Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier: 6Uigv5EG+174c3MesvLcXU8G5RVZ36A3Icr3t0D/43s=
Subject key identifier: 34:C4:17:B3:3E:BD:F8:5E:75:0C:EE:D6:7E:F1:CF:0A:DC:25:28:DC
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial: 01992331655B4C4CFC8321E105DE3F56DF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number: 024C
Signing time: Sun 07 Sep 2025 08:01:03 +0000
Manifest this update: Sun 07 Sep 2025 08:01:03 +0000
Manifest next update: Mon 08 Sep 2025 08:01:03 +0000
Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: wOzaMQkcFdxLOOYa6g/Em2SvBfJpUFf0b63nNrjPvJ4=)
2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:65:5b:4c:4c:fc:83:21:e1:05:de:3f:56:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Validity
Not Before: Sep 7 08:01:03 2025 GMT
Not After : Sep 8 08:01:03 2025 GMT
Subject: CN=34c417b33ebdf85e750ceed67ef1cf0adc2528dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:3a:c4:bb:d3:e9:6f:c7:ee:7a:0b:bd:f9:
fd:65:5b:34:f8:7a:3c:2d:2e:1a:ea:1a:cb:05:5e:
30:b1:01:cf:50:0d:29:0e:ce:fb:18:5b:b9:8d:0e:
31:82:68:26:c0:20:5e:02:98:52:b7:ba:4b:b8:7a:
24:9c:60:dc:1d:1a:b7:d8:21:02:c2:82:ba:b6:5f:
1c:5a:78:29:e3:0d:ea:8c:91:d9:fc:94:b6:d0:ac:
59:d0:28:dc:6c:18:0b:86:c6:62:f7:05:91:e5:01:
29:27:10:5a:b5:63:ae:1d:89:52:04:32:c6:91:ce:
2e:54:7d:7c:22:27:d0:12:10:86:e0:ee:ea:b9:37:
22:e5:69:8e:e1:89:f9:33:68:83:9c:a7:77:ff:2e:
60:06:32:9f:87:c5:09:8a:95:94:c1:41:43:0d:88:
a8:57:e2:fa:99:58:31:a8:bc:0b:7a:41:eb:33:c6:
bc:e2:17:94:c0:15:cc:ea:4e:e4:28:04:9c:24:12:
b8:69:6f:e0:e2:3f:85:70:8b:f3:7f:56:e9:85:dd:
64:13:a4:10:17:ef:e1:83:b0:80:d6:77:f2:3c:73:
88:f3:3c:e5:e8:b5:ed:fc:18:93:1b:ca:7d:c1:ab:
cb:b9:ba:be:e7:11:20:c8:fc:a0:a2:20:c6:81:58:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:17:B3:3E:BD:F8:5E:75:0C:EE:D6:7E:F1:CF:0A:DC:25:28:DC
X509v3 Authority Key Identifier:
keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:50:9f:07:5c:ad:84:9c:f7:13:92:f8:8e:d4:85:7c:cd:43:
45:44:1c:b1:c9:97:19:1b:04:f2:75:05:ac:c2:9a:fe:af:72:
0e:02:5e:ae:40:70:75:55:5c:78:20:bf:81:2b:eb:75:4f:c9:
73:42:5a:01:b2:b5:fd:42:38:41:d0:2b:57:8a:6c:ff:99:8e:
c6:3b:84:40:96:2e:0e:83:03:52:83:8c:52:aa:2a:24:ce:95:
24:f5:4b:71:32:95:7b:cf:1d:0d:32:37:4d:e9:58:97:01:77:
32:13:95:f8:60:fd:59:0a:c4:17:c8:e0:be:26:5e:84:2c:fd:
4c:1b:43:76:47:99:69:1c:25:05:aa:68:9d:a6:8e:a1:9e:63:
f1:1d:84:78:48:92:1e:e8:b8:ca:cb:da:56:26:64:eb:9d:1a:
cc:41:a3:76:c4:08:7b:9c:ca:ce:b1:1f:12:a4:20:d8:52:56:
52:6e:f2:16:3c:02:63:3e:99:60:24:f9:39:c1:53:a5:d0:43:
de:63:b3:c5:1e:75:9e:34:a6:c4:ba:bd:5e:ba:13:fa:52:8a:
d9:19:20:2a:55:ec:86:d6:d5:78:fb:6e:8e:39:23:7f:65:51:
3e:35:c2:de:10:aa:ca:a1:25:86:5a:57:74:b0:a2:74:5a:3a:
97:2b:38:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:21 2025 by rpki-client