Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: guDmgWjuHmTU4+Rg6dwMBXSx4mGGV5pNxJxnSRNyAxw=
Subject key identifier: DB:D8:EF:94:CE:3D:76:BC:CA:93:AC:ED:A5:16:37:B9:CE:25:0E:41
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 019A4DAAD6428E4A08F2946ECD423A12223B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 07:00:32 +0000
Manifest this update: Tue 04 Nov 2025 07:00:32 +0000
Manifest next update: Wed 05 Nov 2025 07:00:32 +0000
Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: f0eEtlYmM/SsRCM3IhM7/RSqbgElnsGXX5HCcOLV1YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d6:42:8e:4a:08:f2:94:6e:cd:42:3a:12:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Nov 4 07:00:32 2025 GMT
Not After : Nov 5 07:00:32 2025 GMT
Subject: CN=dbd8ef94ce3d76bcca93aceda51637b9ce250e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:29:9b:a1:8e:82:58:94:e0:f0:cd:50:6e:
92:0b:61:35:7e:4f:85:68:0f:8f:a1:17:bb:bf:e4:
9d:eb:3b:86:b3:b5:c2:75:ee:c5:cd:d7:cf:2d:62:
a1:72:fb:26:08:b4:16:1a:43:72:86:6a:1d:31:5a:
94:bb:7b:78:bc:7b:d1:bb:73:99:29:75:e9:97:dc:
24:f4:49:78:03:57:a2:eb:ae:42:22:c5:1a:19:b9:
93:d1:27:f9:b3:99:3e:8b:ff:98:1b:a0:f6:21:30:
c6:cd:a0:df:3c:7e:9c:27:81:02:48:78:f3:43:ba:
b3:26:bb:13:9a:c7:ba:72:ac:35:2a:27:03:ab:fe:
81:d6:68:ff:c7:0e:1b:af:e7:2b:7b:1f:68:1e:88:
ca:9c:65:b3:ac:31:38:ea:6f:22:05:e8:dd:f3:27:
f6:0a:49:c0:41:14:e5:d2:1d:e3:84:da:75:bb:ca:
cd:2c:95:2b:dc:d6:4f:12:b0:60:4a:4a:0e:92:6f:
39:1c:7d:79:01:15:1c:b1:4a:66:89:9a:89:6e:d9:
19:35:6c:fd:63:e4:7f:36:8f:82:3f:7d:c2:f5:d7:
94:84:70:fd:64:21:de:e9:e6:bf:36:93:f1:06:f5:
20:ce:8f:3a:62:cb:8a:3c:7a:ad:f2:92:c9:33:ac:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:EF:94:CE:3D:76:BC:CA:93:AC:ED:A5:16:37:B9:CE:25:0E:41
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b2:22:ac:bd:6f:2a:ea:a4:18:3d:51:e7:ee:f0:bd:3e:77:
4a:25:66:55:65:22:3e:7e:80:2c:4d:e4:de:bc:ea:d0:ea:bd:
76:cf:4d:a2:84:5e:fd:8b:2e:d4:06:d9:8a:a6:f6:68:eb:12:
45:f2:ff:66:4a:d2:65:eb:06:4f:12:77:fb:7d:85:99:38:6d:
b0:d2:fb:6e:ac:f9:ef:34:60:d8:5e:87:04:23:e4:10:e3:2f:
ea:3a:d3:3e:25:62:4d:4e:b8:2b:9b:f4:3c:ea:8c:88:47:ec:
e8:bb:87:e7:75:f3:b9:5a:ac:76:7a:04:12:01:25:6c:2e:d6:
69:7b:81:ec:e4:79:94:38:84:be:18:a3:06:e7:84:dd:6b:aa:
31:18:9c:f8:12:ad:d0:6a:00:69:57:65:96:a9:ec:7e:3f:bb:
c8:0f:02:3c:21:70:f3:24:7c:50:ab:e1:42:07:c1:d0:92:38:
80:7c:1e:8b:76:0f:1a:ee:73:20:64:eb:18:29:e8:2e:0f:db:
39:0b:58:10:f0:06:14:58:5e:14:6c:6b:9d:b9:cc:25:19:2f:
27:fb:2c:a0:ff:48:35:9d:6d:c1:3b:e0:53:8e:4b:98:58:2d:
a6:0c:b3:22:92:7c:97:78:42:d8:e0:81:3d:bc:aa:9f:f5:a8:
45:8a:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:50 2025 by rpki-client