Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
File: OmaGndGplxZLpPoj4P1B-zrLEL4.mft (raw, json)
Hash identifier: 5fZO+h+ya4/8EFoG3u6jz2x+0e9hX10kNQJoE7TyoME=
Subject key identifier: D2:E0:58:37:89:B0:AF:F3:39:76:83:72:B5:A6:5B:76:06:A1:9C:A8
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Certificate issuer: /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial: 019916F6B51A21199801003B3D8A47C3FE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
Manifest number: 1251
Signing time: Thu 04 Sep 2025 23:01:30 +0000
Manifest this update: Thu 04 Sep 2025 23:01:30 +0000
Manifest next update: Fri 05 Sep 2025 23:01:30 +0000
Files and hashes: 1: FFjeL0IuCbzbDGWfr7U5gi5W5Os.roa (hash: 3sG/fd8pRrUXnkWnOf6agMt6Javmg7cQv1NVJ7eO+0w=)
2: OmaGndGplxZLpPoj4P1B-zrLEL4.crl (hash: /M95pLmAot+vqSZkdgrQi4ZGezuruBISeBwUnRDBlhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:b5:1a:21:19:98:01:00:3b:3d:8a:47:c3:fe:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Validity
Not Before: Sep 4 23:01:30 2025 GMT
Not After : Sep 5 23:01:30 2025 GMT
Subject: CN=d2e0583789b0aff339768372b5a65b7606a19ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:ff:55:bb:87:82:c4:6d:a3:33:80:10:e9:
49:12:63:dc:d3:2b:28:8f:cf:26:7b:2b:32:53:e1:
a5:ae:51:cb:ba:7a:9c:c6:8a:83:e1:f8:9d:89:be:
c1:ef:fe:a3:da:74:42:7b:a3:03:ab:23:f9:25:ac:
57:a7:93:3d:88:eb:fe:70:4f:2a:fc:71:05:7a:bd:
08:7d:52:73:5d:0b:c3:e9:11:c3:ed:5b:9a:bf:49:
4f:0a:23:3d:a7:53:6e:8e:c3:e2:ae:05:15:05:29:
70:ee:c6:66:4e:6a:ae:cf:e6:5c:4b:a3:f6:85:08:
da:8f:fd:f0:2a:92:ba:2c:25:5d:b9:6b:2f:d0:25:
a4:6c:c8:0e:b1:5b:71:29:6e:21:25:16:d1:03:f8:
8c:04:12:bd:44:3b:45:f8:c2:8f:e1:3d:d8:8e:27:
8b:f8:0d:1a:94:93:d4:ba:24:ed:e7:d8:2e:c3:aa:
6e:9a:28:09:f2:ca:77:b8:5e:08:81:5e:b2:14:37:
05:27:98:fd:08:98:8a:3c:f7:6e:14:24:37:70:59:
00:be:42:b3:a2:fc:d5:98:68:11:ae:b5:fa:b2:f7:
0b:4a:07:c1:93:e9:85:bc:bb:d9:83:2f:97:d5:4a:
73:bb:b2:22:0f:58:6e:02:87:9a:a2:a7:e4:08:c7:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:58:37:89:B0:AF:F3:39:76:83:72:B5:A6:5B:76:06:A1:9C:A8
X509v3 Authority Key Identifier:
keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:68:90:d5:84:cf:8f:05:2c:1e:94:b2:c4:e7:ce:94:7b:bb:
4b:1c:27:8f:c6:26:7f:9c:03:5f:78:62:3f:0f:eb:15:1f:24:
64:e5:2a:31:7b:c5:1e:ab:10:ba:64:0e:19:d4:69:ae:10:10:
14:5b:da:ac:05:67:5c:36:55:78:6a:80:a0:0e:d3:ac:90:80:
39:06:5f:3b:45:70:e6:e0:9f:d5:a1:24:2b:10:63:bc:99:29:
21:ff:d1:19:09:b0:0a:2e:4f:7d:5d:fc:28:9c:08:4c:90:3c:
83:0f:05:fb:67:88:3b:2f:dd:db:33:5c:8d:8d:b0:54:97:f5:
1e:fc:ec:fc:75:78:ac:6c:54:25:6f:4d:fb:d0:94:fe:0e:a2:
bd:16:67:c9:52:2d:80:71:3c:e9:de:2c:a3:9d:05:40:81:ca:
dc:73:e0:d3:82:2d:90:60:0e:2c:5f:cb:5b:68:17:7b:fb:a2:
4b:17:85:6c:34:84:49:49:09:31:2b:cb:9a:4f:49:2e:20:d6:
e5:98:8c:fb:0c:cc:a2:e6:40:36:ff:0f:26:c4:a4:23:d1:94:
c1:5c:22:54:de:57:47:63:d3:45:44:33:e1:a6:9d:42:d0:96:
8a:a9:12:4c:d0:d6:c3:c2:01:17:f9:21:41:eb:3d:ae:d4:1b:
9d:77:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:19 2025 by rpki-client