Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: XJFXR3HvV7Sd4E877YpBW+OAnqws5vA0ZA/DLnHjI1s=
Subject key identifier: 9F:0D:F2:7F:58:92:BF:27:73:29:5A:F7:58:58:43:D8:6F:0B:E3:2B
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 019A213FD01DC6D60A111BF8563A426382CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 16:00:21 +0000
Manifest this update: Sun 26 Oct 2025 16:00:21 +0000
Manifest next update: Mon 27 Oct 2025 16:00:21 +0000
Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: AQOUGNHqdgjq6aPUAgymkAL1TipkOqOH5WTMrdntkeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:d0:1d:c6:d6:0a:11:1b:f8:56:3a:42:63:82:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Oct 26 16:00:21 2025 GMT
Not After : Oct 27 16:00:21 2025 GMT
Subject: CN=9f0df27f5892bf2773295af7585843d86f0be32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:20:c8:e3:72:80:08:89:ee:c5:b7:3d:12:
29:9f:f7:8e:9e:14:de:f6:c0:3e:08:23:1d:5c:8c:
ec:a1:24:cb:fa:ca:79:67:24:c7:ce:10:44:88:51:
96:8e:e1:f5:14:b2:f6:4b:f5:b9:db:4b:37:97:43:
00:85:67:03:fc:cc:43:85:5f:18:77:f3:4b:3b:d1:
d4:ac:35:2f:fd:63:fc:7b:42:ef:80:33:95:99:20:
46:ca:9d:6d:5f:2b:29:a7:4c:e1:47:9c:ab:a7:6e:
b5:f0:bf:af:59:c1:c0:3b:68:6f:0a:db:a9:bc:33:
56:09:b9:59:ee:d9:77:2f:26:dc:17:94:0d:74:f4:
db:2a:76:8e:48:31:6c:50:29:30:e4:cd:74:d2:09:
98:93:32:79:fe:f5:f3:47:45:e4:26:bd:66:73:c7:
2c:81:2f:7e:6f:12:a8:03:b8:5a:34:7c:c7:bb:02:
a9:f5:6c:cd:80:23:a1:3f:03:8d:78:f9:fa:a1:9c:
0a:59:91:5a:59:a4:d7:64:2c:58:a0:42:f0:82:03:
01:f6:a5:81:9f:35:56:73:dc:43:9f:50:51:6a:cd:
ad:75:c0:b9:2d:65:dd:4b:f3:31:34:fc:7f:b9:80:
b8:90:29:e8:b0:ea:08:70:85:5e:06:d3:03:34:de:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:F2:7F:58:92:BF:27:73:29:5A:F7:58:58:43:D8:6F:0B:E3:2B
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a0:d2:7c:9c:17:ca:41:35:1a:be:37:06:68:a2:da:92:f7:
01:e1:27:bb:67:92:78:21:e1:05:3f:cd:32:36:88:4f:cc:d8:
61:8e:68:fa:27:75:23:b4:8b:3c:2a:b4:86:76:8a:ce:18:cc:
cf:7e:07:4a:97:c6:80:d5:cf:9a:d8:4b:4c:e8:5e:2d:3f:3c:
02:f4:9e:1b:eb:b3:54:32:18:fd:c0:24:23:ba:83:7a:61:f0:
9f:4f:80:50:11:37:36:3c:ab:6b:48:06:0c:c3:ea:e0:7e:1b:
7c:d7:a2:77:00:ec:a5:fc:2d:bb:02:fd:63:f2:47:2c:06:c0:
f7:5a:0e:f2:33:ac:a3:91:eb:5f:d8:c1:5c:3f:93:31:68:5e:
a4:95:2d:dd:c6:54:e6:72:3e:91:30:34:5d:a7:a7:91:9b:3d:
5c:7f:8d:3c:3c:96:80:a9:02:22:cb:37:d3:ff:c4:00:9a:90:
5a:99:b6:5e:5e:1a:99:35:11:32:cc:1e:cc:b8:de:00:8b:dc:
61:a4:37:9e:3e:15:b9:60:fb:be:4d:e4:bd:b9:25:06:ea:01:
f8:25:80:95:e9:6b:ac:a6:36:bb:44:3a:7a:0e:0a:c3:57:95:
c2:04:73:b5:72:2b:ce:25:ab:c9:3d:1d:a1:eb:9f:79:16:6b:
76:20:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:28:36 2025 by rpki-client