Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier: qiA6GhLFkuvUUat8E1LhQJocyFNFVtjmOsiNJdymjPM=
Subject key identifier: 62:85:AE:CC:4F:A4:57:DB:CA:C1:41:6A:36:91:C8:3C:C2:3F:2D:DE
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial: 0199FF597FC29D728E6C4CEDD5253D4D3DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number: 02BE
Signing time: Mon 20 Oct 2025 02:01:19 +0000
Manifest this update: Mon 20 Oct 2025 02:01:19 +0000
Manifest next update: Tue 21 Oct 2025 02:01:19 +0000
Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: W6vBDcOScwbwoAyHOmRCr2K6Oonik89aOUqRSmXS7ks=)
2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7f:c2:9d:72:8e:6c:4c:ed:d5:25:3d:4d:3d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Validity
Not Before: Oct 20 02:01:19 2025 GMT
Not After : Oct 21 02:01:19 2025 GMT
Subject: CN=6285aecc4fa457dbcac1416a3691c83cc23f2dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:ec:16:f8:b2:33:de:c2:e9:06:5f:3d:e1:
e1:be:4e:58:42:e7:8a:7f:80:1e:9c:0f:7e:37:e1:
a0:e1:79:d2:aa:cb:58:c1:b0:c6:7c:b3:a9:bd:ab:
f3:e8:0b:27:d4:76:30:ef:f8:f6:dc:50:54:6b:80:
81:71:6a:28:11:8c:17:92:83:e5:4f:33:25:4f:e2:
53:25:50:c0:e9:e4:24:4c:bb:9e:16:de:c6:83:22:
4b:19:c8:88:f9:08:d4:72:fd:1f:c5:ff:38:98:7b:
f5:c0:c9:ce:ae:f6:c6:52:02:40:be:cf:c7:73:f8:
0f:a3:0d:d6:30:bd:08:27:d4:d6:e9:3a:a5:af:c4:
28:22:c3:13:f9:11:50:87:da:78:c1:a0:d1:52:eb:
04:1f:b4:45:8b:33:76:9f:28:e2:41:da:1a:33:ca:
0c:72:22:7d:ef:a0:9d:c6:cf:f3:f5:e1:18:27:8c:
64:bb:03:2a:95:7c:eb:cf:d5:75:05:a6:dd:60:3f:
cf:27:d9:bc:dd:e9:ac:3a:e4:63:66:22:6e:52:c9:
e1:50:06:6a:a8:37:e8:8d:7f:3a:63:1c:ad:49:ee:
df:f6:60:f6:55:60:61:44:b4:a6:c3:55:b7:e7:dd:
b4:ae:55:b3:30:f0:ef:87:df:a1:94:78:b0:53:60:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:AE:CC:4F:A4:57:DB:CA:C1:41:6A:36:91:C8:3C:C2:3F:2D:DE
X509v3 Authority Key Identifier:
keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d8:b7:e4:e9:17:9b:2c:2d:a5:68:5e:29:06:18:e9:5a:1e:
a7:2e:f4:3f:ca:d7:cf:1e:1a:4e:e4:69:42:ef:82:ea:2c:dc:
8b:f0:12:c2:d1:2d:d3:2c:90:d8:32:48:a3:4e:3e:93:06:47:
88:a0:34:6d:d2:d9:4e:fd:64:c0:41:24:ff:fc:80:6b:23:d5:
74:55:99:4b:e6:e3:78:fc:6c:a2:ef:13:3b:0c:ee:b2:d8:75:
4e:c9:02:ed:02:b9:bb:f5:da:e8:3f:c8:85:c1:45:1d:b9:b3:
e9:4b:b1:90:4a:af:17:11:c2:02:a0:74:6f:e9:b0:51:90:e9:
2a:0a:30:c0:e7:36:24:87:49:54:0b:09:ef:a6:f0:68:d3:e1:
34:d0:c2:42:1d:56:d0:2e:60:13:15:bf:12:fb:8a:fb:ae:af:
30:ab:e7:a9:f7:7e:2a:0a:5c:6a:94:1f:c8:8c:53:67:55:5e:
e6:2e:7b:ac:39:74:12:0d:93:0a:69:76:bd:f4:10:e2:01:95:
18:50:85:1b:d0:24:c7:b4:d7:e1:c8:ff:5d:2f:3e:7e:25:aa:
96:d5:3f:e5:9d:bb:1e:17:45:ff:c6:46:e7:93:9e:89:7d:4b:
3d:20:72:ec:07:98:a5:a0:d7:7b:51:99:8e:1c:d0:2a:36:07:
68:5d:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:59 2025 by rpki-client