
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
File: OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json)
Hash identifier: WaWXvKWttIan1yat9E/ojZoCvwmqpFeLjE4+Kwk3nyg=
Subject key identifier: A7:06:A4:B4:0F:1A:99:98:74:CD:34:4F:B4:66:41:95:BF:48:FB:A8
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 019923A0826B8485736BB2F3CAA5B60F4920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
Manifest number: 1684
Signing time: Sun 07 Sep 2025 10:02:25 +0000
Manifest this update: Sun 07 Sep 2025 10:02:25 +0000
Manifest next update: Mon 08 Sep 2025 10:02:25 +0000
Files and hashes: 1: 41o_KDQT0UQR0-pEGq6ZFFoyGEY.roa (hash: mkyU9FNe+9kldpNCWIBTUaB1xImUCSbnmtoOt1trV1c=)
2: EfAbE-x7JWikVYwPPlQe_vVwMQg.roa (hash: 7jN/LfmMAw7O2spCMvO+jNeJ92v1x2ZZaE7vPy60zYA=)
3: JKilfZrkJhllQ19r3NByhgoqTDg.roa (hash: TyGhUzaYqQpVckTL9iipsY4ZDEots8Yo4CEp0B079m4=)
4: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: flHUBWMZpMhiBjto449c8hCt52UmH3ZGc8bFXNMmBFU=)
5: SHIdIo5QDACoW0nIIu5f5RtYZ_Y.roa (hash: Wl9sZv7NXkEqjqOeUmOOqdDlFgYyfsqwHN90exWSc1U=)
6: UxDrDzP2TNEJomhvUm5pptefxgA.roa (hash: /MVrUvLgefyKi9OhWDKlnZN9gJaxVmd7pmpH+GNvKAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:82:6b:84:85:73:6b:b2:f3:ca:a5:b6:0f:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Sep 7 10:02:25 2025 GMT
Not After : Sep 8 10:02:25 2025 GMT
Subject: CN=a706a4b40f1a999874cd344fb4664195bf48fba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:23:bf:d5:f2:24:27:68:64:fe:d0:0e:59:
50:bd:d8:55:d0:75:c6:2a:88:0d:b8:af:2d:d5:65:
ac:88:64:1d:6d:a7:1b:81:b0:fc:68:2b:34:85:3f:
b4:16:de:54:48:1b:0b:d3:26:d2:11:31:3b:82:63:
63:0d:33:b1:aa:8b:1d:fb:64:a5:68:43:a0:5f:6c:
31:b4:51:e4:55:8d:95:8c:b5:ea:12:28:03:66:bc:
22:61:f0:a2:e0:da:35:2b:ce:77:59:f2:b0:9e:72:
45:55:0c:29:36:dc:cf:82:a2:d6:0b:dd:0e:62:00:
98:1f:77:e8:44:61:40:e8:0a:4f:ff:08:82:51:bb:
49:03:bb:de:b0:40:6c:6b:7d:91:a3:4f:5d:ad:07:
ce:e0:37:3e:b0:aa:76:32:db:e9:3e:7a:4c:d3:2e:
e7:2e:52:8a:ef:73:4d:63:f8:d0:67:4b:28:a0:ed:
08:33:2e:f6:e7:bb:35:e9:e9:3b:8b:bd:a2:af:78:
25:ff:c0:58:4d:4f:27:de:7f:8e:f6:63:4f:16:80:
43:3f:e1:fc:a6:8d:61:cb:bb:81:0c:6a:4c:0f:fa:
a1:67:4b:43:ba:d1:72:24:7b:55:29:f3:d7:e5:a4:
5b:f3:2c:b0:51:d9:f5:04:6c:25:8d:64:bc:17:c0:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:06:A4:B4:0F:1A:99:98:74:CD:34:4F:B4:66:41:95:BF:48:FB:A8
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:39:dd:bc:41:4a:0a:11:ac:50:7c:39:8f:70:f9:3a:f2:77:
b7:e2:c2:c8:86:39:66:00:b3:c3:f9:81:92:9b:c6:54:b9:ca:
b3:10:71:30:9d:c2:d6:02:4b:43:9e:93:ce:6e:84:de:80:08:
1f:08:44:a8:28:33:58:a6:6e:12:5f:e4:ab:70:c7:11:91:e0:
ea:4f:f2:39:f4:b1:9e:2e:8a:8a:06:1d:8b:e8:24:21:29:6f:
fc:d6:82:f5:4c:af:7e:1b:f1:e8:3c:d3:b3:d8:2d:06:66:e9:
61:f7:9a:d0:8f:95:9a:2a:9e:d2:de:4f:d8:05:96:69:1f:df:
19:65:b8:b6:9e:da:4e:b9:3b:92:da:93:d0:fa:2d:77:24:73:
4a:b9:e8:61:48:54:86:8d:c0:32:58:85:64:70:ce:7f:52:04:
9a:00:45:8e:cf:ba:46:7f:91:10:5d:5b:8d:72:96:80:d5:96:
e4:22:3e:61:79:09:48:43:16:9a:37:8a:d1:98:dd:10:67:e6:
fd:23:cd:36:99:f1:20:e9:cd:75:49:11:7c:da:8e:0b:c4:18:
1e:fa:3a:1d:11:9e:d3:6d:82:4e:a1:37:f3:88:0c:3b:7a:b8:
16:73:5b:98:49:2d:04:0e:24:40:43:17:7c:c6:4a:94:d0:e8:
f1:3a:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:12 2025 by rpki-client