Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: REkCRKiwhs/f5EcbW56GWEmR1WxJGvapeYOndtrD6aY=
Subject key identifier: 48:99:1A:05:B9:5C:93:F0:40:F6:0E:1E:DB:AE:1A:7A:D8:9C:8B:D3
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 019693DF7C5B7DFE97B52396895AF46AE99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 151F
Signing time: Sat 03 May 2025 02:00:19 +0000
Manifest this update: Sat 03 May 2025 02:00:19 +0000
Manifest next update: Sun 04 May 2025 02:00:19 +0000
Files and hashes: 1: eTSGbM90RwI5mmDiAfeQq1tr3uY.roa (hash: Z3ARgNB2gdroKhId6j9/sVdTHM1Y23fh2zHIni+idcQ=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: aYrBXMILkw9/uUmQwxlKqQ/8wOc1LKbUasdM44JLwSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:df:7c:5b:7d:fe:97:b5:23:96:89:5a:f4:6a:e9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: May 3 02:00:19 2025 GMT
Not After : May 4 02:00:19 2025 GMT
Subject: CN=48991a05b95c93f040f60e1edbae1a7ad89c8bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:ba:0a:36:ab:80:35:4d:24:8c:8a:7a:c5:
1f:40:4a:e7:77:bb:9e:3e:a9:09:b7:bd:bd:3f:5e:
bf:91:89:99:e7:82:84:2c:33:25:b4:d3:7c:84:98:
c5:19:64:63:96:14:a4:2f:77:1f:87:c1:2d:16:49:
d7:87:d7:d1:bb:f8:08:08:46:60:ac:c7:e1:80:73:
c2:fb:21:98:88:55:80:52:4a:d3:80:2a:73:d5:c1:
56:7f:e5:fa:67:00:25:6f:9c:04:15:29:e1:c6:c4:
51:13:f5:cb:ff:e0:38:41:33:23:e9:74:88:89:b1:
70:89:95:46:2e:7b:06:10:14:7a:31:53:68:a0:b1:
80:d4:71:ff:c5:e3:1e:9a:97:9d:4e:4e:b6:9a:f6:
13:44:72:a2:a7:c8:12:ea:62:a5:23:ec:4d:44:50:
e4:82:57:4d:9c:7f:b4:04:b6:8d:a7:e9:a3:0e:64:
96:4f:cd:fb:fe:91:4a:8f:7e:55:1d:89:76:d4:1e:
81:25:a3:9d:72:d6:29:db:af:7d:66:f4:2f:70:93:
45:30:05:40:0c:2b:6b:fd:d4:11:78:1e:2d:bc:14:
a0:cb:ca:4a:41:23:e3:a0:28:fa:4e:8e:42:0e:fa:
5d:ce:df:9d:aa:12:2f:a0:fe:cd:56:3f:c3:16:36:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:99:1A:05:B9:5C:93:F0:40:F6:0E:1E:DB:AE:1A:7A:D8:9C:8B:D3
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ff:94:7a:33:be:46:1e:fb:47:de:0c:24:00:fb:b3:9e:fb:
4a:f2:ff:c6:11:67:2e:9c:8f:38:00:75:6f:79:67:21:f1:40:
88:73:80:2c:af:e5:a7:30:d4:c3:ec:41:f8:b1:0c:e4:18:dc:
85:92:6d:33:36:7c:9c:4e:1f:35:b8:82:1f:a6:12:95:a8:70:
32:6d:14:be:ed:46:83:b5:a1:e7:73:61:4f:e7:d7:21:7a:c0:
73:d7:0b:ae:08:3f:79:98:05:00:f9:63:f7:2d:92:a3:85:b5:
47:12:9e:5f:47:d2:db:ce:f8:c9:08:46:5e:11:e2:0a:65:4e:
48:e8:f6:34:93:99:95:12:52:3f:98:89:6e:5e:ae:a1:4e:78:
03:86:07:de:4c:46:d7:f7:ab:d3:ab:58:f2:d7:3f:6c:1c:3d:
e8:e3:ac:a1:d4:3d:20:c8:9c:c9:d7:96:39:b3:45:24:20:04:
c6:ca:50:97:67:69:cf:46:44:d0:ec:af:ba:59:63:30:53:a9:
a1:2e:78:8e:17:e1:30:57:be:f5:dc:40:f4:16:cd:96:2b:d9:
71:bf:89:48:df:33:e2:a3:6a:6b:ab:f0:bc:43:65:f5:16:1b:
99:48:8d:71:11:1c:bb:85:e4:84:e2:0c:8b:dc:65:dd:d3:18:
1d:ab:10:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaT33xbff6XtSOWiVr0aumaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNjg1NTk4MGIyNzNlNWFlNTdkYzFiOWViMjJlOWY1ZjNh
N2NkZjcwHhcNMjUwNTAzMDIwMDE5WhcNMjUwNTA0MDIwMDE5WjAzMTEwLwYDVQQD
Eyg0ODk5MWEwNWI5NWM5M2YwNDBmNjBlMWVkYmFlMWE3YWQ4OWM4YmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUK6CjargDVNJIyKesUfQErnd7ue
PqkJt729P16/kYmZ54KELDMltNN8hJjFGWRjlhSkL3cfh8EtFknXh9fRu/gICEZg
rMfhgHPC+yGYiFWAUkrTgCpz1cFWf+X6ZwAlb5wEFSnhxsRRE/XL/+A4QTMj6XSI
ibFwiZVGLnsGEBR6MVNooLGA1HH/xeMempedTk62mvYTRHKip8gS6mKlI+xNRFDk
gldNnH+0BLaNp+mjDmSWT837/pFKj35VHYl21B6BJaOdctYp2699ZvQvcJNFMAVA
DCtr/dQReB4tvBSgy8pKQSPjoCj6To5CDvpdzt+dqhIvoP7NVj/DFjZ3kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiZGgW5XJPwQPYOHtuuGnrYnIvTMB8GA1UdIwQY
MBaAFKJoVZgLJz5a5X3Buesi6fXzp833MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEt
ODFlYjYxZjViNzFlLzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEtODFlYjYxZjViNzFl
LzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/+UejO+
Rh77R94MJAD7s577SvL/xhFnLpyPOAB1b3lnIfFAiHOALK/lpzDUw+xB+LEM5Bjc
hZJtMzZ8nE4fNbiCH6YSlahwMm0Uvu1Gg7Wh53NhT+fXIXrAc9cLrgg/eZgFAPlj
9y2So4W1RxKeX0fS2874yQhGXhHiCmVOSOj2NJOZlRJSP5iJbl6uoU54A4YH3kxG
1/er06tY8tc/bBw96OOsodQ9IMicydeWObNFJCAExspQl2dpz0ZE0OyvulljMFOp
oS54jhfhMFe+9dxA9BbNlivZcb+JSN8z4qNqa6vwvENl9RYbmUiNcREcu4XkhOIM
i9xl3dMYHasQNg==
-----END CERTIFICATE-----
Generated at Sat May 3 06:10:41 2025 by rpki-client