Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: RTn2G/I8MiAs+PRqC2eWxpzMP0HS+LR5Q9L7mbm9yHM=
Subject key identifier: 25:F9:BE:D2:18:2B:35:46:BE:6F:B8:A1:00:00:F6:C5:0E:F8:A9:F6
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019A4E8677CBDAB834162219598F47ABADB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 1651
Signing time: Tue 04 Nov 2025 11:00:26 +0000
Manifest this update: Tue 04 Nov 2025 11:00:26 +0000
Manifest next update: Wed 05 Nov 2025 11:00:26 +0000
Files and hashes: 1: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (hash: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=)
2: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: NDlDYHydQyGGdkIi9cV+3UbhkrjfBbGYyqpoRxKBHk8=)
3: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (hash: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=)
4: y3TTdcjKoEjXwgjO1xfh0tYATdA.roa (hash: 7D4/Czv6H7eCbZASUzHWZokIq1S56p3iwes3EPnUWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:77:cb:da:b8:34:16:22:19:59:8f:47:ab:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Nov 4 11:00:26 2025 GMT
Not After : Nov 5 11:00:26 2025 GMT
Subject: CN=25f9bed2182b3546be6fb8a10000f6c50ef8a9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f0:0b:32:3b:c2:4e:ef:a1:6b:75:61:5b:41:
bd:bf:55:a6:21:29:68:0d:d6:7c:1d:f0:56:7b:8d:
01:b1:4c:26:e2:10:a4:66:5c:c8:bf:8a:9a:f8:61:
60:88:fa:7b:ca:27:bd:15:35:12:08:86:2f:8a:4f:
db:c8:0f:9b:9b:11:aa:46:a1:ef:db:ac:30:f1:bf:
8b:68:91:d8:bb:ff:d3:ca:36:f6:28:56:6f:76:d1:
c5:b4:cd:de:c6:20:12:89:7f:de:21:1f:58:7d:fa:
90:4e:ed:b0:a3:2c:15:95:34:07:fd:4b:a2:96:ce:
c0:6c:df:6d:8b:77:0e:65:6d:f4:15:ec:04:ec:18:
19:74:21:af:35:37:19:9c:8f:5c:9d:b5:cf:b0:6b:
5f:8e:b2:70:78:cb:c7:e1:57:bd:2c:6e:33:13:48:
2b:d8:b2:e5:85:79:e3:6e:4b:19:a8:cf:25:25:7c:
8a:bc:c0:31:88:2d:70:87:95:b5:bf:84:d7:15:69:
54:ce:9c:d7:83:ab:f4:25:a9:8d:2e:6d:f3:76:c7:
d2:e5:2c:de:00:6e:2a:90:d0:e4:19:6b:6f:a0:45:
b8:78:64:16:2e:e3:1b:4d:bd:ac:d4:00:e4:e8:55:
24:07:28:df:5f:11:1d:dd:e3:a0:b9:08:ae:6d:57:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:BE:D2:18:2B:35:46:BE:6F:B8:A1:00:00:F6:C5:0E:F8:A9:F6
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c5:c0:3d:21:c8:f9:d2:18:47:ff:03:b9:83:aa:bf:78:7f:
13:ba:14:9b:97:45:2d:f0:f6:b1:f0:8c:fd:8f:de:e3:07:f5:
78:bd:d1:ed:68:f8:0e:dd:02:79:57:a1:17:28:cc:2a:2f:0e:
a7:29:c3:a3:49:3e:48:00:87:5d:26:7e:e5:74:4e:33:29:da:
68:e5:69:17:b2:e2:2f:60:66:d6:72:0d:8d:c8:24:62:cb:79:
5e:47:1d:8a:ee:9e:7e:c1:9a:13:ff:c0:ce:73:af:ab:ea:ab:
7f:4f:88:22:a8:07:fe:e4:a3:e9:23:5a:72:96:e5:57:73:8f:
77:26:21:94:f8:32:65:eb:83:6b:ee:30:32:f5:05:19:d1:f9:
ff:28:40:35:d4:c3:8f:d4:dc:e9:fd:14:44:c6:30:36:c4:5f:
cc:4a:13:99:1f:2f:1e:f3:16:62:ef:41:14:d5:69:8a:12:34:
83:70:40:6d:bd:11:49:56:83:7b:0e:d5:1f:01:63:dc:10:bd:
45:09:36:25:e5:0e:2d:4c:81:4f:53:04:1e:99:6b:bb:6c:dd:
57:ab:5f:81:d8:c6:a1:91:1e:d1:80:90:13:cb:c0:24:d9:de:
b1:e8:71:47:b1:10:8a:0c:e8:c0:52:61:f3:13:0f:35:73:c8:
65:64:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:08 2025 by rpki-client