Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: oqrLnNxYg/XgN/FwNLXhYZ73+sUbAoo6is+XdKsfhPU=
Subject key identifier: C3:CB:EB:57:EA:E3:6A:97:AE:A2:F4:0D:8A:0C:72:54:B2:72:A2:63
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 0196C4CBD49DEEA9FB302984E3D48D5E4309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0C03
Signing time: Mon 12 May 2025 14:00:14 +0000
Manifest this update: Mon 12 May 2025 14:00:14 +0000
Manifest next update: Tue 13 May 2025 14:00:14 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: osFrBp/nAugOGWDNChXtUQuLNATDlBTMisMXIzk+7rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:d4:9d:ee:a9:fb:30:29:84:e3:d4:8d:5e:43:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: May 12 14:00:14 2025 GMT
Not After : May 13 14:00:14 2025 GMT
Subject: CN=c3cbeb57eae36a97aea2f40d8a0c7254b272a263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:b1:3b:9d:bd:67:9c:08:39:cd:16:ab:87:
18:3e:50:bb:9b:29:93:35:59:0c:99:f1:98:47:ea:
05:7a:34:cb:69:0f:f5:24:ae:2a:be:7d:aa:8f:0a:
d8:5a:a5:ac:b5:5b:a2:36:c0:37:01:7d:e5:e6:e9:
18:71:9e:48:85:dc:89:2b:a0:9f:af:f2:af:e5:0c:
fc:08:20:99:62:ae:d8:36:bb:ef:0a:19:70:be:46:
44:90:5d:14:4f:51:fe:13:9a:bd:ac:f1:18:0d:a4:
df:5e:4b:71:28:2c:ed:83:8a:12:08:43:5a:86:d5:
eb:4d:1f:97:0c:65:ec:eb:83:8f:eb:77:fa:08:01:
8b:c3:55:d2:d2:46:14:6b:44:29:a4:e7:fd:93:8a:
95:64:c5:d7:cf:c6:38:f5:55:e3:99:03:c3:5c:7c:
60:f4:80:83:57:d4:f8:29:4d:cb:7c:5d:d3:58:fd:
b9:b0:ef:8b:36:d3:99:2d:60:d6:8f:e8:70:21:4e:
4a:64:b0:d7:0e:63:51:d7:97:3b:de:39:6a:dd:19:
b3:49:71:00:12:4d:55:3a:b7:f2:65:3d:11:3e:bf:
84:3f:bd:0f:03:e9:b1:b9:87:b0:5b:d7:48:0a:ed:
12:23:d2:27:6b:c4:82:6a:cf:b9:bc:a6:cf:0b:ed:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:EB:57:EA:E3:6A:97:AE:A2:F4:0D:8A:0C:72:54:B2:72:A2:63
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:33:30:cf:c7:83:6c:ed:6b:7f:30:fe:90:a5:86:25:71:
8f:fd:86:ff:07:ec:ba:a1:84:f5:ba:08:6c:10:a8:d8:6b:c1:
05:2c:a6:cf:15:88:ac:37:29:ea:9d:7e:bf:6d:24:92:b3:00:
6f:48:34:e2:d6:4a:3d:27:f8:66:51:50:8a:55:a5:f0:9b:10:
a9:a4:44:86:1b:c9:5b:e5:a8:29:20:79:cb:b6:a7:ae:34:fe:
f4:24:ea:8d:01:47:ef:3c:69:76:aa:f3:5a:ec:0d:f2:d3:84:
48:11:e5:ae:c0:04:07:e4:ee:c4:c3:c7:7b:50:f7:08:f7:46:
f3:1f:9c:0a:4d:9b:3b:a5:7a:c6:1b:ed:8f:14:4b:d4:a8:cc:
b8:4f:14:03:31:49:c8:1b:89:e5:32:45:9d:ab:fe:a6:0a:c8:
6c:8a:36:e9:fc:6c:a1:44:ad:d8:28:0a:f7:67:25:d0:6b:85:
4a:cb:23:4d:26:6a:61:ad:a8:5b:e5:fe:04:fa:ac:07:93:b8:
91:01:aa:3f:a3:b6:e2:c6:e7:54:0a:14:a6:94:90:b3:5f:28:
7e:9f:3f:da:ef:c9:0d:9b:cc:41:60:07:ae:6a:30:ef:03:f2:
be:07:c1:b3:00:f8:07:5c:53:81:36:45:ac:94:c5:f7:eb:cb:
31:17:6f:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEy9Sd7qn7MCmE49SNXkMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz
OWNhMDIwHhcNMjUwNTEyMTQwMDE0WhcNMjUwNTEzMTQwMDE0WjAzMTEwLwYDVQQD
EyhjM2NiZWI1N2VhZTM2YTk3YWVhMmY0MGQ4YTBjNzI1NGIyNzJhMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXixO529Z5wIOc0Wq4cYPlC7mymT
NVkMmfGYR+oFejTLaQ/1JK4qvn2qjwrYWqWstVuiNsA3AX3l5ukYcZ5IhdyJK6Cf
r/Kv5Qz8CCCZYq7YNrvvChlwvkZEkF0UT1H+E5q9rPEYDaTfXktxKCztg4oSCENa
htXrTR+XDGXs64OP63f6CAGLw1XS0kYUa0QppOf9k4qVZMXXz8Y49VXjmQPDXHxg
9ICDV9T4KU3LfF3TWP25sO+LNtOZLWDWj+hwIU5KZLDXDmNR15c73jlq3RmzSXEA
Ek1VOrfyZT0RPr+EP70PA+mxuYewW9dICu0SI9Ina8SCas+5vKbPC+2FYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPL61fq42qXrqL0DYoMclSycqJjMB8GA1UdIwQY
MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt
YmYyYzdhMzkwOGRhLzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh
LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrMzMM/H
g2zta38w/pClhiVxj/2G/wfsuqGE9boIbBCo2GvBBSymzxWIrDcp6p1+v20kkrMA
b0g04tZKPSf4ZlFQilWl8JsQqaREhhvJW+WoKSB5y7anrjT+9CTqjQFH7zxpdqrz
WuwN8tOESBHlrsAEB+TuxMPHe1D3CPdG8x+cCk2bO6V6xhvtjxRL1KjMuE8UAzFJ
yBuJ5TJFnav+pgrIbIo26fxsoUSt2CgK92cl0GuFSssjTSZqYa2oW+X+BPqsB5O4
kQGqP6O24sbnVAoUppSQs18ofp8/2u/JDZvMQWAHrmow7wPyvgfBswD4B1xTgTZF
rJTF9+vLMRdvFg==
-----END CERTIFICATE-----
Generated at Mon May 12 16:59:21 2025 by rpki-client