:4f:07:d5:a6:
58:21:06:35:04:1a:92:51:b6:76:44:d4:7c:06:c4:69:0d:dc:
81:db:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:32:09 2025 by rpki-client