Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier: v4EEctpiqDTUhdlZ2sorjpJsW8DlTV/I26w9xLNOHdY=
Subject key identifier: 7F:EB:46:29:FC:3E:FF:29:DB:19:4D:16:83:14:30:F4:71:38:62:21
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 0198D515F6190C1D722670A7B368A4CCE1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=)
2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: ICvDzKYTWlyJRksF3SLWBaY7UdGJYv8CV0Y0WJsmZK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f6:19:0c:1d:72:26:70:a7:b3:68:a4:cc:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=7feb4629fc3eff29db194d16831430f471386221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:bf:91:56:b0:d6:46:ae:0e:ba:74:78:f0:
d7:b4:cb:a6:2a:2b:e5:12:6b:1a:01:72:61:43:02:
2d:ac:51:9f:d7:9d:44:53:8c:77:f9:38:6d:b8:70:
06:49:49:3b:08:4d:ab:55:9e:eb:41:05:bb:18:1e:
17:da:e9:27:05:20:b6:97:59:21:4a:95:64:19:4c:
36:03:c0:01:30:77:9b:f4:92:fb:32:01:f0:1e:ea:
17:d9:97:fc:db:f1:34:2d:ae:f5:44:8e:99:cd:a1:
61:ae:ef:76:7f:0b:fe:ce:52:bd:56:df:3d:1b:58:
77:15:c8:bd:86:04:e2:72:20:a7:82:df:14:ad:9f:
f9:0b:b7:8b:49:8b:86:f4:b5:0b:7d:57:84:ff:65:
95:f3:ff:4f:35:84:02:79:96:16:9e:e8:ad:46:77:
73:ca:63:1a:70:63:f4:49:61:79:ec:af:74:94:c5:
0c:20:7b:a4:3c:db:ca:f6:40:ce:fb:42:2c:a7:7d:
dd:19:40:d6:f4:10:33:6c:21:fe:64:fc:47:09:c9:
28:9d:1a:0a:0c:ed:fe:35:35:3d:d0:ff:82:94:b1:
9a:8a:34:79:a7:0a:b8:0b:d1:09:88:01:73:ad:7d:
78:e1:2f:bb:90:83:3f:67:32:c1:1b:f4:cb:4b:59:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EB:46:29:FC:3E:FF:29:DB:19:4D:16:83:14:30:F4:71:38:62:21
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:85:95:7f:47:d9:bd:ae:45:ab:90:c8:9f:c0:aa:1a:fb:a8:
a3:eb:54:82:12:2f:24:34:1e:c6:0b:37:bc:ba:f0:33:95:c1:
c0:c3:43:67:7d:8a:4d:4e:40:50:00:d8:50:9d:c8:a1:21:a3:
51:cc:be:94:04:0a:ed:06:3a:bd:3f:26:39:96:b3:8f:9e:3d:
a3:7a:aa:ec:18:c4:85:b8:ab:73:68:7c:1a:b3:a2:b1:9b:64:
6b:18:8a:f6:fc:f1:ab:04:c8:0b:5b:7b:7d:f6:1c:42:9e:50:
aa:0a:f1:e7:c4:a3:30:2e:44:91:62:7e:72:89:95:2f:1f:1c:
ad:ed:76:47:5c:41:96:42:f7:2d:17:ec:e3:49:e3:4e:58:7a:
6b:04:d9:3d:02:df:82:bb:14:42:4f:f9:8a:63:74:b2:fc:05:
af:83:b8:6e:7e:58:53:f0:9c:e2:36:c2:b1:89:a2:b4:c5:41:
1a:39:e5:d4:19:5a:ee:96:87:6f:fa:71:52:bd:62:0f:5d:05:
5b:45:e6:5c:4d:cc:b2:09:47:a3:eb:50:c2:e5:71:32:eb:c3:
b5:53:6f:42:3e:5c:9d:f6:08:89:f4:54:31:ad:3d:75:32:32:
a7:64:5c:96:a8:28:fe:cb:de:db:15:58:03:1b:de:b6:6b:2f:
14:d8:86:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:22 2025 by rpki-client