Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier: wRxpbAwxVxqMQRlOeBrKpOFzWOw2LPgKk7U8KSuko9U=
Subject key identifier: B7:5A:99:F8:E3:3A:7C:9C:62:6A:F9:7C:02:82:A6:E7:93:E4:3C:C2
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 0199FB0F1CD704069BDF56B5121FDC8BF01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number: 0E4A
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: fz3d3MlymsAAz1R2gGNFV8XH1AcOHDD6vmcanGOIJNQ=)
2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1c:d7:04:06:9b:df:56:b5:12:1f:dc:8b:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=b75a99f8e33a7c9c626af97c0282a6e793e43cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:a7:ef:3e:cf:e9:da:1f:c1:20:49:34:c7:
81:02:ad:3c:01:93:9d:bc:d0:94:58:c0:f0:84:b6:
ea:35:4a:6d:95:1a:ec:f2:4c:34:40:81:9e:d0:af:
e6:d8:61:a9:6d:d1:49:08:82:7e:48:cb:55:a7:64:
83:20:75:4c:30:7c:b5:9c:14:52:1c:43:90:a6:6e:
23:de:8b:96:b2:f2:3c:24:f7:06:3d:7b:50:e1:d8:
61:cc:b3:7f:3f:20:41:40:e3:67:68:01:d4:b1:f6:
7d:01:fe:a6:5d:f8:e9:ce:10:eb:3b:07:4b:c1:0c:
4a:15:88:b3:ef:9b:32:87:bc:73:29:43:f0:83:53:
e0:f6:51:f0:db:e6:f2:58:6d:2e:f0:c8:ea:ab:35:
2f:88:45:d1:9f:e4:07:ac:4f:d9:fc:31:3a:37:78:
c6:5d:6a:93:ec:f9:ab:69:a7:eb:d9:c3:9f:9d:f2:
d1:5b:34:a4:9f:c0:8a:05:db:0a:c9:01:d3:81:27:
35:38:11:ba:2b:3d:ac:bc:85:de:80:2d:ea:f4:fd:
bd:76:d1:47:9a:87:9f:1f:53:98:de:cd:30:b1:06:
f1:bb:2d:ae:7e:b8:8e:2b:4f:35:ae:39:99:7c:9e:
d3:e5:19:bb:91:ea:40:98:2b:06:b4:69:bd:35:3c:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:99:F8:E3:3A:7C:9C:62:6A:F9:7C:02:82:A6:E7:93:E4:3C:C2
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:63:ef:66:d8:66:a7:0e:d9:74:b3:a8:64:6a:3a:64:c9:05:
2c:af:70:1f:ed:f6:e2:15:71:e1:76:ea:5a:1c:ad:5a:a9:21:
c4:88:41:f3:3a:70:9b:8c:1d:4d:c2:84:9a:8f:ff:0b:85:29:
03:53:9f:04:c5:c0:66:92:68:b3:9c:3a:29:ee:89:d8:bd:96:
8d:b6:67:9f:aa:c7:ff:e2:66:bb:da:12:5b:e6:da:bd:68:88:
06:4f:a9:12:c8:28:f8:59:95:9f:f4:e0:6d:47:b3:f3:23:24:
ea:bd:10:31:55:55:12:19:a5:f6:b6:7a:4e:11:77:d8:12:f0:
2f:bd:10:c0:fd:c1:3a:e0:82:9b:7b:97:da:11:ac:ee:4a:f3:
89:20:29:30:19:79:6e:66:75:12:3c:e9:d0:49:e4:99:07:95:
c6:2b:5b:91:4e:28:10:80:b3:1c:fc:20:78:af:e1:8e:28:17:
d6:c5:a0:49:5c:19:92:45:3c:d3:51:2a:d6:39:5b:b2:fd:63:
54:66:79:6e:68:86:7d:53:d6:9e:56:4c:64:7e:c3:50:6a:63:
7e:f4:43:4c:3c:0a:39:a7:0a:0f:cd:05:10:a9:45:35:f3:2d:
b1:97:83:45:0f:2f:99:e7:8f:87:fa:d4:ee:ab:c1:ec:fe:9f:
8f:34:04:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DxzXBAab31a1Eh/ci/AcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTMxYTE0OWMyZTZhZTlhY2M3MjljZjdhYzE3MDZkZTNk
ZTczOWIwHhcNMjUxMDE5MDYwMTM1WhcNMjUxMDIwMDYwMTM1WjAzMTEwLwYDVQQD
EyhiNzVhOTlmOGUzM2E3YzljNjI2YWY5N2MwMjgyYTZlNzkzZTQzY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zOn7z7P6dofwSBJNMeBAq08AZOd
vNCUWMDwhLbqNUptlRrs8kw0QIGe0K/m2GGpbdFJCIJ+SMtVp2SDIHVMMHy1nBRS
HEOQpm4j3ouWsvI8JPcGPXtQ4dhhzLN/PyBBQONnaAHUsfZ9Af6mXfjpzhDrOwdL
wQxKFYiz75syh7xzKUPwg1Pg9lHw2+byWG0u8MjqqzUviEXRn+QHrE/Z/DE6N3jG
XWqT7Pmraafr2cOfnfLRWzSkn8CKBdsKyQHTgSc1OBG6Kz2svIXegC3q9P29dtFH
moefH1OY3s0wsQbxuy2ufriOK081rjmZfJ7T5Rm7kepAmCsGtGm9NTzfiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdamfjjOnycYmr5fAKCpueT5DzCMB8GA1UdIwQY
MBaAFNDjGhScLmrprMcpz3rBcG3j3nObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9NYUZKd3VhdW1zeHluUGVzRndiZVBlYzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNDZlMmItZGU0ZC00YjZmLThkZDct
Njk2MjljNTAxOTQzLzEvME9NYUZKd3VhdW1zeHluUGVzRndiZVBlYzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kNDZlMmItZGU0ZC00YjZmLThkZDctNjk2MjljNTAxOTQz
LzEvME9NYUZKd3VhdW1zeHluUGVzRndiZVBlYzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmPvZthm
pw7ZdLOoZGo6ZMkFLK9wH+324hVx4XbqWhytWqkhxIhB8zpwm4wdTcKEmo//C4Up
A1OfBMXAZpJos5w6Ke6J2L2WjbZnn6rH/+Jmu9oSW+bavWiIBk+pEsgo+FmVn/Tg
bUez8yMk6r0QMVVVEhml9rZ6ThF32BLwL70QwP3BOuCCm3uX2hGs7krziSApMBl5
bmZ1Ejzp0EnkmQeVxitbkU4oEICzHPwgeK/hjigX1sWgSVwZkkU801Eq1jlbsv1j
VGZ5bmiGfVPWnlZMZH7DUGpjfvRDTDwKOacKD80FEKlFNfMtsZeDRQ8vmeePh/rU
7qvB7P6fjzQEcA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:42 2025 by rpki-client