Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: BPqjmQ0R6p0t6M3B9VmZcvzEBTuap5Ukrt3MR4vV0Bs=
Subject key identifier: 43:A6:D8:27:42:EC:44:BC:01:AC:3A:3A:6D:41:C9:F2:81:1C:07:2B
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 0199FC8F66C5604DC77574270D333E7F4694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: /ZLUuAh49lz0Y52mOF31M9F8ohyvzBe8fjJ639oGR10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:66:c5:60:4d:c7:75:74:27:0d:33:3e:7f:46:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=43a6d82742ec44bc01ac3a3a6d41c9f2811c072b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:4e:9b:bf:4b:4f:33:03:f1:bd:fd:0f:b8:
dd:cd:fc:43:c8:43:70:57:22:97:32:5b:a8:a4:ec:
88:d4:f6:22:aa:3a:04:ba:7f:3f:e6:4a:7a:1b:f4:
a0:76:a6:33:c7:86:d9:f8:f9:17:72:6d:a2:e6:74:
80:d3:9c:7d:3d:3d:00:a2:67:e2:2e:6c:6e:22:09:
38:cf:9e:51:da:87:6e:f7:a4:19:b6:4c:9b:00:d1:
6d:7f:2d:a4:28:b9:46:76:67:75:06:ac:b7:64:a6:
5c:a7:bc:3e:95:88:b9:6b:86:4d:9d:fd:9e:76:11:
81:0b:e8:b4:79:aa:29:92:e1:41:a6:94:a5:f6:cd:
59:60:45:b1:01:90:68:1a:c5:bf:81:3f:ae:9c:99:
16:9d:4c:a5:af:84:45:01:1d:4e:cd:21:ea:b1:76:
80:4f:fa:5d:67:28:6e:c3:b3:98:8b:3d:4e:d4:50:
8c:e7:bd:6d:be:e1:4a:71:2f:f1:f0:ec:c7:8f:f6:
6c:9f:f4:5f:f0:f8:e2:4d:b0:d9:b7:a8:4f:7f:f1:
44:10:b1:a4:eb:67:38:5b:ae:40:01:38:b0:8b:71:
41:c1:ac:23:fe:ff:9e:ce:a9:45:75:d3:18:9b:54:
4e:ef:30:47:30:f6:b0:30:f4:0b:dc:9e:74:51:a5:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A6:D8:27:42:EC:44:BC:01:AC:3A:3A:6D:41:C9:F2:81:1C:07:2B
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:d7:2a:5d:2c:cf:93:48:ed:1c:f3:c6:d4:07:1d:12:4a:
85:2d:67:d0:e1:a9:fd:99:d2:40:a1:4e:b9:88:4c:a0:ee:75:
c8:b9:16:c7:6a:3c:8c:22:87:41:29:15:c1:08:d5:52:9c:5b:
ba:df:6d:75:1a:8d:9c:e0:7d:3a:47:20:a5:d6:50:a4:db:9e:
9e:e6:51:cf:1a:82:3d:fd:88:00:8e:02:e4:83:08:90:84:34:
4a:5d:4d:84:4c:5e:03:65:30:01:a9:eb:d5:5f:3e:5d:1a:5b:
1a:0a:0c:8e:d7:af:c4:c2:5e:5c:19:35:02:63:d1:64:b2:6f:
ed:3e:09:2f:e0:9b:a5:f6:20:ee:04:19:20:4f:73:a7:bd:1c:
7f:fd:cb:ad:00:64:49:9a:55:47:cb:a2:b6:45:fa:f1:6c:4c:
a6:19:80:4f:e6:0e:85:3a:15:d8:13:31:83:39:94:5c:7f:90:
b1:dd:94:17:81:82:c1:95:90:35:a3:60:ac:88:02:95:9d:21:
7c:f5:23:ff:58:88:82:2c:bb:8b:86:76:ae:7a:91:dd:72:4d:
0b:ac:97:10:4a:5e:8e:51:04:df:8a:fd:e7:b4:81:f1:ce:a9:
3c:36:77:5c:2b:89:ae:60:02:83:2a:9c:d8:3e:18:e3:b8:8d:
4d:a5:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:01 2025 by rpki-client