Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier: SYn/bAB+KNsXKjW4wW6FmoO9LCC4x1a6m3l+oOYajG4=
Subject key identifier: 50:22:BC:85:FA:15:FB:2B:D8:62:23:08:B6:63:79:A0:B7:2F:1C:45
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 019A4E18FA71E5928FC4B61546A667D41092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number: 0E75
Signing time: Tue 04 Nov 2025 09:00:51 +0000
Manifest this update: Tue 04 Nov 2025 09:00:51 +0000
Manifest next update: Wed 05 Nov 2025 09:00:51 +0000
Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: olj6tMyu9/79XIArwbDiIp6qq47WXBfxbsyC30J0MRU=)
2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fa:71:e5:92:8f:c4:b6:15:46:a6:67:d4:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: Nov 4 09:00:51 2025 GMT
Not After : Nov 5 09:00:51 2025 GMT
Subject: CN=5022bc85fa15fb2bd8622308b66379a0b72f1c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:23:d3:2a:5c:d9:bb:b6:71:05:ae:02:1c:
d7:f3:17:56:62:c1:fd:2d:0b:a1:e1:fb:c7:37:5b:
4b:08:0f:24:22:50:53:ec:ea:2a:69:11:7c:38:63:
bc:f8:1a:c3:3f:cb:f1:4e:3e:cf:45:36:5b:36:34:
bf:84:ea:1c:3f:fd:74:eb:40:77:c5:f2:8c:3b:cc:
6e:6e:6a:cf:c7:d4:65:1a:7f:84:56:a5:ac:92:94:
7a:37:a6:f8:8b:ec:e8:ea:5e:31:d8:1d:26:b6:64:
ae:7d:46:27:d0:07:2a:fb:da:6f:06:58:42:a2:03:
a7:92:5e:cc:32:01:d2:da:51:e4:f2:f7:9f:71:88:
b4:83:1e:81:fb:7e:4c:83:46:09:99:4c:bf:61:6a:
8f:5d:62:44:c1:70:a7:c1:b7:45:81:cb:1d:4e:35:
af:f1:71:82:98:cb:7d:2e:17:59:a6:9b:83:29:79:
20:c5:87:26:15:b6:f0:16:2c:2f:c2:93:a2:3f:90:
70:70:ac:75:f6:a7:b3:0a:70:5b:12:01:27:71:33:
24:33:35:b8:8b:10:cc:e8:42:e7:7f:97:0d:93:46:
a6:7e:9c:83:85:57:59:57:c4:85:39:c4:ef:b5:6e:
e9:11:97:ae:be:cc:a2:bf:c5:3e:24:91:e3:77:a8:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:BC:85:FA:15:FB:2B:D8:62:23:08:B6:63:79:A0:B7:2F:1C:45
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:98:0b:35:52:d8:a5:f3:95:28:23:2d:f7:61:ef:f3:c4:3d:
02:27:80:a4:b5:16:67:2f:c2:44:93:8c:98:25:0e:ca:f4:ee:
3e:ef:84:91:6a:bf:93:a3:1b:d0:84:88:fb:8b:d9:f4:3c:3b:
5b:e6:94:ef:98:33:cb:6b:60:a3:64:c3:f1:87:74:8e:13:d5:
91:32:e5:41:0c:41:90:49:2c:65:fa:8b:fd:5e:9c:59:33:1c:
ee:ed:ec:ac:4f:37:c5:72:57:2a:8f:08:eb:53:30:f0:c9:b5:
cf:93:0c:2a:3e:fb:e0:15:a3:b8:e1:ad:d7:33:a4:d5:ab:b6:
ab:ce:3a:7a:05:41:17:99:f8:1c:97:10:5b:72:e1:43:45:b4:
91:1d:12:4b:8a:94:81:3c:64:15:a4:ad:94:7d:df:75:d3:99:
6d:90:47:bb:a6:15:fb:b7:1b:0f:dc:03:0f:37:e5:59:04:0d:
d2:00:80:b4:0d:0e:c0:f2:fe:e6:6a:a1:5e:7c:ce:21:d8:01:
cd:ce:66:bd:e3:de:d4:cd:52:f6:21:85:74:92:cc:b6:b4:d1:
eb:45:0a:d5:9c:6d:1d:cb:3b:ab:21:c8:b4:9d:1d:d5:2f:32:
b6:3f:3c:0a:b6:f7:3d:14:b0:a2:90:b0:71:2c:e7:a6:31:22:
f8:d5:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:23 2025 by rpki-client