Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier: iyaeCS6ZTe4qx+3bEyR8uZh8ZDO6o/I+NN8La3oOkkM=
Subject key identifier: 57:44:9A:D6:09:1E:00:4D:2E:0E:6E:F1:00:EE:FD:EE:C0:F7:1F:41
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 0199FEB476366EBCDC43F2025B84DF42FA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 23:01:03 +0000
Manifest this update: Sun 19 Oct 2025 23:01:03 +0000
Manifest next update: Mon 20 Oct 2025 23:01:03 +0000
Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: yvGInx8mAg0N+mLbvec9pX8fMAK2XYoG1j/TzrVk6hQ=)
2: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (hash: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:76:36:6e:bc:dc:43:f2:02:5b:84:df:42:fa:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Oct 19 23:01:03 2025 GMT
Not After : Oct 20 23:01:03 2025 GMT
Subject: CN=57449ad6091e004d2e0e6ef100eefdeec0f71f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:8c:55:6c:bf:5f:ed:3b:3e:1c:56:66:2a:
a8:a1:af:02:6d:5f:55:ce:98:15:af:09:65:64:21:
27:17:4b:17:33:1c:69:99:2d:5b:eb:4d:24:e8:b9:
ac:0c:2e:73:43:d4:a9:7f:a7:4f:2e:b9:e4:eb:88:
24:6c:21:05:74:ed:03:e2:fd:b4:4d:6f:98:c2:75:
24:33:a3:70:8e:c9:8a:2d:5b:f2:8d:9b:5a:ba:95:
49:58:6e:ce:cb:8d:5b:ba:0c:53:34:43:54:c6:ef:
26:b0:64:8f:22:b3:b3:90:93:36:4d:60:1b:41:44:
00:ee:ac:ef:4f:3e:6e:ff:43:83:c9:92:d6:cd:f0:
33:b9:22:f7:9b:cd:d4:68:7e:66:27:f0:e8:28:8e:
73:e3:4d:82:1c:0a:2c:20:32:f7:38:d6:f8:5b:6b:
f1:45:a5:cf:d0:64:45:ab:90:b4:7b:68:69:84:ef:
a6:13:1f:10:00:bd:7b:7f:3a:9b:ea:a9:1a:06:5a:
3d:6d:3d:a0:eb:2c:75:4e:d9:49:bd:87:62:83:a5:
9c:7f:93:4d:6b:59:57:db:26:ec:28:16:eb:5c:b4:
04:1a:35:37:e3:7c:55:95:eb:30:1e:d7:68:15:9b:
98:5a:98:f3:e6:b8:5c:f4:f4:1a:aa:b8:37:f6:a3:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:44:9A:D6:09:1E:00:4D:2E:0E:6E:F1:00:EE:FD:EE:C0:F7:1F:41
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0c:e5:69:e8:a5:47:3e:fd:8e:f7:39:06:5f:40:d9:80:84:
5d:12:65:de:51:9f:d9:4e:f1:39:f9:d3:12:e1:1f:a8:ec:e9:
3f:3c:3d:dc:f1:60:0a:54:e7:32:ce:b7:45:10:7e:ab:20:eb:
ba:b8:a4:c1:7f:19:a8:5f:62:30:e3:52:f3:c1:4e:93:3c:83:
8e:d7:54:fc:e4:4a:1f:08:e6:5f:49:76:60:7d:82:6b:b6:5a:
1f:24:88:4d:d7:11:99:ca:ba:cd:74:ac:08:7d:b3:7b:43:e3:
3c:97:34:b9:9d:e9:e3:67:cb:06:fe:dc:ac:a8:ba:16:7d:ca:
35:60:89:e5:43:31:da:52:5e:ce:a1:87:b0:11:0f:e2:3f:e0:
82:c5:fc:5f:1b:cc:81:98:cc:38:aa:45:84:b5:8f:dd:71:46:
18:33:71:27:a0:6c:11:f2:04:65:94:63:f1:fd:17:b5:7f:33:
32:ec:d0:f9:4f:3b:61:31:cd:2b:eb:6b:a4:b3:00:a5:98:98:
1a:f3:6c:37:71:52:3a:9d:7d:7a:be:2c:49:f1:c1:87:1c:11:
92:b4:2a:73:a3:7e:14:6a:b9:a9:7f:91:6e:4a:58:9c:67:73:
ef:25:17:2a:4a:bb:f2:a6:ee:b1:bd:18:d3:47:62:66:c9:de:
55:04:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:30 2025 by rpki-client