Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: rwRJ9fR6RbrM0f4OcqIfdd/Fyf246GThq7eScNOSXlE=
Subject key identifier: 3E:19:82:AB:AD:D9:8E:F5:DB:F4:91:35:E1:B1:F7:5D:68:A2:52:8F
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 0197B8213D1BFC719D3253A26A2EB12F286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0C81
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: PdUBKVDEty4MvKdbP9zYVXCoid1iLJDSR9l1/D6ualA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3d:1b:fc:71:9d:32:53:a2:6a:2e:b1:2f:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=3e1982abadd98ef5dbf49135e1b1f75d68a2528f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:0f:02:4b:c0:a9:40:0f:db:2d:bb:67:bd:
d7:2c:91:7d:6d:c9:e9:89:00:6e:d5:31:6f:e3:b9:
ab:ab:85:8a:d4:58:1a:ef:c7:fb:72:1c:91:ab:a0:
82:2b:a4:ec:a7:8b:61:af:c3:e7:1c:81:53:2b:1e:
56:f8:ca:e6:a9:83:a4:cd:e1:38:9a:9c:54:5b:67:
b6:bf:a4:d9:0a:0a:55:76:66:fc:3b:63:2b:28:ed:
9b:cd:9e:2c:90:13:11:bc:cc:51:aa:42:e5:38:f7:
ee:8a:6d:76:68:71:c6:52:3d:b4:c8:06:06:cb:b6:
c6:d9:81:e6:88:80:54:09:1d:f7:1f:56:3e:28:d4:
af:6d:17:70:21:c2:0f:d1:2e:e7:37:35:a7:06:f0:
cb:f9:05:1d:a2:70:65:3d:f4:65:df:84:17:4f:3e:
1f:60:f7:32:45:03:ab:1a:fc:21:28:07:21:58:0c:
be:50:0f:9d:7e:72:14:ba:5d:bc:b4:d0:ee:61:4b:
7e:21:6b:91:4a:ae:5e:25:9a:7f:81:87:7b:a5:54:
4f:05:d4:93:70:ff:8c:da:db:e3:99:2d:66:a3:82:
28:b6:6d:60:77:08:a5:03:34:36:ed:07:6a:b9:42:
3f:52:af:32:dd:1d:0d:69:79:9b:c1:03:d8:0b:74:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:82:AB:AD:D9:8E:F5:DB:F4:91:35:E1:B1:F7:5D:68:A2:52:8F
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:69:8c:28:36:60:21:f0:12:e5:c7:d9:d6:59:53:b5:f0:39:
f6:06:7b:92:6b:93:c9:4a:d7:6c:95:21:2b:6b:7c:24:55:ff:
fc:23:2a:d0:6a:6c:75:7f:1b:2b:5c:36:48:f2:e5:f7:46:64:
a4:c0:31:37:d8:f5:81:25:e0:3a:b4:18:a9:9b:65:21:bf:05:
91:73:48:36:1a:b1:c7:37:70:82:25:37:08:68:56:04:8c:95:
38:23:d2:4f:ec:61:22:00:c2:56:fa:9f:04:95:50:b4:18:53:
42:97:a2:b1:0d:1d:52:61:5a:95:df:fd:15:c7:5a:da:5f:18:
fb:f2:14:77:93:65:6a:3d:c9:0d:1d:41:cb:1c:2b:35:bc:99:
db:f6:76:54:62:31:73:77:5c:fc:ba:8a:55:e8:25:ea:be:17:
0e:2a:c8:72:17:a7:3d:a7:f1:d1:95:25:5e:14:0e:e8:ad:9e:
01:89:73:4c:3b:1c:c8:61:50:2f:1e:b2:74:61:f6:1d:cd:c5:
1e:a8:e5:e5:61:d5:6d:73:03:38:04:41:fe:78:d4:5c:25:63:
e6:cb:99:c0:bc:c6:4f:e6:30:38:6a:1b:43:23:95:f1:01:9d:
3e:2d:c1:69:bd:cc:46:51:9e:99:78:43:2d:4d:e7:fc:6d:80:
74:13:a2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IT0b/HGdMlOiai6xLyhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz
OWNhMDIwHhcNMjUwNjI4MjAwMTE1WhcNMjUwNjI5MjAwMTE1WjAzMTEwLwYDVQQD
EygzZTE5ODJhYmFkZDk4ZWY1ZGJmNDkxMzVlMWIxZjc1ZDY4YTI1MjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw0PAkvAqUAP2y27Z73XLJF9bcnp
iQBu1TFv47mrq4WK1Fga78f7chyRq6CCK6Tsp4thr8PnHIFTKx5W+MrmqYOkzeE4
mpxUW2e2v6TZCgpVdmb8O2MrKO2bzZ4skBMRvMxRqkLlOPfuim12aHHGUj20yAYG
y7bG2YHmiIBUCR33H1Y+KNSvbRdwIcIP0S7nNzWnBvDL+QUdonBlPfRl34QXTz4f
YPcyRQOrGvwhKAchWAy+UA+dfnIUul28tNDuYUt+IWuRSq5eJZp/gYd7pVRPBdST
cP+M2tvjmS1mo4Iotm1gdwilAzQ27QdquUI/Uq8y3R0NaXmbwQPYC3TkiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4Zgqut2Y712/SRNeGx911oolKPMB8GA1UdIwQY
MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt
YmYyYzdhMzkwOGRhLzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh
LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmmMKDZg
IfAS5cfZ1llTtfA59gZ7kmuTyUrXbJUhK2t8JFX//CMq0GpsdX8bK1w2SPLl90Zk
pMAxN9j1gSXgOrQYqZtlIb8FkXNINhqxxzdwgiU3CGhWBIyVOCPST+xhIgDCVvqf
BJVQtBhTQpeisQ0dUmFald/9Fcda2l8Y+/IUd5Nlaj3JDR1ByxwrNbyZ2/Z2VGIx
c3dc/LqKVegl6r4XDirIchenPafx0ZUlXhQO6K2eAYlzTDscyGFQLx6ydGH2Hc3F
Hqjl5WHVbXMDOARB/njUXCVj5suZwLzGT+YwOGobQyOV8QGdPi3Bab3MRlGemXhD
LU3n/G2AdBOijg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:02 2025 by rpki-client