Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: JvfO0t6Xv+BftyhKvN9PU4nrMHLHNzeqVVFO+lnTS8k=
Subject key identifier: D7:62:88:09:37:25:0F:10:77:44:EF:7A:01:FD:FF:96:65:A7:6B:18
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 019A4C97F3CFBF40DAC6B7E1CB91BE03A7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0DD7
Signing time: Tue 04 Nov 2025 02:00:17 +0000
Manifest this update: Tue 04 Nov 2025 02:00:17 +0000
Manifest next update: Wed 05 Nov 2025 02:00:17 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: R3Df9KlVqQG8skjj5kE6x2nmkBGNGwmpxLDju03hd/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:f3:cf:bf:40:da:c6:b7:e1:cb:91:be:03:a7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Nov 4 02:00:17 2025 GMT
Not After : Nov 5 02:00:17 2025 GMT
Subject: CN=d762880937250f107744ef7a01fdff9665a76b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:45:2b:6f:49:de:c6:e4:16:df:eb:86:a7:
5e:1a:15:57:94:a9:5e:76:d4:15:aa:7e:f5:b3:35:
99:3c:92:c4:1e:64:e8:a0:e7:e5:20:14:ef:e5:93:
42:43:4c:92:d4:ad:f0:ed:c0:a1:4c:af:5c:ad:51:
98:ad:37:e6:ee:f6:74:55:20:6b:47:7e:b8:e8:24:
be:52:a9:11:3a:e9:a8:40:03:ac:e6:36:91:23:d1:
4a:52:e4:bc:63:0a:04:90:7a:72:94:f1:f5:14:a9:
3b:a3:6c:7e:60:60:4e:20:e7:06:d4:d5:5f:23:d8:
f9:2d:3e:45:61:90:51:54:57:15:8d:33:8a:1b:f8:
31:5f:01:9e:aa:80:4b:03:4d:57:19:69:96:0b:fe:
ec:7d:0b:af:ab:fe:5b:7c:d5:1f:8b:fb:5e:9f:21:
d8:e6:36:4e:ff:10:e8:ce:12:39:68:67:33:76:07:
0c:84:ca:3d:32:7e:f1:cb:3b:4b:3d:fd:67:23:d0:
a8:87:c9:e3:32:b2:fa:87:a3:dd:c3:3f:59:07:b3:
b2:dd:ae:fe:8c:e8:28:59:44:0f:3c:26:bf:84:79:
1b:cb:2a:73:0d:95:21:53:06:ce:5a:4e:77:1f:7a:
6d:d8:e3:4c:ae:3c:11:22:92:0b:a0:19:d3:e3:6f:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:88:09:37:25:0F:10:77:44:EF:7A:01:FD:FF:96:65:A7:6B:18
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:93:6c:25:a2:1c:d4:3f:4c:9f:39:b8:01:e1:b8:fe:29:83:
ff:99:02:fc:0d:20:69:0a:9f:18:42:0c:6b:93:8d:42:8c:3b:
36:27:d3:60:fa:08:9f:90:02:1d:9d:ac:9f:f1:5a:8c:2a:de:
c2:34:a0:0c:47:d7:38:08:74:d0:c9:4b:74:24:db:50:1a:b9:
3a:46:c5:6a:92:3b:ad:92:42:d0:ef:92:ed:03:6b:f5:f5:93:
c4:66:cd:aa:c9:62:f2:d3:e0:a8:9f:89:ad:67:4a:d4:ed:2e:
66:ba:b6:f9:a8:8f:ae:2f:ae:84:24:ad:84:21:e8:ab:27:4b:
bb:49:5c:33:5c:61:19:bb:6b:55:1c:94:65:74:2c:12:89:93:
fd:64:f4:39:93:a6:d4:84:c4:68:8a:66:00:ab:ee:92:c3:59:
1a:a1:de:ce:7a:81:82:c6:37:23:67:17:f7:f3:b0:2e:ca:d4:
b9:a6:7a:ac:d9:86:1a:6a:bb:20:7c:05:8c:2a:a2:9f:ab:98:
64:29:a1:4a:d7:a7:51:67:13:f6:38:4f:34:f9:2b:6e:83:02:
f2:a8:a3:25:7d:3a:17:51:ea:b4:13:3d:d8:db:1b:68:af:a5:
78:b6:2c:37:30:30:2e:47:c0:00:ee:68:ed:e1:fa:0d:42:b3:
bc:59:c5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:39 2025 by rpki-client