Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier: E3r1ax9FXZkoGsX9d31UNv5/mnC2fvVQSGK5dqQFoy0=
Subject key identifier: 49:AF:68:DB:61:61:0B:BB:AD:A0:62:BE:46:07:8B:D8:AD:3D:B2:64
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 0197B7B332F0981217AB45E673D9E45C15E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number: 0D1E
Signing time: Sat 28 Jun 2025 18:01:03 +0000
Manifest this update: Sat 28 Jun 2025 18:01:03 +0000
Manifest next update: Sun 29 Jun 2025 18:01:03 +0000
Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: 7HZtUROpf2Ni/19Yh03h+DwjtMa9uvDLvRsfLKNBu+A=)
2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:32:f0:98:12:17:ab:45:e6:73:d9:e4:5c:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: Jun 28 18:01:03 2025 GMT
Not After : Jun 29 18:01:03 2025 GMT
Subject: CN=49af68db61610bbbada062be46078bd8ad3db264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:02:40:88:98:26:f5:49:1a:77:a8:7a:97:
97:ef:49:62:54:ce:b4:ff:63:ec:8a:d5:74:73:6a:
95:6c:9b:e8:00:92:4b:16:1d:ff:7e:a1:b0:b9:36:
98:56:a1:a9:65:d1:4d:ae:f9:9c:b6:d8:df:ec:fe:
cf:b2:2e:86:fc:da:10:a6:02:97:12:4d:86:22:d3:
c8:3b:6d:91:2b:f6:2f:03:b3:6f:b0:50:ef:2c:7e:
97:61:4b:a0:16:b4:ac:79:67:b5:cb:da:f7:62:63:
14:b2:21:58:0c:84:51:37:84:10:14:fa:8f:b0:5c:
04:fd:6b:64:b9:b6:56:8f:ac:d9:26:32:94:4f:87:
fa:5e:4e:b5:7e:b8:51:c3:a6:f5:cb:b0:28:70:29:
24:eb:71:1d:11:74:5d:cc:c3:c9:0e:29:e7:5c:47:
15:17:56:87:7e:cb:3d:6b:88:15:ee:0f:99:63:1d:
f7:ca:55:5b:76:63:27:b8:cf:f8:f8:bb:23:b0:1b:
8e:6d:e0:60:dc:3d:e9:ef:b8:7a:55:96:05:a2:ec:
fe:48:8d:ce:4f:18:46:d7:c7:01:cb:14:12:3d:9f:
82:b1:84:c2:63:f3:42:f1:10:aa:e4:2d:7f:dd:33:
ee:36:7a:21:ac:e3:61:12:72:67:7c:f2:0f:9d:9e:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:68:DB:61:61:0B:BB:AD:A0:62:BE:46:07:8B:D8:AD:3D:B2:64
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7a:c9:e5:2b:81:bd:d4:f2:a9:84:8e:68:2c:a1:f9:c1:a9:
ff:1a:af:02:34:4e:38:d2:9a:63:0d:49:75:23:86:d2:de:ad:
80:cc:1b:5b:ef:c9:5d:d5:b0:85:f6:20:10:4e:bd:93:6a:f6:
86:1b:dd:8e:53:06:e8:88:7b:51:38:f0:c9:cb:87:b8:f2:4f:
0b:54:57:75:71:b3:3f:b6:14:8a:01:b8:93:46:f2:51:7c:4f:
4e:2e:b7:f9:f2:f0:e6:74:52:c1:3f:af:95:df:a1:37:8f:e0:
fe:7f:d4:b1:d4:e6:b9:84:da:78:35:bb:05:12:9a:30:bd:2d:
c6:f0:0b:84:23:00:21:5a:ee:2b:95:b8:74:31:ea:56:46:50:
c1:fc:7c:59:4b:28:b8:e6:5b:5a:c9:b9:64:18:9e:12:fc:39:
03:42:73:40:5e:b3:72:bd:0e:58:c4:f0:d8:3b:58:be:b0:4b:
fb:da:d0:ae:60:9b:40:0f:24:29:7c:c6:4a:93:80:5a:05:b4:
1f:55:e0:4c:64:43:5a:f8:a6:43:8c:c1:2b:ba:d8:34:26:db:
7a:5d:33:9d:ad:4a:af:72:0f:46:9f:3b:c5:7b:5b:3d:ed:46:
3d:71:61:c2:48:46:fd:be:82:a2:fa:f4:7a:f1:c2:b3:64:72:
d8:db:4e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:48 2025 by rpki-client