Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File: oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier: dc6xmxL5t/3jB6xmc17K9cHOoFEhf0QbO8BUcWZ4Vcw=
Subject key identifier: F1:7A:F8:5B:D4:34:EB:0A:A2:87:8F:D2:CD:41:0F:08:38:1C:0E:67
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer: /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial: 019A72936774C92D3CD12B049D5E2BEF65E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number: 1710
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: Gqpn/GIsSFO8xlQpItd5uy6pdhWw8+JYmccHHjnSEg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:67:74:c9:2d:3c:d1:2b:04:9d:5e:2b:ef:65:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=f17af85bd434eb0aa2878fd2cd410f08381c0e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:a8:fc:b0:fb:fb:c8:ad:68:ef:40:6a:bf:
46:d4:af:93:b8:aa:45:8f:03:15:31:7c:26:92:f1:
06:c7:2c:d5:cb:f9:72:3f:4b:4b:bc:34:6f:db:08:
a6:04:b9:93:97:d7:f4:40:f5:80:f2:16:06:18:11:
e1:22:7f:0e:13:49:a7:94:cd:b9:7c:4e:e6:b8:22:
ed:ea:ea:28:27:59:4f:fa:ea:2e:b6:4a:93:d3:b5:
25:99:32:cb:31:ab:a0:0b:ea:e8:c6:40:01:bf:2c:
d4:33:4e:22:ea:18:0c:60:b2:3c:43:d2:dd:06:eb:
a9:68:e8:f3:9d:8a:51:53:f8:19:c4:65:2d:e3:6e:
37:62:7f:af:90:8b:a6:1d:67:b9:63:a9:67:26:d1:
a0:f9:76:3c:37:2d:35:a4:2f:51:8e:ff:97:9f:b3:
45:2c:9c:0c:ec:24:05:46:f9:57:47:1c:7b:08:a6:
a6:1b:ed:36:13:48:e0:0a:e3:70:72:ad:79:82:ff:
7f:e3:43:32:39:54:56:13:7b:85:aa:1a:c3:7d:94:
b3:f6:2a:0c:1c:8c:95:1f:da:26:ff:75:d8:ce:d4:
17:eb:c4:69:f7:af:5f:80:1a:a5:69:00:fc:e1:8c:
74:87:5b:f2:ab:00:d7:3d:74:86:6f:3b:8f:5c:da:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:F8:5B:D4:34:EB:0A:A2:87:8F:D2:CD:41:0F:08:38:1C:0E:67
X509v3 Authority Key Identifier:
keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d7:c0:73:eb:fa:cc:63:e0:42:40:fa:63:02:67:c0:93:16:
78:e9:23:78:c1:11:7b:75:20:91:3a:6c:96:ed:a8:20:5e:a5:
d9:f1:33:d4:2e:dc:93:0a:12:cb:f8:ba:20:ea:99:80:74:87:
16:c5:d5:33:ce:ba:ec:ec:17:19:07:48:d5:b2:94:98:d3:53:
f1:1b:26:a9:de:b0:5b:6c:b0:a9:d3:c6:ac:69:ad:75:ac:aa:
da:73:e1:0d:4a:5e:25:00:9f:e0:d4:d7:44:cb:33:6b:57:b3:
ed:b9:6f:0c:d4:15:0f:a1:24:a3:8f:ee:1c:cc:b9:90:0d:dc:
00:34:25:88:85:41:c8:5e:15:8e:c4:d5:67:38:55:38:43:2b:
17:30:fc:8d:e9:ac:3c:36:4c:8d:1d:c9:99:b6:22:d2:2c:24:
51:9d:8c:cf:90:38:97:39:44:b7:2c:e4:86:48:a8:db:c4:51:
86:38:b1:36:79:cb:5f:ee:e0:84:f7:16:ee:bc:52:f6:bb:c4:
3f:33:98:1d:7f:e6:db:a2:eb:2c:2d:7c:bf:16:73:ad:78:84:
5a:8c:e1:3f:18:63:3e:b3:cb:98:15:7f:dc:fb:ef:8c:bd:c0:
b3:29:7c:04:a4:cb:19:95:7d:a3:51:80:66:3d:cf:e9:97:57:
14:1c:92:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk2d0yS080SsEnV4r72XjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYzU4Y2QwNzFmNzgwYjdhYzM0MGMwMTQ0ZWIwNGZiNTBj
Y2JiZjEwHhcNMjUxMTExMTEwMDU0WhcNMjUxMTEyMTEwMDU0WjAzMTEwLwYDVQQD
EyhmMTdhZjg1YmQ0MzRlYjBhYTI4NzhmZDJjZDQxMGYwODM4MWMwZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S2o/LD7+8itaO9Aar9G1K+TuKpF
jwMVMXwmkvEGxyzVy/lyP0tLvDRv2wimBLmTl9f0QPWA8hYGGBHhIn8OE0mnlM25
fE7muCLt6uooJ1lP+uoutkqT07UlmTLLMaugC+roxkABvyzUM04i6hgMYLI8Q9Ld
BuupaOjznYpRU/gZxGUt4243Yn+vkIumHWe5Y6lnJtGg+XY8Ny01pC9Rjv+Xn7NF
LJwM7CQFRvlXRxx7CKamG+02E0jgCuNwcq15gv9/40MyOVRWE3uFqhrDfZSz9ioM
HIyVH9om/3XYztQX68Rp969fgBqlaQD84Yx0h1vyqwDXPXSGbzuPXNrO8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF6+FvUNOsKooeP0s1BDwg4HA5nMB8GA1UdIwQY
MBaAFKDFjNBx94C3rDQMAUTrBPtQzLvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb01XTTBISDNnTGVzTkF3QlJPc0UtMURNdV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82Yzk3MjItMjYwOC00NGFmLThjNzkt
NjZiMmY5OWMwYjQ1LzEvb01XTTBISDNnTGVzTkF3QlJPc0UtMURNdV9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC82Yzk3MjItMjYwOC00NGFmLThjNzktNjZiMmY5OWMwYjQ1
LzEvb01XTTBISDNnTGVzTkF3QlJPc0UtMURNdV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNfAc+v6
zGPgQkD6YwJnwJMWeOkjeMERe3UgkTpslu2oIF6l2fEz1C7ckwoSy/i6IOqZgHSH
FsXVM8667OwXGQdI1bKUmNNT8Rsmqd6wW2ywqdPGrGmtdayq2nPhDUpeJQCf4NTX
RMsza1ez7blvDNQVD6Eko4/uHMy5kA3cADQliIVByF4VjsTVZzhVOEMrFzD8jems
PDZMjR3JmbYi0iwkUZ2Mz5A4lzlEtyzkhkio28RRhjixNnnLX+7ghPcW7rxS9rvE
PzOYHX/m26LrLC18vxZzrXiEWozhPxhjPrPLmBV/3PvvjL3Asyl8BKTLGZV9o1GA
Zj3P6ZdXFBySoA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:25 2025 by rpki-client