Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier: 2jmKeh/Skl92HiYwj5wF7oLYYThrzSEP0hFFbSs2vcM=
Subject key identifier: 95:62:3A:FA:BF:93:57:A3:7C:C7:78:AB:B1:0A:6B:50:AA:BA:BF:1C
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 0199FCC67E3DAEA856804DDA5937016B3A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: eTSGbM90RwI5mmDiAfeQq1tr3uY.roa (hash: Z3ARgNB2gdroKhId6j9/sVdTHM1Y23fh2zHIni+idcQ=)
2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: 0HFan6M+EJFN+r4I863yVHwAbZH3euYcSrNZiNMWcE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7e:3d:ae:a8:56:80:4d:da:59:37:01:6b:3a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=95623afabf9357a37cc778abb10a6b50aababf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:73:51:24:ce:97:78:94:4e:dd:8b:2e:27:
47:ee:45:f1:b5:c4:e6:7b:62:ce:73:86:8f:70:3a:
bb:4f:5e:a2:db:01:bf:0c:97:33:75:01:a4:24:43:
02:d6:21:c5:fe:32:7c:74:7e:a6:00:60:37:e4:11:
85:28:2c:3d:fe:43:3f:9f:8d:f4:19:b6:a0:a5:8b:
cd:f3:13:d6:55:e3:49:ae:91:41:2c:87:08:16:b4:
6a:f2:e6:f6:02:a0:29:da:dc:9f:ae:91:86:ae:e3:
9e:37:82:f1:2c:47:85:58:0f:0b:62:7e:9c:52:fa:
1a:44:37:68:0f:ae:65:6c:af:95:b9:2d:78:aa:78:
bd:6d:61:f3:9b:6d:d4:53:50:58:24:09:f3:d8:56:
7f:6a:3b:78:bd:28:2b:ba:5c:44:ac:a7:a6:b9:ab:
0f:0a:92:87:dd:75:8a:2f:42:dc:70:ec:ff:a8:72:
93:99:8c:bd:1e:38:a8:e1:b7:4d:63:64:63:02:bb:
2a:14:1f:c2:93:8f:88:d9:f9:e1:00:2f:fb:bd:f5:
fb:47:b7:0f:34:40:96:c1:09:77:9d:23:ab:82:af:
70:e1:ea:cd:f1:e5:b6:61:30:b4:00:e6:e3:6c:ed:
52:66:05:e0:d9:ee:3f:26:d7:1f:79:39:09:81:e3:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:3A:FA:BF:93:57:A3:7C:C7:78:AB:B1:0A:6B:50:AA:BA:BF:1C
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b1:c2:e4:61:34:9a:98:3e:7d:28:92:b8:1f:de:33:bc:87:
5b:59:e1:96:91:79:6e:f1:40:79:85:b1:05:98:fe:62:82:7e:
41:6e:b7:21:b8:23:eb:67:f4:28:9c:00:b4:69:44:ac:3e:ba:
b4:e3:c9:86:d6:da:d9:45:54:78:05:40:5e:c6:df:4f:8c:1c:
7e:8a:63:80:eb:3b:5d:98:db:02:59:82:a9:8c:49:86:66:be:
92:0e:3c:a9:43:d9:4d:bb:c7:a2:4a:52:b6:3f:57:7f:23:10:
78:1f:7c:f3:11:f7:39:6e:b9:4d:dd:67:9f:1a:f4:90:04:bc:
ed:ad:4e:88:5f:68:2f:d8:dc:26:90:a9:c9:82:19:47:14:36:
c6:4d:de:c8:f0:83:88:9d:66:71:86:13:38:37:c4:8e:b9:f5:
4f:21:ab:f1:d5:4a:6b:ab:a5:e1:e8:be:5d:66:8c:ab:7f:45:
28:48:05:09:cb:c0:1c:dd:19:7b:ae:7b:4f:2a:a0:69:a2:3c:
cb:ba:02:36:e4:49:94:1f:7c:d0:dc:17:12:29:7e:5f:e1:08:
18:e4:bb:3b:ea:f8:89:28:6a:2c:f0:64:9c:47:d0:78:97:04:
ab:55:dc:90:7e:85:6d:6c:4e:8a:15:36:8e:0a:54:8e:71:3d:
a3:01:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:37 2025 by rpki-client