Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: yiF6j60CzE/zTSZtRv4/twShUWTAcRU42uAGxiEIpKE=
Subject key identifier: BD:65:CD:12:C0:1F:C8:66:76:E9:25:8B:D6:44:B1:B6:13:E2:A5:C7
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 019753106A17642BB4D05C9D84663CD7E2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 05:01:14 +0000
Manifest this update: Mon 09 Jun 2025 05:01:14 +0000
Manifest next update: Tue 10 Jun 2025 05:01:14 +0000
Files and hashes: 1: eTSGbM90RwI5mmDiAfeQq1tr3uY.roa (hash: Z3ARgNB2gdroKhId6j9/sVdTHM1Y23fh2zHIni+idcQ=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: yaQ7QpkcP2j0os2ZaFRiEuGl+mz6/7C7QIxlcWYdjH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:6a:17:64:2b:b4:d0:5c:9d:84:66:3c:d7:e2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Jun 9 05:01:14 2025 GMT
Not After : Jun 10 05:01:14 2025 GMT
Subject: CN=bd65cd12c01fc86676e9258bd644b1b613e2a5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:f2:de:10:c5:a1:f6:b3:b8:e1:7e:a4:e2:
e0:ff:25:7f:38:ff:76:39:87:f0:f2:fb:35:29:55:
fa:5b:3c:72:5f:f2:a6:c8:a0:4a:9e:60:c4:9b:50:
0a:44:c7:a4:27:82:f6:fe:5d:37:3d:5f:48:5f:5e:
13:1a:86:9c:24:a8:60:f8:25:35:da:ad:e0:c4:4b:
ab:8f:b7:10:6e:38:89:8d:5d:6b:61:29:67:c5:49:
9a:50:59:36:62:ae:5c:c8:48:a3:e1:40:84:25:f5:
20:3c:7a:24:c5:e0:d8:1b:59:35:33:28:4c:eb:4a:
80:5c:bc:81:e1:1f:05:d7:1b:e2:af:10:47:40:16:
b1:1c:f4:cc:5d:7d:e7:c1:4a:a0:bc:9a:d7:38:a7:
82:17:fc:a5:96:6f:c7:93:f6:18:d7:ab:0d:49:7e:
8d:f0:0a:79:50:90:cd:38:0e:f4:00:26:f0:de:07:
b4:06:4c:60:19:fe:a1:f3:e4:d4:a6:a8:bb:08:fe:
ce:eb:29:14:e0:4d:18:db:dc:c2:ea:5c:e0:32:d6:
48:62:99:b6:9f:d6:05:57:5a:67:e5:6e:5b:af:4b:
68:ee:0d:5d:95:ff:1d:ae:4b:2c:a5:e7:98:3a:f5:
49:ca:85:22:56:5c:d2:70:ab:15:d3:d2:84:63:c8:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:CD:12:C0:1F:C8:66:76:E9:25:8B:D6:44:B1:B6:13:E2:A5:C7
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:03:e4:37:34:6a:7e:5c:db:42:0f:89:83:a6:cc:d1:da:
71:51:92:c9:4e:3d:62:dd:da:18:f9:48:73:11:1b:4f:3e:1f:
af:c1:e1:81:7d:9f:b1:af:7f:7f:28:66:81:73:6a:7a:e3:d1:
a7:30:b0:42:98:d8:b5:7e:71:11:bb:2d:60:5a:1b:e4:c6:13:
c1:b1:ff:70:af:a6:50:69:f6:95:f7:6f:84:72:c6:a9:05:6b:
ed:b2:0d:6b:a1:56:c4:0e:0c:17:1a:66:0a:5b:e5:4a:de:67:
5d:a3:20:7c:78:53:50:06:86:47:3e:cf:02:4a:e5:b3:a7:04:
77:3d:ee:61:c3:ee:e5:1b:92:e7:6c:b6:f1:87:c2:cc:91:ab:
5f:63:b2:46:0e:3f:30:47:71:0c:c2:70:60:43:22:34:8d:f2:
b6:2a:05:58:58:d2:f8:26:0c:3d:57:30:14:41:e1:c8:63:49:
10:83:86:90:ca:ee:a0:a0:b4:18:c3:c2:00:ba:58:57:e9:14:
d6:2f:30:3a:be:44:c9:c5:7b:02:9c:ce:4c:d1:4b:cb:5e:1d:
ff:c6:66:08:9f:65:02:c9:0b:76:23:f8:2d:18:69:39:51:ec:
d2:70:b3:9a:7d:21:c5:3a:c7:e5:2c:ae:f6:f5:e4:d0:a2:e5:
00:21:a7:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTEGoXZCu00FydhGY81+KlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNjg1NTk4MGIyNzNlNWFlNTdkYzFiOWViMjJlOWY1ZjNh
N2NkZjcwHhcNMjUwNjA5MDUwMTE0WhcNMjUwNjEwMDUwMTE0WjAzMTEwLwYDVQQD
EyhiZDY1Y2QxMmMwMWZjODY2NzZlOTI1OGJkNjQ0YjFiNjEzZTJhNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Gfy3hDFofazuOF+pOLg/yV/OP92
OYfw8vs1KVX6WzxyX/KmyKBKnmDEm1AKRMekJ4L2/l03PV9IX14TGoacJKhg+CU1
2q3gxEurj7cQbjiJjV1rYSlnxUmaUFk2Yq5cyEij4UCEJfUgPHokxeDYG1k1MyhM
60qAXLyB4R8F1xvirxBHQBaxHPTMXX3nwUqgvJrXOKeCF/yllm/Hk/YY16sNSX6N
8Ap5UJDNOA70ACbw3ge0BkxgGf6h8+TUpqi7CP7O6ykU4E0Y29zC6lzgMtZIYpm2
n9YFV1pn5W5br0to7g1dlf8drksspeeYOvVJyoUiVlzScKsV09KEY8h0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1lzRLAH8hmdukli9ZEsbYT4qXHMB8GA1UdIwQY
MBaAFKJoVZgLJz5a5X3Buesi6fXzp833MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEt
ODFlYjYxZjViNzFlLzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEtODFlYjYxZjViNzFl
LzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsMD5Dc0
an5c20IPiYOmzNHacVGSyU49Yt3aGPlIcxEbTz4fr8HhgX2fsa9/fyhmgXNqeuPR
pzCwQpjYtX5xEbstYFob5MYTwbH/cK+mUGn2lfdvhHLGqQVr7bINa6FWxA4MFxpm
ClvlSt5nXaMgfHhTUAaGRz7PAkrls6cEdz3uYcPu5RuS52y28YfCzJGrX2OyRg4/
MEdxDMJwYEMiNI3ytioFWFjS+CYMPVcwFEHhyGNJEIOGkMruoKC0GMPCALpYV+kU
1i8wOr5EycV7ApzOTNFLy14d/8ZmCJ9lAskLdiP4LRhpOVHs0nCzmn0hxTrH5Syu
9vXk0KLlACGnmg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:13:59 2025 by rpki-client