Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: sPoOB3lZKbNToII7R7kSs++r5Wtg4CQCTaGp5JBkLRw=
Subject key identifier: DA:6A:9B:73:21:DC:D3:C2:D4:A0:E6:C4:10:55:40:9B:3B:E7:2E:7D
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 01984A4160FFB9D76C2055A89A64384C6609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:55 +0000
Manifest this update: Sun 27 Jul 2025 05:00:55 +0000
Manifest next update: Mon 28 Jul 2025 05:00:55 +0000
Files and hashes: 1: eTSGbM90RwI5mmDiAfeQq1tr3uY.roa (hash: Z3ARgNB2gdroKhId6j9/sVdTHM1Y23fh2zHIni+idcQ=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: P0ODwMsUG2i6M+C+heW85i3Q7AI6RBb2CXtYacP6wto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:60:ff:b9:d7:6c:20:55:a8:9a:64:38:4c:66:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Jul 27 05:00:55 2025 GMT
Not After : Jul 28 05:00:55 2025 GMT
Subject: CN=da6a9b7321dcd3c2d4a0e6c41055409b3be72e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:4f:03:83:8f:5e:de:d6:83:e7:2d:92:b5:
fd:c3:37:dc:cf:ff:7e:72:cf:8a:c3:ea:ba:d5:bc:
4c:6b:e4:ac:ea:2f:03:3d:8f:ed:63:97:e3:1e:af:
3f:58:09:ca:20:c0:fb:ce:46:96:b7:5f:e2:e1:4c:
7a:a6:25:2c:52:10:0d:37:e9:54:d6:7b:e2:9b:0b:
25:80:3a:90:4f:2c:1d:1c:d8:15:7b:ea:76:5e:f3:
5f:a0:d0:b5:7f:e8:22:ed:84:fa:11:dc:ea:f9:2b:
5f:05:ce:3a:d9:6c:65:e9:fb:76:c9:fb:6b:f4:bb:
6f:5a:5e:29:ce:c7:49:a2:72:a8:17:c7:d4:e1:ff:
1e:c2:d4:23:e0:f9:dc:41:77:37:ab:5a:a0:ee:cc:
a1:d4:09:5d:7e:55:98:d6:51:8e:bf:d4:39:93:05:
1c:9c:44:fc:a7:16:ca:c6:66:1a:9f:36:69:66:dd:
59:19:fa:ba:66:fe:06:cd:62:64:b2:2e:39:7b:91:
58:2a:dd:ea:2a:bd:9b:16:6a:d5:9a:30:2d:48:cb:
9d:d1:ab:4d:03:23:0d:d2:ab:fc:c9:1c:26:61:c1:
0f:46:7e:ff:8b:75:28:f8:db:5e:6d:d3:c0:91:de:
48:86:0a:7b:9d:38:70:3d:43:85:34:63:1c:5f:00:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6A:9B:73:21:DC:D3:C2:D4:A0:E6:C4:10:55:40:9B:3B:E7:2E:7D
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b2:a6:84:58:16:0d:1c:f2:0c:18:d1:76:0f:49:2e:35:b1:
aa:1a:11:25:f4:61:e3:ff:d8:87:eb:bd:34:d1:6d:47:9c:1e:
dd:82:bb:d1:a9:bb:3b:ec:10:53:eb:f9:46:14:13:2e:df:c1:
24:5b:e0:87:51:1d:65:e1:83:5f:21:74:c3:bd:48:e1:f7:50:
ad:29:05:ec:60:2e:01:ef:42:63:d4:4b:27:53:a8:a9:94:91:
ac:cc:7c:d5:27:2d:7f:67:bc:57:db:f1:14:7a:32:13:48:f9:
a8:3e:74:40:0b:b9:3b:92:33:33:31:b4:30:e3:0d:dc:69:51:
88:15:18:46:9e:4a:52:35:f6:03:81:91:4c:00:e3:1d:dc:26:
71:3d:cd:de:4f:33:45:b4:84:dc:a4:da:a9:2c:78:a2:66:34:
e0:6d:24:cb:96:36:01:40:a4:4b:1d:3f:1a:c5:da:67:a7:c8:
a4:0d:82:be:55:3a:52:b7:51:5e:1e:6e:e0:11:f2:03:35:16:
50:49:1a:34:49:cc:96:41:7d:05:6f:13:e2:c6:bf:47:ac:8c:
8f:51:cc:7b:36:96:b9:af:77:56:ed:ea:a8:e2:c0:4f:40:70:
44:45:a7:a4:ff:68:3e:ba:ae:bf:a3:72:bc:d4:15:54:e8:78:
65:94:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:44:14 2025 by rpki-client