Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: dU7J2toyK1w0FXkn1zGEhnDC3GpWsdaFml5hTVFdysU=
Subject key identifier: 0B:B9:20:A2:5A:43:9F:D2:DB:38:86:8B:C2:7D:31:CE:B7:80:AF:B4
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 0197C982D02D5F0417488CCABD7745FCEAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0C8A
Signing time: Wed 02 Jul 2025 05:01:22 +0000
Manifest this update: Wed 02 Jul 2025 05:01:22 +0000
Manifest next update: Thu 03 Jul 2025 05:01:22 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: Y6sYiThzfg3KA3IruE/6tcBwW/iOHzB9kg2Md2Png2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:d0:2d:5f:04:17:48:8c:ca:bd:77:45:fc:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Jul 2 05:01:22 2025 GMT
Not After : Jul 3 05:01:22 2025 GMT
Subject: CN=0bb920a25a439fd2db38868bc27d31ceb780afb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0f:57:40:88:39:c8:0a:50:99:21:e6:05:bb:
65:ed:30:bd:e6:41:cd:67:e5:7f:c3:56:2f:6a:0e:
18:21:25:30:d1:00:a9:82:d5:9e:22:bf:4c:42:f9:
91:f3:ba:1e:fa:b6:74:b3:f4:04:1c:8b:a0:6d:72:
63:4f:5f:8f:fa:3e:11:cd:0d:f0:7d:03:e5:a5:c0:
83:e7:0a:a4:1b:66:6e:7e:82:38:46:92:31:c8:49:
06:82:ac:07:2f:5e:51:b4:7d:3f:8e:79:72:a2:5a:
e7:ea:67:4b:7d:a2:40:a1:e7:4c:5d:1a:50:c0:10:
8f:8f:25:64:08:96:3f:fe:b5:89:ce:0a:ec:cd:85:
19:fa:87:07:47:80:89:b3:bf:b2:4d:fa:99:50:92:
cf:de:65:04:af:70:31:e2:62:38:02:b8:60:ac:9f:
ea:e5:17:04:88:3b:aa:e0:a1:f0:3a:3d:17:02:1b:
1d:a8:e3:b4:e7:a5:21:40:68:33:ef:b7:90:d3:e4:
dc:67:7d:24:2b:00:35:4f:7f:aa:a1:67:07:d5:48:
4a:ad:f6:bf:11:d1:1b:09:fc:81:43:67:55:b4:20:
9b:2f:97:b5:1f:b6:63:67:51:81:67:14:c8:0c:1d:
12:4b:f4:ae:a8:c7:5c:1c:7a:03:a5:5b:79:d5:65:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B9:20:A2:5A:43:9F:D2:DB:38:86:8B:C2:7D:31:CE:B7:80:AF:B4
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9f:15:8b:0c:f1:4d:28:dc:6f:7e:05:bd:4d:a5:e6:7a:27:
50:24:14:47:05:23:f0:bb:75:3b:67:16:0f:91:1d:19:14:71:
06:d8:25:7d:36:ab:d1:47:3e:a0:a8:b8:4a:cd:ae:df:d8:80:
b7:35:9c:56:e1:db:5e:16:5c:d7:e2:a1:1e:37:c0:eb:e1:c4:
f7:cc:52:17:98:01:01:e7:ed:97:35:fe:5a:1f:e1:15:76:36:
70:29:0e:9d:e6:13:a8:21:2e:c6:64:dd:41:b3:04:fa:7a:ab:
3c:36:f6:08:73:b3:5c:db:e5:46:bd:26:46:83:b9:11:cf:ef:
be:83:00:83:88:8a:f9:be:86:22:60:64:0c:04:5f:fc:36:c2:
83:77:20:4e:0b:13:32:ca:d9:e1:db:73:ed:94:c5:37:b4:ab:
7a:6b:a0:b4:bc:80:0b:3e:da:f3:b7:02:1b:de:bb:d3:46:99:
cf:f0:63:dd:d0:6d:77:da:92:68:5e:99:16:0e:d4:69:99:60:
a3:a9:1f:84:26:6d:cd:5e:56:62:87:bf:3a:11:87:9e:29:1a:
2f:01:1d:52:1d:55:a7:aa:86:1f:9b:0a:87:f4:14:8f:11:7e:
69:25:b5:d1:34:85:43:72:55:75:07:91:54:07:6a:06:7f:de:
f4:4d:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:45:47 2025 by rpki-client