Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
File: OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json)
Hash identifier: 7z/XPTiJu6oeQHblPipjF8Xgi/6HLlE/mIECjctqp9U=
Subject key identifier: 27:F8:7D:C4:71:AE:FF:17:A0:AC:FA:56:3F:DA:27:15:F8:8B:67:45
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 0199FC8F8DF57D4B8094E1345CD4630350C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
Manifest number: 16F9
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: FL-63HYyWSOHaS0zatb3tBhA794.roa (hash: mLXwUnn3m8eIlstUhvReKOdJ0V5ZYWYpyzYXC0ze4xI=)
2: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: snJubb4j8/g9VwJmJFALKBN5Mn1Vu30j4puUQB7/NHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8d:f5:7d:4b:80:94:e1:34:5c:d4:63:03:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=27f87dc471aeff17a0acfa563fda2715f88b6745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:5d:39:52:e9:d0:c3:92:bf:7a:3b:4a:9a:
0a:ca:11:53:55:47:c9:66:7e:9b:8c:da:42:bb:78:
fc:53:68:06:78:17:ca:17:84:26:93:ae:88:f7:15:
c1:57:d1:6c:fd:ac:7f:a3:31:e2:d6:9d:6b:1c:f9:
b7:5b:20:91:fa:2e:c3:e7:7a:76:ef:f4:50:90:ec:
76:bc:3b:49:3f:b5:11:d6:b9:ca:e8:22:ac:af:35:
21:99:50:09:7c:04:94:70:69:78:58:51:a7:c1:98:
4c:78:f5:79:aa:df:5e:5f:1a:36:bd:c3:98:ff:a2:
bd:59:46:f1:86:aa:44:3a:90:68:b1:42:54:97:d8:
46:50:dd:79:e3:01:70:29:0b:16:eb:9a:6e:18:59:
34:89:44:a8:ec:51:c9:24:c5:e5:f0:c6:fd:81:f2:
04:04:7d:27:67:c4:13:06:6a:b7:a8:7d:cc:9c:b8:
6f:16:46:15:f9:a0:bf:9b:37:e8:ff:c2:fd:4c:12:
5c:8a:f7:68:8d:eb:4d:70:78:e3:7c:7f:dc:5b:0d:
a3:4a:a2:6e:21:68:eb:75:e1:87:32:d6:60:85:94:
ff:33:19:3c:05:49:10:6b:a2:ef:cd:f2:7c:a8:a7:
0a:73:d7:43:fb:6d:dc:04:f6:2f:e3:28:8a:73:77:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F8:7D:C4:71:AE:FF:17:A0:AC:FA:56:3F:DA:27:15:F8:8B:67:45
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6c:df:e0:e2:5f:a9:e0:70:f9:29:78:98:a1:b1:57:f4:10:
f7:62:29:9a:9b:e7:90:b2:c4:51:3f:49:3e:7c:c0:98:cd:92:
20:75:d7:2a:56:3b:a0:c0:98:b0:56:b4:86:1d:f2:ce:ef:2a:
98:1b:41:51:57:40:34:52:20:ae:19:ac:5c:90:01:20:4b:91:
91:7c:c5:2b:ec:e6:82:39:e0:aa:2b:b4:3b:dd:e8:24:32:80:
df:12:cb:0c:3c:0e:16:c5:a9:61:79:90:0f:93:da:cc:7e:2b:
69:f8:ec:b2:ab:af:a8:9a:b2:81:87:2d:68:86:bc:12:bb:52:
cf:10:10:b7:c6:ed:c8:fe:0c:2b:7e:e9:c8:81:a3:4e:b7:97:
39:c1:b5:f2:af:e9:a3:23:7b:15:82:a9:b4:77:21:35:64:34:
95:fa:85:3c:3c:2b:28:b4:b2:1c:73:23:a0:d8:35:7d:a7:8f:
e6:77:8d:34:3b:fd:b4:2d:4f:e3:86:ce:43:ec:b6:75:97:a4:
40:37:29:d8:a4:41:08:19:21:38:16:c0:27:a8:ae:bf:35:13:
fc:b6:18:e2:8f:fb:fe:71:d5:1e:27:47:3a:bc:3c:45:7f:9a:
12:9c:2c:86:20:3b:75:a5:85:2f:94:af:d9:29:a2:8c:61:75:
8c:56:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:23 2025 by rpki-client