Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: BrsA7dX2mIKoXrPPjt3S5W7XoZyMA9x9Pkp5p3wjzDQ=
Subject key identifier: 97:8A:19:BB:32:9C:5E:3F:AD:E5:0E:49:C3:B6:62:84:EA:A5:AC:66
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 01989780983779115B43542E588CC2553DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 05:00:43 +0000
Manifest this update: Mon 11 Aug 2025 05:00:43 +0000
Manifest next update: Tue 12 Aug 2025 05:00:43 +0000
Files and hashes: 1: eTSGbM90RwI5mmDiAfeQq1tr3uY.roa (hash: Z3ARgNB2gdroKhId6j9/sVdTHM1Y23fh2zHIni+idcQ=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: qy4tZJ1uhDgP096h0nBJx1kVg1SqxiJSEWQS7XP0WBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:98:37:79:11:5b:43:54:2e:58:8c:c2:55:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Aug 11 05:00:43 2025 GMT
Not After : Aug 12 05:00:43 2025 GMT
Subject: CN=978a19bb329c5e3fade50e49c3b66284eaa5ac66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:d5:e3:f7:7d:09:2a:a4:58:8c:f1:e5:e3:
c2:da:9d:da:23:da:0a:82:14:11:90:0e:55:d5:9c:
11:4f:8b:d3:40:dc:f4:d0:fb:92:93:d6:6b:65:3e:
03:b4:2a:d9:b7:dd:43:44:85:81:10:ca:fe:76:ed:
9e:dd:a9:81:75:84:ee:f0:e2:2c:19:5a:a7:cc:63:
38:c4:a1:dc:15:90:94:1c:e0:3e:ee:1e:b5:6c:8f:
4e:13:b0:04:5b:f1:43:bf:a0:f9:38:33:3c:5d:10:
4c:c8:2b:e5:a3:c3:22:f0:c1:a1:76:d2:92:60:1a:
38:bf:93:36:73:a6:0b:1d:1a:d1:c6:bc:df:35:12:
2f:26:7c:c6:9b:ef:45:04:33:2c:cb:18:a3:a5:d4:
78:f1:43:1f:fb:64:c8:25:a7:4d:53:e5:00:32:93:
d3:90:21:96:10:1c:86:31:7c:00:98:57:16:c3:c1:
38:f5:52:d3:37:c0:c4:49:29:2f:ce:dc:81:8d:29:
96:fe:65:18:c9:5e:35:14:c5:f0:5a:e2:40:5e:da:
5b:aa:bb:77:f2:7b:88:95:54:27:af:d5:9e:46:76:
34:6d:5d:ec:e9:3e:9a:de:e7:dc:bd:fa:5b:7c:cc:
19:76:78:53:96:14:d4:f9:3a:c2:97:e9:a5:06:a1:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8A:19:BB:32:9C:5E:3F:AD:E5:0E:49:C3:B6:62:84:EA:A5:AC:66
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:87:ab:34:49:4e:6d:32:9b:b2:16:b2:7e:ac:02:1f:f3:fb:
0d:1a:2b:df:a1:55:55:ee:fd:39:eb:60:e2:d8:5d:6c:0e:3a:
17:97:ef:98:4b:73:cf:f9:53:6a:a8:4f:fc:6f:1d:0e:91:9c:
d2:a1:80:75:b8:01:19:1f:88:bb:c8:99:24:c1:a9:bb:d5:f2:
b2:82:1c:d1:25:37:63:56:16:74:76:f6:e0:af:cf:82:df:ac:
66:36:9b:be:ec:9e:c6:10:84:e5:05:06:5b:7b:88:e1:17:6d:
ef:3b:57:8f:c5:f5:70:63:e6:78:1a:b7:4a:2c:26:cc:db:39:
0b:ec:4e:14:50:69:0f:81:d2:f6:f9:66:87:e9:2b:a9:20:e1:
69:93:63:dd:97:28:30:e7:87:86:e1:86:a4:95:81:dd:d4:a8:
61:5e:70:2a:8f:e2:fd:c0:0f:51:ae:1b:4c:81:fc:45:72:a2:
4a:97:f2:0d:f6:2b:75:94:68:fa:35:29:c3:fe:cd:3d:5a:8f:
86:98:e8:f9:eb:b1:45:04:b7:ff:80:f6:73:fd:d3:8c:34:6b:
c1:66:01:06:79:d6:8d:21:19:fb:2e:ff:29:ff:7a:36:b5:d7:
a9:fe:ad:2a:93:ee:e3:4e:72:9d:46:22:cc:6d:e1:01:65:e2:
1c:10:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:56 2025 by rpki-client