Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: 0L/qiC0AEdnU+pgJNSNkUA/o0Da2KqrD/MqA10VhxRY=
Subject key identifier: 8A:70:6C:52:23:B9:40:E2:C4:B8:18:E1:55:CD:F2:09:DC:F9:56:53
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 0196B9A476C4C87D09E37CF9AD1A76E52B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 10:01:25 +0000
Manifest this update: Sat 10 May 2025 10:01:25 +0000
Manifest next update: Sun 11 May 2025 10:01:25 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: +Hmor+r1fiYok7bDGNk4+hLzZLNhptjKxU3hNZ6cH7U=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:76:c4:c8:7d:09:e3:7c:f9:ad:1a:76:e5:2b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: May 10 10:01:25 2025 GMT
Not After : May 11 10:01:25 2025 GMT
Subject: CN=8a706c5223b940e2c4b818e155cdf209dcf95653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:b2:97:61:f8:36:95:80:48:ad:65:d5:dc:
09:a2:c8:a6:07:f4:57:ec:38:70:78:97:8e:3d:91:
c3:0d:5b:be:c3:f3:7c:c6:5e:59:7b:70:2b:dc:69:
23:93:18:99:9e:c6:ad:1c:4b:57:95:3f:b1:c5:3c:
0d:56:a5:b0:2f:8a:b2:ac:40:34:78:a0:e0:54:d8:
5f:5f:69:dc:63:9e:be:aa:25:8c:ee:5f:11:d9:e1:
4d:32:df:0a:df:eb:16:e6:31:64:f0:4a:b6:5b:02:
8b:aa:93:1f:b6:78:00:d9:8a:10:ae:a6:2c:46:c9:
10:ea:84:d8:e2:87:29:26:5a:37:6a:c4:6b:85:23:
45:ca:39:51:1c:aa:53:8f:9f:db:7d:f1:35:a8:39:
fa:9f:b5:84:f3:51:72:fd:e3:ff:d9:a7:93:8f:bb:
04:04:67:e6:9c:0e:dd:c9:94:3f:93:eb:be:62:7a:
85:0b:f1:ed:b2:c5:8b:1f:a4:a6:5d:39:49:1d:c9:
50:94:30:a5:ae:25:3a:2e:52:96:0d:56:12:96:ff:
04:79:23:78:84:fe:2f:d1:a4:94:25:c2:b7:95:93:
1b:4f:de:a6:29:7b:0b:4e:e8:cc:b5:d8:48:0f:cb:
7b:94:97:7d:fa:e2:b3:54:b4:48:c4:80:96:7b:10:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:70:6C:52:23:B9:40:E2:C4:B8:18:E1:55:CD:F2:09:DC:F9:56:53
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:13:ab:18:42:b0:f7:9a:a5:c2:f7:a2:04:6d:12:f6:df:4f:
00:94:08:83:b1:8c:30:b3:f9:13:48:52:45:cb:50:75:ed:3f:
a3:19:d8:2f:42:33:40:52:7d:7b:ac:8d:ae:e1:ae:d8:aa:ad:
13:ef:0f:2b:7b:ab:07:65:79:a9:79:e0:a0:f0:dc:72:d7:dc:
68:9f:81:be:7b:69:c5:c8:d7:a3:6e:b7:8b:da:ab:e1:f0:da:
b2:e1:a6:4b:ae:bf:4a:33:72:3f:95:2b:7f:8b:21:46:ca:2d:
7f:46:de:52:f7:d8:2b:db:25:59:c1:dd:df:4d:59:af:28:8b:
e7:64:22:65:fc:56:ed:d2:e9:93:10:78:e2:4f:c7:0a:0b:bf:
8e:b4:c7:88:2b:b1:ea:41:90:7a:07:7c:28:0a:e8:a2:c2:a7:
be:cf:ab:2f:8a:7c:35:1a:50:49:39:a7:39:bc:94:d4:89:24:
10:6e:db:83:50:b3:b6:33:cf:4b:41:9d:92:a9:64:67:07:85:
98:62:cf:82:ac:ff:48:40:97:03:40:f2:7d:27:96:58:61:24:
b2:ec:27:1d:3d:68:98:be:e7:6c:01:55:ad:8b:02:1d:cb:36:
d9:09:c7:1e:59:16:c0:b2:db:2e:2f:e6:d6:33:73:46:cf:b9:
35:fa:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:05:15 2025 by rpki-client