Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier: e1mAZs8C+3uBULs07nNNjtaULS/kBPlOXe1JyWBKICo=
Subject key identifier: 3F:E0:67:79:36:7F:74:9E:A3:72:59:D3:5E:C8:65:7A:3D:69:21:65
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 01988054853161B1E369137BDA3C991656CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 17:01:19 +0000
Manifest this update: Wed 06 Aug 2025 17:01:19 +0000
Manifest next update: Thu 07 Aug 2025 17:01:19 +0000
Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: eC+Bo39az9/Z0gVDmviJHkg46UiTPC6DVJecw9I1tLM=)
2: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (hash: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:85:31:61:b1:e3:69:13:7b:da:3c:99:16:56:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Aug 6 17:01:19 2025 GMT
Not After : Aug 7 17:01:19 2025 GMT
Subject: CN=3fe06779367f749ea37259d35ec8657a3d692165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:29:e8:10:49:24:32:93:8d:cc:37:78:23:
c8:4f:5a:e6:cb:6e:55:fc:fd:a4:db:f6:b5:1d:21:
56:1e:e1:3c:fe:ec:0e:4a:44:7f:0a:c2:a7:1a:ee:
ee:34:b6:c7:ae:fb:a1:ce:d0:e7:25:41:77:a9:2c:
a8:29:2b:8d:53:cf:e0:56:96:b0:49:2f:24:4b:a9:
8c:03:98:c4:8b:13:d8:04:34:20:95:00:a1:39:d0:
43:fe:55:6d:9a:8c:f9:c3:37:fe:0a:4a:b8:65:0e:
03:c1:0d:db:e0:98:01:b8:78:78:6f:41:8b:3d:19:
86:b0:20:39:4a:f5:6e:78:70:d7:db:66:d0:6a:0c:
62:46:f2:61:c1:31:58:f6:7f:18:3f:94:74:da:3f:
4e:8d:cd:80:be:2d:b3:e3:a8:76:25:de:09:90:7b:
c1:05:85:1d:62:56:ed:97:51:62:01:c9:21:37:f9:
d7:41:68:35:44:c0:07:2d:02:69:22:59:5a:fa:0e:
8f:ed:36:a2:4c:da:c4:6d:ae:0b:9c:62:3a:83:a2:
2f:1d:bc:46:37:93:f3:6a:29:3c:bd:43:bc:34:01:
11:13:2a:e0:06:33:ba:d4:cf:7a:e6:ff:55:44:4a:
5a:10:19:3e:be:61:46:4e:eb:d4:2c:f7:77:42:08:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E0:67:79:36:7F:74:9E:A3:72:59:D3:5E:C8:65:7A:3D:69:21:65
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:19:09:5d:c3:dd:d3:7b:73:dc:3e:89:8a:2a:30:48:b2:5b:
7f:98:21:b2:c7:87:13:30:61:27:9d:e3:36:75:fd:86:10:3e:
b0:aa:f6:a1:32:fb:3f:b4:b1:be:27:c2:52:59:9f:0e:c0:ed:
e1:44:ed:c2:a9:83:f5:6b:94:09:66:ec:8f:a7:cb:b3:41:13:
05:e1:2c:c4:1b:87:2f:67:d8:4a:b3:7a:1d:f4:b2:d3:01:5f:
cc:28:ec:78:5a:a5:84:03:d6:42:b7:b5:3e:8a:d7:b8:10:03:
e7:83:8a:9b:dd:ff:17:45:1c:7a:3c:bf:b8:ed:9f:8a:1e:4e:
02:3a:ef:26:ba:fa:64:47:31:a5:ec:a8:ca:ca:e8:73:19:dc:
cd:9f:0a:62:0e:a8:32:1e:1f:50:2b:97:7a:8d:21:7b:8b:ee:
fd:9e:05:42:fb:2a:9b:5d:34:48:12:df:79:57:57:49:3d:a1:
5a:75:76:a5:85:09:7e:00:1f:d5:8b:28:37:c0:72:1f:c6:b3:
fe:23:9e:27:7d:8c:31:3c:f5:34:13:b3:14:47:25:53:36:78:
ec:57:1d:37:7c:b0:fa:06:ab:42:d9:87:3d:80:f6:5e:90:23:
96:2d:7f:61:97:ca:61:bf:02:8a:0b:d3:85:a1:00:44:ae:e5:
e4:7f:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:07 2025 by rpki-client