Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: G1YxgZUI/JTYj9DTgUttHc3mikytzvJ5Pk+iSnusatM=
Subject key identifier: 3F:10:1D:42:1C:F4:E3:7B:39:73:87:81:AC:50:F3:47:34:B3:17:14
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 0197B7452D33DD2CC8417B0FFBB708271234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: zmOk25919ImKhAGYrE2pBMBx0gyXdI8Ss9Wim6uYJU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2d:33:dd:2c:c8:41:7b:0f:fb:b7:08:27:12:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=3f101d421cf4e37b39738781ac50f34734b31714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:66:0b:5c:b4:5a:b4:98:86:f2:8f:41:3c:
98:33:c9:84:55:20:97:eb:b7:3d:1c:98:f9:95:33:
8e:27:92:62:bb:71:2a:75:0f:92:1a:8c:2b:95:e5:
73:92:67:80:5c:a7:9c:85:df:9b:45:10:03:24:f0:
2d:17:26:77:af:09:15:20:2d:d8:ee:47:a9:9e:83:
86:13:cb:31:0f:50:13:33:5b:6f:72:34:02:90:1e:
f3:8f:46:54:4d:ef:3d:be:3d:08:a1:c0:ce:85:5b:
b8:50:eb:08:92:17:45:c8:ac:cd:1f:e6:aa:8a:ad:
81:96:1a:32:49:32:af:8a:ae:d7:3d:f5:f0:f4:be:
6b:f4:77:1d:f9:5e:ac:8b:59:f4:c8:34:ed:a3:c1:
04:72:63:a2:c8:62:27:24:80:bd:86:6c:58:a8:a8:
49:9e:4f:b5:5c:70:a1:e6:28:dc:ae:b3:33:ed:37:
9a:b5:7b:dd:b9:27:33:6f:47:16:8e:5c:ad:51:db:
f7:e2:8d:6e:3c:2e:18:95:ca:f7:6d:c4:a6:ff:7d:
af:ed:9d:d6:17:2d:09:32:34:09:58:ae:ce:5c:48:
f3:9b:2d:8f:b9:d7:b6:2d:74:23:c5:21:fa:b2:be:
a3:2b:32:cf:29:9b:61:90:8c:14:85:33:7b:43:4b:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:1D:42:1C:F4:E3:7B:39:73:87:81:AC:50:F3:47:34:B3:17:14
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f9:d6:df:69:a0:0d:b2:e4:29:a1:df:eb:9e:69:60:64:3a:
20:32:45:8f:29:70:e1:bd:d8:3f:79:ac:71:ba:a0:0b:a4:5a:
62:ac:51:98:2b:11:89:5a:22:47:11:0c:42:2f:da:59:cc:4d:
d9:82:54:3e:06:71:68:40:f6:e1:8d:52:a9:fa:63:7b:b4:2b:
46:2a:6a:6d:75:4f:78:89:3c:ab:2e:98:10:14:01:fe:fc:28:
8b:b3:44:9f:90:a0:d5:05:e6:8f:b6:7d:6d:19:c9:61:c6:ec:
9a:02:7e:d5:27:b0:ed:b7:0e:bc:32:bf:15:bd:12:1f:f3:dc:
c5:fb:1f:32:9e:51:92:3c:5a:b8:92:9d:aa:15:50:42:cf:a1:
db:2e:3c:05:a9:04:a3:be:d5:91:7d:46:48:85:c9:1d:f1:10:
40:4f:76:9d:14:b7:f2:56:d3:a1:ad:90:50:6c:26:de:39:f9:
f8:4d:41:bf:fd:79:21:1a:fd:dc:d9:1d:be:af:eb:4f:4a:06:
1e:72:bb:f8:b2:24:ac:ad:5d:09:03:20:6c:90:6b:48:c8:dd:
70:43:a8:5f:cb:ab:86:aa:5b:79:79:d8:a6:fa:71:72:4a:a6:
23:47:5a:7d:e0:dc:bf:0f:b0:1b:ec:37:eb:ac:94:fa:7f:49:
7a:07:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:11 2025 by rpki-client