Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: sPo26MBddzdf+qYlYQCg50fdU55WqcOf5IAmZ8pn/JM=
Subject key identifier: F8:E3:4A:1B:98:7C:05:A6:2C:D3:B0:86:B1:82:35:C5:0C:5B:09:89
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 019A7149CFC49D29BA1A4AC4B84EFB45E6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0DEA
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: maXVk4OipkVnyd2HQNWx5iwQP2mECQWHpcQPNSexg+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cf:c4:9d:29:ba:1a:4a:c4:b8:4e:fb:45:e6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=f8e34a1b987c05a62cd3b086b18235c50c5b0989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:72:2d:bf:8d:0f:2d:e1:f6:42:2c:1c:65:
6a:42:65:31:a5:d8:6c:61:f6:26:bf:8b:4d:1b:65:
0f:ae:6d:37:9b:fa:73:cc:6f:1b:9f:dc:d9:2b:da:
5e:20:b9:ec:96:1f:07:84:97:43:e4:ab:dc:5b:3e:
38:a1:cd:49:60:14:0f:91:b4:78:95:09:d8:33:3e:
13:e2:cc:8e:ae:ac:5d:ad:3c:88:25:a9:67:6d:ef:
86:ef:c3:ed:4a:81:de:ce:85:75:b9:84:20:f9:3e:
34:8a:ed:3c:c8:c8:29:c7:35:2b:a8:d4:3c:5f:70:
d4:62:50:95:34:d6:8d:b3:c6:f4:1d:a6:2b:2f:60:
9c:6e:1f:cd:08:19:e6:60:de:34:fe:2b:8c:3b:d9:
96:78:2e:06:2c:21:b7:78:91:95:8e:94:fd:e9:55:
ee:7f:11:06:1d:75:04:33:53:c8:0d:48:df:66:cb:
ec:4b:8a:b1:e1:75:f9:6c:40:ba:b7:ec:0a:b9:12:
d7:06:5a:43:66:bd:d8:1a:bd:23:5e:d9:55:42:97:
67:3d:d1:96:86:56:ae:90:e8:e0:d4:25:f9:28:f8:
83:a0:79:03:18:de:e1:67:94:a9:15:bd:cf:3e:6f:
1a:f4:b6:1d:3d:fa:9c:02:c4:e0:9c:d3:bf:16:0a:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E3:4A:1B:98:7C:05:A6:2C:D3:B0:86:B1:82:35:C5:0C:5B:09:89
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:28:c5:3e:b0:b4:8a:c5:b1:25:2c:f4:95:0a:2f:73:19:
ae:42:68:f2:a0:0d:68:2d:a5:d5:90:28:cc:c0:ed:6d:88:ac:
cc:24:5a:74:cf:d5:8d:3c:50:00:1e:ce:e7:82:81:a4:35:50:
43:f5:9a:37:f0:0c:1f:48:d3:59:60:2e:9f:32:a2:d6:a2:7e:
81:d5:e5:dc:42:0e:5a:ee:b9:79:f0:d4:8e:52:8d:27:76:51:
71:b5:df:21:58:27:61:2c:14:5b:89:c8:19:d0:09:08:c0:f4:
9b:30:7a:01:2f:98:83:e4:24:71:d8:78:e6:46:35:80:ef:12:
98:b1:f8:bf:e5:6a:92:31:4c:56:c9:be:52:79:43:7c:51:81:
3f:4f:55:02:5c:1b:d4:8d:2c:e4:b5:f3:85:99:7e:c6:42:54:
d2:57:06:f7:e3:a5:03:4d:a9:52:45:0f:ab:bf:b7:d2:d4:b0:
fb:91:92:f0:c2:47:bb:13:ca:b2:a0:57:3c:6c:e5:ee:b4:4b:
64:0a:01:ff:6d:45:fa:d1:15:fb:27:47:8e:2c:ac:e6:a7:e0:
d6:a1:5d:bd:0d:45:92:f3:3e:31:8d:57:10:29:fa:8a:35:90:
0f:e9:bd:80:dd:2e:fd:68:80:b2:81:38:50:e5:21:32:da:56:
ff:61:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:56 2025 by rpki-client