Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: 4N8gBc55YY8koIy8eRt4uMEisMeNck+OBxzsgc+kGZs=
Subject key identifier: 03:8B:34:DD:D4:C5:93:5A:0F:07:3E:D9:49:CA:C8:34:0F:B2:0A:01
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 0198D5F1C2EF8A27B9359AA01089C46BFCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0D15
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: 2L/6rHL2cYeP+DaMa4Rl0IkX0zQZikCw4Tuk4Z/MZC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c2:ef:8a:27:b9:35:9a:a0:10:89:c4:6b:fc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=038b34ddd4c5935a0f073ed949cac8340fb20a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:e9:6d:34:89:55:66:43:95:aa:8d:4e:91:
21:59:39:f2:b2:13:72:ed:ee:1c:1f:20:12:43:2f:
51:af:39:d9:9f:f7:c4:14:3c:ec:c0:a9:3f:88:97:
2c:68:5e:1c:42:ef:44:9e:53:37:2b:2c:1b:09:b4:
a4:83:31:d1:7b:c5:02:66:61:2d:f8:3d:f4:86:17:
b6:48:f9:24:cc:2a:1b:f5:a6:74:7b:07:30:73:24:
54:1d:ab:9d:58:ff:14:7a:8e:cb:61:4e:ff:5c:95:
18:c8:d4:45:46:8a:38:a4:d9:8b:3e:bf:03:4c:ee:
ba:e2:58:4f:16:ee:8b:5d:6b:a2:3f:68:ce:1c:db:
80:fe:01:7e:97:58:4e:d6:d5:fb:e3:7d:83:a9:b4:
64:e5:5b:22:ba:13:6c:e5:56:a4:76:26:4e:89:55:
74:a7:e8:13:16:c4:0b:f0:e4:7a:6f:08:47:62:52:
a2:db:df:01:f1:50:2b:82:d4:d4:da:12:a5:58:e2:
2e:0e:4b:55:da:dd:f2:8d:d8:70:83:31:e4:f1:db:
1c:6d:ba:5c:45:80:66:a5:3c:b1:bc:ad:94:21:ab:
d7:ef:fc:27:09:0d:88:d9:df:86:b7:b9:82:67:f8:
90:6f:8d:6f:c6:34:fb:13:a3:e3:8a:52:ab:3b:a4:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:34:DD:D4:C5:93:5A:0F:07:3E:D9:49:CA:C8:34:0F:B2:0A:01
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:ad:93:a3:1c:17:38:9d:5f:53:09:31:4f:57:90:29:74:
60:40:ce:d6:43:13:45:e8:19:2c:47:75:17:d3:d1:0d:64:21:
88:0f:85:0c:af:61:96:5b:c2:33:6a:ea:d4:39:47:73:04:da:
bd:9a:b6:dc:46:f9:c7:75:64:11:18:19:92:36:09:5e:0a:b0:
94:e2:09:f9:b4:fd:67:65:61:80:97:ab:2c:1d:fd:43:c0:c2:
3e:8c:b1:45:39:7c:ab:d8:4a:9a:72:3c:80:39:8b:ca:24:b0:
07:ab:f5:b2:25:ae:3c:8b:77:05:0e:85:85:73:c9:6e:44:b3:
6e:6b:70:81:52:d3:6d:c0:14:18:4f:3c:ac:1c:79:ad:6f:84:
2f:5d:f3:81:ff:e9:7d:d2:5c:a6:7b:6e:f9:86:97:9f:c5:4d:
47:18:21:86:f0:f6:22:55:d9:3d:f9:69:f7:2b:8a:15:ea:e0:
5d:30:e3:0d:90:3e:ad:86:25:c6:19:82:55:f4:22:f9:22:4a:
b4:8a:b1:92:85:c8:ca:d5:18:b1:f1:92:04:1e:69:86:d4:80:
91:c4:82:04:cf:0a:a4:5b:42:f8:da:a7:b6:7e:94:db:00:7a:
00:b5:c9:91:d6:df:a0:82:64:8a:96:28:0d:c3:78:7b:d6:c5:
c4:40:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:39 2025 by rpki-client