Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: mBgdmO5F0wAP47HIQalrFDr+Jlp8BS/ekbgmZFLyuJo=
Subject key identifier: 14:1C:97:D7:07:46:85:1B:46:29:93:C5:EE:17:C2:F0:16:CE:2E:BD
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 01988E7DC164C30C3C058F8C496509E6C6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0CF0
Signing time: Sat 09 Aug 2025 11:01:02 +0000
Manifest this update: Sat 09 Aug 2025 11:01:02 +0000
Manifest next update: Sun 10 Aug 2025 11:01:02 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: KBjly8RcwAsZ87nYTSSo4z+79whtgfiNWaV8/kVSdus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:c1:64:c3:0c:3c:05:8f:8c:49:65:09:e6:c6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Aug 9 11:01:02 2025 GMT
Not After : Aug 10 11:01:02 2025 GMT
Subject: CN=141c97d70746851b462993c5ee17c2f016ce2ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:5e:4e:be:bc:03:45:57:e9:67:cb:79:5e:
f5:1a:e8:e4:00:e4:a6:07:f8:f1:81:20:4b:2e:d4:
ab:c8:37:dc:c2:de:39:a0:65:29:fa:c4:bf:17:fb:
bd:c1:a6:86:94:10:07:86:29:ff:03:46:44:3e:d7:
a0:d7:a4:ac:b4:80:c3:0d:39:5e:c0:70:ab:85:18:
b9:e0:4d:fe:b6:ed:cb:f1:0f:c0:e8:c5:75:3c:ff:
ae:cd:a3:5e:d6:95:72:13:36:f5:82:c3:95:6e:4a:
32:eb:ee:dd:23:b0:03:89:0d:3e:d8:3b:5f:6d:92:
d9:e2:db:f4:5c:d7:60:98:22:34:ba:81:dd:3b:d3:
ec:39:ae:08:a7:a6:74:d4:ba:af:ec:d7:1e:2d:7c:
af:f5:5d:99:8a:01:16:74:2c:04:dd:6e:1c:1a:cb:
1b:e3:4c:cf:e3:a9:f3:81:1d:ce:8b:1e:92:60:89:
43:d9:04:bc:b1:97:5b:b1:ea:a4:c9:2d:a3:6d:3e:
5d:1f:98:52:8b:dc:53:a6:b3:19:b9:90:74:fc:96:
9f:ee:2e:d1:2d:fc:2e:c9:55:b4:7e:c0:cb:c5:47:
47:4b:30:86:9d:6e:07:b6:d9:7f:71:a6:86:e6:18:
b2:15:1f:8e:b0:3a:ba:0b:20:5b:5f:ae:5f:36:d4:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:97:D7:07:46:85:1B:46:29:93:C5:EE:17:C2:F0:16:CE:2E:BD
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bf:6f:9f:c9:12:0b:e3:d4:3f:93:9e:8f:fd:59:51:8f:98:
0c:13:ef:71:4c:a1:be:19:57:85:1c:e0:36:91:d8:8d:d8:98:
15:5d:3d:59:fc:0b:d3:e5:f2:4c:f9:d5:1f:61:a4:7f:c2:6a:
c5:a8:58:59:69:cd:ba:cb:42:5d:75:59:f0:5a:16:66:d3:62:
52:14:8f:59:f7:2e:1c:73:fd:28:27:bb:8d:38:1a:aa:a7:dc:
43:14:76:4a:56:d5:fe:74:7e:9c:68:ce:b9:d6:78:2e:f0:f6:
bf:56:ff:12:17:90:13:15:6c:14:35:74:f4:fd:a9:57:8d:5c:
ec:fa:5a:06:13:bf:b0:af:cc:b0:d6:9a:7d:5d:2d:ee:db:2d:
81:37:b6:58:87:93:18:2a:58:0d:a4:4e:42:e0:52:fc:fc:4d:
a0:6e:5f:d7:f4:f0:0f:9f:5b:f8:69:28:cb:00:d1:59:ca:0a:
b9:00:61:d1:c0:ff:1a:db:86:74:3e:1b:e1:ad:41:3e:25:14:
5a:04:ad:ce:c1:e1:d5:10:c4:9b:e7:c5:27:af:ba:37:37:9c:
fe:5c:9b:9c:d3:0e:5c:0e:bc:76:c3:2d:73:7e:d3:82:c7:0b:
a0:e7:12:3a:10:23:f6:55:f8:75:33:97:f4:3c:25:a2:df:70:
0d:b6:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:22 2025 by rpki-client