Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: rsIRmVQSW1DJRZLMRb3h62HbQb0BfSFuFjXdnH9xUgI=
Subject key identifier: 39:30:0D:F4:F7:FF:50:BC:22:B7:27:A9:BF:F1:5F:E4:6F:29:3D:44
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 019A0147F2EC2F0234913C42140191E20269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0DB0
Signing time: Mon 20 Oct 2025 11:01:23 +0000
Manifest this update: Mon 20 Oct 2025 11:01:23 +0000
Manifest next update: Tue 21 Oct 2025 11:01:23 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: ETulRDykhE22vA7b3dENOPV+SnGhZcWK2SqLtxS+a/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:f2:ec:2f:02:34:91:3c:42:14:01:91:e2:02:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Oct 20 11:01:23 2025 GMT
Not After : Oct 21 11:01:23 2025 GMT
Subject: CN=39300df4f7ff50bc22b727a9bff15fe46f293d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:6c:a4:b2:5e:26:ca:70:d7:47:44:31:1a:
0a:a0:23:81:67:7a:40:4c:8c:6f:ef:87:3a:65:b4:
e9:7c:92:77:c1:00:d8:e3:ae:b6:ec:ca:ad:30:65:
9c:76:7e:f8:da:bb:46:eb:b1:09:2f:e9:10:a1:45:
e9:79:e2:c7:05:30:9f:74:b6:a8:a4:5b:99:e7:37:
bf:a4:0c:e6:c9:17:bf:b7:a2:05:a2:0d:35:d6:af:
08:49:55:e4:70:a8:3c:a3:7e:a9:0d:a4:cc:de:68:
b6:44:ab:43:73:2d:00:c2:aa:e2:db:4f:f2:af:74:
ed:54:45:ef:f8:7c:b1:e0:f9:19:52:bb:30:a9:b3:
3d:b9:7a:58:71:d9:07:97:27:48:7a:28:70:0b:cc:
6b:3d:6d:11:cc:12:d0:3d:1f:06:d0:d8:e6:97:44:
bf:0b:8d:52:9e:40:94:08:96:db:b9:df:f1:42:58:
4d:8e:16:4c:96:c8:de:a5:c6:17:e9:ad:51:08:52:
f4:d7:17:0d:35:01:12:ac:37:55:78:e1:4f:f9:40:
eb:be:48:af:c8:e6:f8:5a:92:3c:84:3a:55:e1:40:
71:e0:7c:ec:bd:d4:56:4e:19:a2:eb:4f:a5:95:1b:
58:8b:65:1a:93:a4:2c:f4:16:5b:0f:0c:59:30:66:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:30:0D:F4:F7:FF:50:BC:22:B7:27:A9:BF:F1:5F:E4:6F:29:3D:44
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:69:c9:da:db:37:60:a3:a0:cd:c1:61:79:7f:3e:df:58:64:
d2:6c:eb:44:8f:80:51:2b:56:53:59:0d:6d:a4:47:b1:81:33:
b7:b8:36:aa:ad:ce:ce:6e:a6:6c:d3:70:2d:35:ca:dc:b8:b8:
65:43:49:b0:49:fc:b6:e5:96:ae:b2:bb:63:ce:f2:02:61:cd:
c2:fa:52:cc:7d:ab:d8:77:b5:a8:56:8c:04:c1:4a:58:fc:aa:
33:86:bd:f5:17:fc:08:38:65:ff:a7:16:64:b0:06:5d:54:aa:
13:2c:0e:97:a0:1b:f3:b8:17:8f:e4:47:c5:21:64:52:6f:d3:
0f:d4:09:3b:57:16:ae:f3:b1:5e:44:ba:b0:44:7b:da:43:9e:
ce:40:d2:b1:a7:44:63:5f:b8:93:9c:41:76:7e:5f:fb:d4:77:
f1:97:f3:db:3c:68:bf:04:6c:e2:26:bc:97:44:89:f3:8a:25:
65:de:b0:b5:5e:a6:9a:eb:8e:d6:76:b6:53:2d:22:7c:38:a6:
77:5c:e7:36:ad:d5:31:59:c9:64:d3:02:7f:f9:cd:3e:21:06:
e8:1c:af:b0:f6:6f:e8:bc:fc:c9:46:b4:81:db:f4:93:40:85:
43:2e:47:de:ea:9f:7c:c6:c6:57:ee:12:c6:af:c3:e4:07:36:
be:2d:50:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBR/LsLwI0kTxCFAGR4gJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz
OWNhMDIwHhcNMjUxMDIwMTEwMTIzWhcNMjUxMDIxMTEwMTIzWjAzMTEwLwYDVQQD
EygzOTMwMGRmNGY3ZmY1MGJjMjJiNzI3YTliZmYxNWZlNDZmMjkzZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y1spLJeJspw10dEMRoKoCOBZ3pA
TIxv74c6ZbTpfJJ3wQDY46627MqtMGWcdn742rtG67EJL+kQoUXpeeLHBTCfdLao
pFuZ5ze/pAzmyRe/t6IFog011q8ISVXkcKg8o36pDaTM3mi2RKtDcy0Awqri20/y
r3TtVEXv+Hyx4PkZUrswqbM9uXpYcdkHlydIeihwC8xrPW0RzBLQPR8G0Njml0S/
C41SnkCUCJbbud/xQlhNjhZMlsjepcYX6a1RCFL01xcNNQESrDdVeOFP+UDrvkiv
yOb4WpI8hDpV4UBx4HzsvdRWThmi60+llRtYi2Uak6Qs9BZbDwxZMGYwHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkwDfT3/1C8Ircnqb/xX+RvKT1EMB8GA1UdIwQY
MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt
YmYyYzdhMzkwOGRhLzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh
LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmnJ2ts3
YKOgzcFheX8+31hk0mzrRI+AUStWU1kNbaRHsYEzt7g2qq3Ozm6mbNNwLTXK3Li4
ZUNJsEn8tuWWrrK7Y87yAmHNwvpSzH2r2He1qFaMBMFKWPyqM4a99Rf8CDhl/6cW
ZLAGXVSqEywOl6Ab87gXj+RHxSFkUm/TD9QJO1cWrvOxXkS6sER72kOezkDSsadE
Y1+4k5xBdn5f+9R38Zfz2zxovwRs4ia8l0SJ84olZd6wtV6mmuuO1na2Uy0ifDim
d1znNq3VMVnJZNMCf/nNPiEG6ByvsPZv6Lz8yUa0gdv0k0CFQy5H3uqffMbGV+4S
xq/D5Ac2vi1QEA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:49:47 2025 by rpki-client