Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier: utl5bmGGJtlfEQWmRbk9PrPpiKw5LTlcLFTch1Lwgo4=
Subject key identifier: 12:A9:8A:85:83:F2:11:73:83:8A:16:12:A8:BA:11:08:A7:60:C8:D6
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 01987AC050BC34B7EB869292B8A98CA79F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number: 0D83
Signing time: Tue 05 Aug 2025 15:01:20 +0000
Manifest this update: Tue 05 Aug 2025 15:01:20 +0000
Manifest next update: Wed 06 Aug 2025 15:01:20 +0000
Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: p2PUR10cDRwfQ0LFN0rGeaH56WQ5e0OBbbaZBe8w7OU=)
2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:50:bc:34:b7:eb:86:92:92:b8:a9:8c:a7:9f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: Aug 5 15:01:20 2025 GMT
Not After : Aug 6 15:01:20 2025 GMT
Subject: CN=12a98a8583f21173838a1612a8ba1108a760c8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:1a:f8:5e:ef:fc:1a:7b:21:dc:11:fa:79:
4e:26:79:7a:55:95:a4:c3:3b:c0:f9:a4:06:1e:14:
ce:74:98:29:cb:58:e2:5e:61:83:43:87:1b:07:12:
d7:fb:ba:95:60:b2:eb:56:f4:4a:29:ee:7f:5c:88:
06:eb:ae:1b:ec:18:a2:9d:b3:58:f9:66:c2:6b:54:
ce:81:79:2c:71:e9:7c:31:49:b7:1d:64:7c:a7:8e:
16:11:56:bb:0c:0c:e8:31:25:b1:cb:e3:4c:5a:4e:
7c:fb:41:1d:d2:7d:07:4f:3a:69:c9:d2:f4:c2:8b:
97:e8:82:8e:e8:41:09:5e:c8:31:b4:c6:ab:f4:c6:
a8:c9:ad:1f:45:4d:e9:9c:c9:e0:95:42:47:7d:3a:
25:e1:8a:06:70:9d:c7:fd:fc:ac:c4:96:98:70:48:
bb:44:3d:a5:98:49:84:43:12:1a:f6:8f:d6:56:78:
38:4b:f2:28:80:74:32:20:29:ba:fe:e0:8d:b6:34:
24:ca:09:f1:82:94:c7:28:20:ee:70:ca:c6:7a:5d:
1e:67:1f:00:09:e2:e3:a6:6c:b8:86:5e:40:56:c7:
76:19:e9:d7:9e:18:65:e0:61:d2:98:cc:21:c0:1f:
f8:2e:3a:16:ba:d3:8b:46:97:af:1c:5c:b7:1a:79:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:8A:85:83:F2:11:73:83:8A:16:12:A8:BA:11:08:A7:60:C8:D6
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:48:93:6a:e9:4d:c2:f3:92:62:91:9e:5e:b1:86:45:dd:31:
85:30:f7:68:25:59:fa:56:61:73:df:c4:35:94:78:2a:35:64:
7b:c4:28:45:58:76:8d:2c:b0:d1:c2:2f:00:53:9e:be:a2:cb:
1b:2d:f2:30:c5:2b:2f:7e:34:86:e4:44:9a:0c:2f:ee:2b:6a:
d1:9d:0b:68:76:35:dd:ed:af:f6:62:7c:1d:e9:78:dd:7c:13:
d3:69:8b:2c:09:68:ff:23:6b:68:01:fc:e5:0d:1a:0f:af:ae:
d5:9e:52:a0:0c:e7:d2:f9:f8:5f:91:83:66:b4:a5:ff:64:9f:
fc:e0:20:7e:15:58:3e:48:23:d2:6e:72:e6:98:22:0d:e8:d6:
7c:4b:f3:58:a6:1e:36:82:b9:ef:9a:ce:1e:cc:f4:16:47:6d:
29:e0:24:0a:6c:72:3e:b1:7e:2e:3f:b7:f1:20:10:86:cd:08:
8a:9d:21:15:55:a3:c6:17:50:e2:16:35:58:85:ca:51:88:05:
ff:c9:7f:15:55:eb:1a:bd:11:c0:a1:9b:e8:46:f7:8b:6b:b8:
e0:b3:fc:67:86:df:32:76:50:40:0a:08:04:35:97:4b:63:0e:
84:ef:8d:ba:15:ac:5d:d1:e3:75:74:99:97:55:66:46:c1:e4:
6d:37:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:37 2025 by rpki-client