Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: RpnqUfoMYt6i0HJf/VJMm5j6zml6RnFdSzjUo37zLow=
Subject key identifier: 42:56:76:8A:9C:A4:C2:83:E2:BE:A9:63:D1:6B:6C:1A:AA:5F:DD:A1
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 0199FDD99535F87340E816BBB2AECF263522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:58 +0000
Manifest this update: Sun 19 Oct 2025 19:01:58 +0000
Manifest next update: Mon 20 Oct 2025 19:01:58 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: igvu4cMhtY1dU1OEH+rkpBIyFl9ggqtXhwitXssXf+I=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:95:35:f8:73:40:e8:16:bb:b2:ae:cf:26:35:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Oct 19 19:01:58 2025 GMT
Not After : Oct 20 19:01:58 2025 GMT
Subject: CN=4256768a9ca4c283e2bea963d16b6c1aaa5fdda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:7b:0b:6d:76:2f:f0:69:ff:5b:59:9e:ce:
d4:51:81:f6:ee:f6:85:7a:b5:8c:63:59:01:5a:09:
f9:a5:3f:0a:3a:f1:95:f1:95:13:fb:29:4b:25:32:
9e:f4:12:4f:b8:98:b6:7d:5b:55:c3:de:b0:f0:c5:
d6:4d:7d:a7:8c:bd:0d:56:b7:5d:b4:c6:c4:be:29:
5f:35:18:78:88:db:1a:20:93:1b:d3:4a:05:0d:f7:
da:de:9f:4f:31:b6:10:9a:fd:f8:0b:1b:70:f1:80:
ca:84:42:89:1b:9e:82:b4:7e:b8:2b:36:56:e2:e8:
f5:99:79:e7:59:2f:95:c3:df:b6:68:e9:05:a8:35:
d0:8f:23:91:7f:26:10:82:85:27:29:24:9b:17:74:
c2:de:a3:6e:73:ff:16:31:16:e3:84:8f:46:91:b7:
50:3c:0e:c6:9c:3d:7b:68:0e:6b:25:5a:f4:9c:77:
bd:81:04:70:0a:e8:f6:25:97:78:54:bc:ae:c4:f1:
42:df:4f:67:c6:3d:92:04:3a:ab:65:0c:25:a7:7e:
da:ee:a6:6a:c2:a2:ca:35:2e:13:a1:29:c4:cf:d8:
a2:7b:54:0a:1b:4d:43:db:0d:15:5e:10:58:a9:85:
b4:d6:cd:9f:4e:54:c2:1a:85:35:65:1b:cb:69:21:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:56:76:8A:9C:A4:C2:83:E2:BE:A9:63:D1:6B:6C:1A:AA:5F:DD:A1
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ba:80:2e:1f:99:6f:67:71:e8:38:ee:e8:e1:4e:bb:4a:62:
0d:f1:49:17:ef:a0:87:80:b4:77:b3:88:f0:f5:de:22:20:b7:
95:97:5c:44:0c:3a:7e:99:e9:57:46:4f:4c:f4:20:50:c4:e9:
a5:aa:c1:e9:65:e6:2f:0f:fc:1e:31:c2:0b:11:5b:9d:08:bc:
03:16:f4:17:9d:e0:b5:88:b5:59:9c:bb:81:00:81:fc:ce:24:
f3:35:45:ba:c7:09:9c:83:77:d4:af:14:c3:01:a1:7c:54:c1:
5c:c1:f3:34:f1:93:37:ad:06:f7:09:d7:3e:b8:bd:ed:19:78:
65:9a:8d:04:2a:48:11:fe:51:ad:13:23:48:39:34:03:7f:b3:
1e:2c:d8:8a:af:e7:9d:dd:63:12:33:6d:7f:a4:aa:09:79:91:
9b:4b:49:71:5b:31:55:a5:ce:f7:ba:bf:1a:ab:8d:04:3a:0b:
c1:3d:39:b9:a3:62:aa:4e:8d:97:9d:c2:56:a0:72:9e:6d:df:
c7:6d:25:90:7c:4b:31:89:90:ca:b1:c9:ec:b9:37:4e:c8:09:
96:8a:2c:39:b4:06:25:bf:db:a1:4a:35:ec:5d:08:b7:7c:58:
c6:be:31:c8:1a:f0:c1:0d:54:b9:7f:7c:8f:3b:96:d7:ab:2e:
cd:2b:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:17 2025 by rpki-client