Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: XIGfiCIeysDylJqkKLFmIkDLSjcaDbbr+tBlXPMBGYA=
Subject key identifier: E2:08:98:88:86:A4:BA:BD:C1:62:8B:0E:C4:2B:EB:A7:5D:49:7F:18
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 0198D54E4E8D2A908FAE4AE567065ACFCE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: eTSGbM90RwI5mmDiAfeQq1tr3uY.roa (hash: Z3ARgNB2gdroKhId6j9/sVdTHM1Y23fh2zHIni+idcQ=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: DdzmUY93Eoy04L8FMzlswfocDK2AG5bBfkVZ0HoxdaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4e:8d:2a:90:8f:ae:4a:e5:67:06:5a:cf:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=e208988886a4babdc1628b0ec42beba75d497f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:68:42:aa:df:72:09:77:4c:2e:11:3b:ab:
5b:45:2e:4c:16:28:eb:4e:99:cd:c9:40:f3:8e:85:
f3:30:51:9f:2f:52:d3:37:31:70:c3:97:c2:12:f6:
85:1a:8a:db:c0:e1:f6:9b:d0:27:55:54:ef:4e:3d:
13:bb:18:fa:ba:01:8a:22:18:4d:43:2a:5f:af:14:
4a:0e:89:cd:7c:eb:cd:37:95:ea:bb:ad:34:d9:02:
bf:8e:09:c3:ee:e9:2b:f1:b5:3d:42:06:53:38:25:
9d:a9:4f:ae:df:64:f8:55:93:f6:a0:17:46:9e:2e:
20:74:a1:0e:52:ec:3c:ef:78:94:a1:ec:07:3d:ca:
dc:c6:79:a1:2f:b4:98:d3:1e:9f:d9:13:d9:d4:c1:
7b:1f:50:19:c0:f4:8c:15:6d:ef:a7:97:f9:72:cb:
d7:d9:0d:f6:4f:db:5d:ee:7e:6a:ef:59:52:98:25:
af:2b:d0:f7:1e:d3:1c:eb:a5:ab:5a:3a:d4:a6:97:
49:b6:1a:a8:e7:f4:68:c5:bc:19:7c:87:49:cc:5d:
5f:a0:30:bb:95:c2:f4:2f:f2:1a:ef:4e:01:69:33:
7c:0a:ec:52:72:86:58:95:88:d7:e1:92:eb:31:90:
53:cc:73:bd:cf:55:04:6e:b9:79:36:50:8d:8d:95:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:08:98:88:86:A4:BA:BD:C1:62:8B:0E:C4:2B:EB:A7:5D:49:7F:18
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b3:70:c4:fb:44:9e:87:3e:0e:cf:9d:2f:04:19:0c:19:63:
60:cd:8b:f8:e9:8d:5e:0f:25:8f:d9:61:e4:be:52:f4:2d:e5:
c1:c5:66:6f:54:16:21:ba:26:28:96:86:e6:3b:81:ab:be:65:
1c:8d:22:bb:b9:cc:fa:40:52:33:85:65:c4:be:58:c0:8d:e1:
ac:78:98:d5:6b:c9:8f:bf:0f:a8:13:85:dd:94:16:c6:c1:fd:
fb:5f:1c:c0:4f:d1:0d:3b:39:2b:98:1d:3a:55:81:e2:e1:ba:
0d:4f:2e:56:7e:b8:12:9a:45:a8:06:a5:3a:23:e2:c5:a3:6d:
68:01:fe:1b:a8:a1:2e:f1:b9:20:1a:1d:39:9b:89:82:e4:a2:
d7:57:a0:37:2b:91:60:d9:79:68:cf:5d:72:cb:61:e2:a2:88:
72:82:59:ba:9a:35:d3:28:4a:ab:f8:e0:aa:c0:47:e0:39:92:
90:d9:97:5e:fa:e7:5b:2b:0f:79:5a:3f:42:3e:f5:aa:bd:27:
9f:f0:e1:09:d6:f7:3b:de:d5:35:1a:a5:fb:62:7e:c8:9b:10:
13:42:2f:60:03:66:eb:75:8a:ec:f8:d6:ce:a7:4c:a9:8c:e4:
a3:94:83:77:1f:dc:39:c4:56:26:ad:42:a2:5e:d2:0e:0d:c5:
b0:37:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:30 2025 by rpki-client