Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
File: OM0kYRn4VtiXOodwvsOf_EejydY.mft (raw, json)
Hash identifier: J6InwgXMPCt36TuhLYjV6roamgnwrSHlOAeGz8sDoKE=
Subject key identifier: 30:2B:B0:59:C3:29:AA:E1:81:F7:17:90:9C:2C:36:62:4A:06:FF:6A
Authority key identifier: 38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
Certificate issuer: /CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Certificate serial: 0199FBEAD6E4528E1F19246B2B53B69002B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: OM0kYRn4VtiXOodwvsOf_EejydY.crl (hash: xDekyXFOM8YARt6e+rZ6luyK8eEKkak6pkIvLEIndzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d6:e4:52:8e:1f:19:24:6b:2b:53:b6:90:02:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=302bb059c329aae181f717909c2c36624a06ff6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:a3:08:ef:51:3d:eb:88:ab:02:8a:3f:18:
50:0b:4c:38:17:71:e0:41:e6:e5:e0:27:df:55:4e:
dd:a4:88:4b:41:b6:3c:8b:80:db:69:83:17:c6:65:
e3:8e:6c:26:81:ec:24:fd:23:f6:af:fa:f5:66:b0:
5a:68:92:9e:ec:1b:31:7e:e6:a3:06:e8:d0:9c:7b:
69:75:81:8a:e1:80:11:4f:f4:05:f4:49:53:24:4c:
6f:39:5c:d0:d7:a6:3e:c1:7f:db:8b:d3:73:e5:cf:
eb:5d:b7:09:6c:dc:c6:20:59:a5:69:ee:29:aa:b4:
4e:5e:8c:d7:29:16:64:50:05:4c:6f:7f:46:90:f0:
d4:b4:fb:cb:11:94:7a:af:7f:7d:81:64:c7:45:6f:
70:5f:40:1e:34:6c:f3:6e:db:74:5d:54:f3:0c:c0:
52:ba:76:3a:07:84:f6:99:e3:22:5c:b7:7d:ab:54:
46:78:e3:32:54:24:68:9b:80:1c:db:fc:5b:61:ce:
38:75:cd:40:26:1e:51:01:9f:7d:4d:9b:36:94:c9:
e9:85:20:d0:ba:c0:ba:79:b5:52:5a:3e:56:22:13:
58:f4:04:d8:c7:81:a9:49:04:b8:b1:78:62:11:52:
79:88:ab:2e:81:9e:83:e1:da:50:9d:d1:b2:13:82:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:B0:59:C3:29:AA:E1:81:F7:17:90:9C:2C:36:62:4A:06:FF:6A
X509v3 Authority Key Identifier:
keyid:38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:57:2a:05:ba:75:32:f1:06:ab:2a:ff:e0:c7:ab:de:c7:78:
7a:c3:f2:03:c8:ab:80:39:85:b6:98:ca:f2:bc:1c:4e:57:98:
23:89:03:cb:f8:30:a3:42:26:92:2b:e1:3f:d0:b5:3b:49:55:
83:a5:41:4b:b1:06:ff:06:16:d1:0f:99:79:e7:fd:44:cf:d4:
ec:e7:d4:24:3c:be:8e:f5:c8:a4:df:51:6e:e3:4c:ca:c1:0f:
27:f0:65:91:97:71:d4:99:04:df:59:17:73:89:45:78:d2:34:
38:97:db:66:01:4f:ee:5a:f2:bf:4b:a6:36:e3:0e:a7:b4:64:
40:c2:fb:d1:07:43:b5:d4:93:1a:50:3f:86:c5:b8:5a:b6:f5:
c3:d0:f8:9d:b7:34:a6:a6:f6:ba:09:90:60:98:82:53:c5:79:
40:5a:72:f5:79:e1:7a:b6:b0:52:4c:de:c2:b3:c1:81:b7:90:
e3:87:cb:80:7d:26:14:2e:52:4c:da:85:fe:f1:d6:53:19:6e:
05:93:4d:80:61:1a:72:99:25:25:71:ec:70:6b:02:5e:cf:3b:
da:50:62:62:ab:ad:19:ef:79:5a:17:2d:b8:67:2f:36:45:e8:
f5:a0:0c:1d:65:db:29:21:d5:7a:75:42:8e:a6:77:27:91:8e:
1e:31:2d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tbkUo4fGSRrK1O2kAKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Y2QyNDYxMTlmODU2ZDg5NzNhODc3MGJlYzM5ZmZjNDdh
M2M5ZDYwHhcNMjUxMDE5MTAwMTM1WhcNMjUxMDIwMTAwMTM1WjAzMTEwLwYDVQQD
EygzMDJiYjA1OWMzMjlhYWUxODFmNzE3OTA5YzJjMzY2MjRhMDZmZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLWjCO9RPeuIqwKKPxhQC0w4F3Hg
Qebl4CffVU7dpIhLQbY8i4DbaYMXxmXjjmwmgewk/SP2r/r1ZrBaaJKe7Bsxfuaj
BujQnHtpdYGK4YART/QF9ElTJExvOVzQ16Y+wX/bi9Nz5c/rXbcJbNzGIFmlae4p
qrROXozXKRZkUAVMb39GkPDUtPvLEZR6r399gWTHRW9wX0AeNGzzbtt0XVTzDMBS
unY6B4T2meMiXLd9q1RGeOMyVCRom4Ac2/xbYc44dc1AJh5RAZ99TZs2lMnphSDQ
usC6ebVSWj5WIhNY9ATYx4GpSQS4sXhiEVJ5iKsugZ6D4dpQndGyE4IPlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDArsFnDKarhgfcXkJwsNmJKBv9qMB8GA1UdIwQY
MBaAFDjNJGEZ+FbYlzqHcL7Dn/xHo8nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NjU5NWUtZTM2YS00MDUxLTg0NTMt
OGZjZDUzZDQzMWQ1LzEvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85NjU5NWUtZTM2YS00MDUxLTg0NTMtOGZjZDUzZDQzMWQ1
LzEvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVcqBbp1
MvEGqyr/4Mer3sd4esPyA8irgDmFtpjK8rwcTleYI4kDy/gwo0ImkivhP9C1O0lV
g6VBS7EG/wYW0Q+Zeef9RM/U7OfUJDy+jvXIpN9RbuNMysEPJ/BlkZdx1JkE31kX
c4lFeNI0OJfbZgFP7lryv0umNuMOp7RkQML70QdDtdSTGlA/hsW4Wrb1w9D4nbc0
pqb2ugmQYJiCU8V5QFpy9XnherawUkzewrPBgbeQ44fLgH0mFC5STNqF/vHWUxlu
BZNNgGEacpklJXHscGsCXs872lBiYqutGe95WhctuGcvNkXo9aAMHWXbKSHVenVC
jqZ3J5GOHjEt+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:21 2025 by rpki-client