Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier: +3ku+7Y/oSyL0OxV3NOTbSEzkSiAyt2hQCzJxdyJe3I=
Subject key identifier: 43:EE:A2:22:FB:02:F5:23:12:90:0C:B7:C1:59:27:F2:12:77:74:F4
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 0199228C53B95075AD89E68C34F11B32F25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:00:45 +0000
Manifest this update: Sun 07 Sep 2025 05:00:45 +0000
Manifest next update: Mon 08 Sep 2025 05:00:45 +0000
Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: vYHQg4Q0lh2k/2kUEYH13IhVCdx/PVwUYpoBm2FYd/g=)
2: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (hash: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:53:b9:50:75:ad:89:e6:8c:34:f1:1b:32:f2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Sep 7 05:00:45 2025 GMT
Not After : Sep 8 05:00:45 2025 GMT
Subject: CN=43eea222fb02f52312900cb7c15927f2127774f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:15:98:37:98:d0:3b:8b:d2:e8:30:bb:f9:
b4:9b:14:c5:21:d9:99:7d:bd:b3:93:cc:60:9f:d8:
15:ed:c7:7e:5d:21:b3:22:15:0d:d0:80:94:38:74:
e5:d5:5c:95:d0:bd:e4:c5:1d:f9:40:53:1d:bc:96:
17:75:ee:ae:e8:9c:26:e1:0c:4e:7e:d1:44:f0:a6:
fd:d3:8e:ff:dd:8c:cb:81:8b:6a:98:a5:0f:ae:02:
67:c2:41:09:0c:33:b7:53:5c:a0:f9:c6:28:3b:4a:
91:0a:3e:55:bb:dc:da:63:be:17:c3:90:f7:84:96:
ce:95:5e:44:ed:3d:12:c7:35:97:4b:42:2f:5c:f8:
58:9e:1b:f0:e8:cb:8a:fb:f4:b7:96:d1:79:94:3b:
7e:31:92:2a:f6:b7:5a:90:d1:d2:59:b7:31:3d:13:
5b:59:76:1d:74:6d:17:fb:0f:50:05:be:72:2c:4b:
7c:8f:c3:0f:99:93:fb:77:0f:28:b5:9a:05:95:ec:
7e:71:ba:13:2a:eb:7d:10:ed:1e:c0:8c:ac:2a:9f:
7c:69:77:09:a8:bc:57:e8:33:0c:75:6c:89:e4:c0:
fb:ce:8b:6d:8e:5f:08:67:83:ee:6e:bd:17:74:ea:
da:47:66:d4:42:7c:92:ef:9b:a9:2f:3b:74:01:3b:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:A2:22:FB:02:F5:23:12:90:0C:B7:C1:59:27:F2:12:77:74:F4
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8a:b4:9c:28:ca:cc:df:9d:dc:a7:d8:d7:a4:ac:39:5f:1c:
f9:f3:a1:4a:04:f7:44:44:6a:b5:4b:b5:8c:6b:39:4a:84:20:
00:1a:4a:e0:68:6b:76:a5:4a:8a:ab:3a:c7:c4:df:c1:f0:dd:
89:78:89:26:89:55:4d:50:d0:24:c5:ca:dc:a3:f6:16:33:d5:
a5:ef:99:f5:41:7a:35:d4:35:84:ce:17:f3:75:ca:e1:91:0e:
00:6e:37:c5:69:8e:c8:37:50:0c:83:53:dd:13:6f:d6:72:8b:
c1:c6:3d:aa:8c:b7:18:7b:51:06:53:a3:44:76:5a:09:13:49:
42:c0:a1:7a:6c:1b:70:0b:6a:4f:01:9d:20:e1:43:f5:81:95:
01:f7:12:0c:18:e7:c1:d9:24:c9:51:75:a0:8e:53:bf:70:9d:
95:e7:7c:c1:4f:87:76:90:dc:ff:b8:31:b2:ae:ff:9a:95:74:
a1:a3:ad:25:a3:04:ba:b3:36:f8:dd:06:7e:33:e4:5c:fc:1f:
07:3d:4a:8b:b6:51:6c:e7:e2:59:c0:f8:b2:fa:27:57:9a:16:
de:a8:a7:4c:0a:54:8d:c2:ce:fd:95:91:f7:9e:ae:e3:3b:dd:
79:29:87:f4:3f:2e:47:11:af:5b:74:ca:32:c4:72:d9:e0:85:
a8:d5:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:18 2025 by rpki-client