Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: A1A6QrzwrKtcpnauDj/aIoAFLXcyS3uJ081SHT0W7mc=
Subject key identifier: DD:EF:4D:86:D4:FD:6B:53:63:DE:D9:55:FB:C0:46:64:DB:BF:B8:A1
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019A4EF5E90BDC8D0E0BFE04F4D9907837B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: YvzzHrtCyYnQ+S4mDi4L2WMrkzD0XuWHABcfSIwz8zc=)
2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e9:0b:dc:8d:0e:0b:fe:04:f4:d9:90:78:37:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=ddef4d86d4fd6b5363ded955fbc04664dbbfb8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:2b:f6:e6:2e:62:4c:97:57:52:c6:59:aa:
ac:0e:8c:c3:f1:5f:e5:00:53:bb:98:83:ef:2e:b0:
1b:78:5b:a7:43:d8:1a:39:04:fd:41:3c:f1:d4:f0:
bc:07:34:65:77:8b:04:2a:51:fe:93:c7:0c:fb:5d:
44:01:1a:9b:50:09:5b:c4:a9:47:8a:e3:87:78:9a:
51:94:6b:b6:cc:7e:8a:0c:bc:ec:09:a3:57:81:6f:
de:c6:08:74:05:68:d0:a7:2d:5e:8b:0c:fe:7f:1d:
fd:e9:40:a7:16:df:84:6d:e6:a9:40:14:08:c5:27:
21:72:83:73:0b:cb:b5:1e:e2:a0:7b:73:d2:63:de:
63:04:4f:8f:43:5e:0c:f8:69:b7:1f:d8:26:f7:58:
bd:48:ab:13:00:da:bf:7e:03:c5:b8:94:e7:4c:55:
42:cb:58:94:6b:f0:43:25:a2:f4:55:ca:32:c8:b6:
63:b5:f8:eb:33:a2:cf:d2:1a:1d:42:9f:ff:83:54:
68:b0:85:6f:5d:fc:66:c3:90:be:0c:06:d2:bd:73:
44:b3:f6:a4:58:46:e8:89:05:fd:fa:15:27:1f:e7:
9b:0c:11:5a:21:02:1e:6d:8b:54:7a:12:48:0d:2e:
3a:1a:61:ae:59:8b:06:5a:71:28:44:75:da:12:e7:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:4D:86:D4:FD:6B:53:63:DE:D9:55:FB:C0:46:64:DB:BF:B8:A1
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ef:9b:f5:ef:c1:89:f2:94:a6:f4:02:7b:b2:b6:d2:73:17:
6a:c6:20:b0:a5:87:cc:2b:d4:71:15:d1:83:30:fd:49:94:65:
5f:92:f2:6b:9b:05:ba:26:76:66:52:f5:73:02:a6:23:11:40:
e1:03:7f:d2:a0:28:40:4c:d4:66:fb:76:3d:25:16:f4:07:f4:
58:21:79:33:7d:e1:22:87:3e:a4:a5:90:f9:2b:b9:b2:b6:05:
a1:95:93:be:2b:f1:de:fa:ff:28:8f:9c:fb:19:14:0b:08:f5:
a9:5c:f3:0b:0c:d4:63:8e:1a:58:21:64:25:3f:dc:8a:62:80:
bc:2f:fa:c4:ba:63:ca:6d:5f:13:15:b8:34:7f:3a:39:d8:43:
3c:51:41:13:fd:48:cc:91:d5:41:6c:3f:a2:8d:ac:24:2e:6d:
04:9e:17:e5:55:28:c5:17:76:57:d9:d2:dd:09:eb:ef:8f:12:
e4:78:45:0d:b9:9b:bf:06:38:36:42:4a:96:08:5e:a5:e6:7f:
83:2e:75:9c:61:6d:1b:f2:8c:e3:48:de:9e:2c:05:f5:a1:f5:
67:0a:00:15:77:5d:7e:95:e5:5f:e3:da:17:49:df:f7:7a:4c:
de:97:77:4f:e5:4a:75:b1:9d:18:5b:e0:13:dd:a5:1c:d6:dd:
73:a9:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:02 2025 by rpki-client