Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File: Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier: gGWzi9BhJ3glO4y+2G6FrR3DDbvPrnSsAFEva9JTO8M=
Subject key identifier: 64:00:FF:97:A8:22:6D:B3:C4:5C:B7:4E:21:2B:99:7C:4D:80:62:2D
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 019A541AF5A41EC77D63721C986A924A01FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number: 0728
Signing time: Wed 05 Nov 2025 13:00:44 +0000
Manifest this update: Wed 05 Nov 2025 13:00:44 +0000
Manifest next update: Thu 06 Nov 2025 13:00:44 +0000
Files and hashes: 1: E1AA5wsyyXbus7X0Ft2PunWAAq0.roa (hash: 04bplHphn9AKJ942980VFz6Kft0zjBNhkRGsxlvrJbg=)
2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: Cne/HIH5W9OGW38t/AiFikwlAnBgqulRryXVj+UhQy0=)
3: anOrtlhwnnmjPAi8_6BJOHZxlL4.roa (hash: YCZfQBw4Fjx9AZOlBUf0daMhEFakgdsLR0V2NRN6new=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:f5:a4:1e:c7:7d:63:72:1c:98:6a:92:4a:01:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Nov 5 13:00:44 2025 GMT
Not After : Nov 6 13:00:44 2025 GMT
Subject: CN=6400ff97a8226db3c45cb74e212b997c4d80622d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:24:72:96:33:50:05:bb:55:66:f5:a8:68:
39:7a:7e:24:36:56:93:bd:12:94:6e:2e:d2:74:4c:
9d:aa:51:f9:3d:9d:a0:8c:3d:81:8d:ba:92:5f:80:
65:01:d8:b0:86:93:a8:36:58:89:d8:05:b1:34:60:
4b:cb:f7:f8:07:d5:2b:44:f0:0b:df:a8:65:17:42:
2f:a4:42:8d:9c:16:ec:48:f3:4c:ff:10:88:44:05:
62:db:99:99:57:08:f8:d4:0d:6c:75:5d:10:db:ad:
a7:10:69:e8:07:0b:62:94:b7:19:1a:d2:42:f2:27:
92:f9:93:82:df:9a:02:42:8f:a8:6d:2c:fd:03:7c:
fe:a9:6b:b3:26:81:f6:e4:4f:0b:fd:f7:1c:ed:84:
d6:f0:ec:a4:ae:ed:7b:3d:b0:21:7b:da:e6:f1:ca:
d5:29:8e:39:46:69:3e:3c:4d:87:40:a4:26:36:a5:
13:00:40:0b:76:69:04:bc:0f:8a:28:2b:72:70:57:
13:bf:8f:1e:5b:ec:6c:47:9e:49:31:48:35:10:a5:
89:5b:1a:aa:19:da:b9:7b:01:7e:6c:43:4d:17:d1:
78:ee:e1:9d:07:92:7a:0f:0d:d3:14:42:78:c6:ed:
2e:7f:93:99:af:50:75:d5:6d:1a:5a:fa:b4:38:5f:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:FF:97:A8:22:6D:B3:C4:5C:B7:4E:21:2B:99:7C:4D:80:62:2D
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:35:dd:3f:e9:6f:77:09:66:f2:4e:55:93:55:2e:6b:0c:
c2:bc:c9:e2:e0:c0:f1:01:25:92:11:b3:b3:9c:22:b2:28:05:
76:1e:5f:8b:c5:b3:b2:a2:a5:ad:46:31:11:23:f4:63:52:cd:
eb:5d:89:15:ee:fc:2a:cc:a9:bd:5f:5c:4e:8b:c8:d0:cb:f2:
f8:f7:cc:36:bc:68:9c:34:ae:3c:5f:b7:70:1c:d5:9e:1b:af:
c2:55:3e:43:06:0e:21:d8:ab:12:fc:38:85:f0:a6:97:25:8a:
0d:a3:87:10:53:16:4c:9a:08:22:81:68:e2:27:62:3a:42:1b:
44:20:fb:ba:c1:10:b3:01:8c:73:58:69:79:7e:44:40:a2:28:
1e:c0:73:dd:1f:77:a3:6c:36:f1:16:d6:4f:94:5c:42:8d:a8:
ab:0d:cd:e4:5c:22:72:ad:35:52:56:74:44:70:18:f8:57:b4:
db:ca:64:26:e2:60:04:c4:5d:7f:69:fd:2c:fe:46:74:e9:44:
c9:8d:d7:49:9e:43:8c:a1:f9:52:09:28:23:c4:ce:13:1e:bb:
29:3a:6a:dc:ad:c4:a5:32:a4:c2:dd:da:aa:17:06:4b:ba:20:
07:64:a9:29:ad:84:fb:14:d1:7d:75:14:aa:d3:f2:d6:68:70:
60:e7:81:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:58:57 2025 by rpki-client