Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: nOa+AOGvQkf5K+gsMEub4yoBRl9rcMqsNwn/0ncFElU=
Subject key identifier: 0D:A7:DC:F4:3E:30:33:A5:9C:FD:B2:48:D7:DD:31:35:41:7E:09:2C
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 0198D473862737A2A83BA24E2D0E60FD1D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:17 +0000
Manifest this update: Sat 23 Aug 2025 01:03:17 +0000
Manifest next update: Sun 24 Aug 2025 01:03:17 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: TI6uGaZF22RLx3Xha93YbRpm3L0ldwhMxXQNGQNwP5s=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:86:27:37:a2:a8:3b:a2:4e:2d:0e:60:fd:1d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Aug 23 01:03:17 2025 GMT
Not After : Aug 24 01:03:17 2025 GMT
Subject: CN=0da7dcf43e3033a59cfdb248d7dd3135417e092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:4b:1e:c1:6b:f1:be:2c:16:ce:c1:dd:dc:
78:2a:96:6d:79:bf:41:3d:34:d9:b0:b0:3c:1f:a8:
49:f4:fe:ab:db:33:38:83:05:99:6e:dd:af:ac:35:
29:13:53:d9:39:d6:cd:e0:2b:b3:96:e7:36:1e:ce:
1b:7e:b9:d4:f2:45:62:4d:7f:85:6a:63:1a:0f:b9:
b7:fe:fc:4a:be:40:4e:13:a1:2f:bb:1f:18:d7:b9:
86:c8:0a:03:0d:1c:e0:06:b0:75:23:aa:2a:36:a9:
16:73:67:6a:dd:2d:a6:e5:c2:42:07:b9:a6:34:ca:
45:58:fb:07:f1:46:32:a7:4f:cb:8c:bd:1c:ab:af:
c5:7e:ab:46:df:5b:65:3c:8a:16:b1:ca:88:cf:1e:
50:8d:0c:be:c6:e0:58:ae:03:96:ff:8e:19:26:9a:
c6:ba:91:9f:ff:75:de:fd:b6:17:51:8d:e6:92:6f:
0c:5c:25:16:69:9d:5f:fe:1b:3c:4b:07:67:53:c4:
20:de:1c:fe:c1:65:94:ff:26:8c:fb:2a:a3:2b:f6:
8b:d6:f4:95:8d:8d:a0:49:b8:7f:b2:6d:1e:19:ae:
00:ac:47:ad:d1:f4:4c:fb:ea:6e:b6:9f:9a:94:ec:
23:cc:3d:d8:13:d3:c6:da:8b:11:98:69:d0:8e:b1:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:DC:F4:3E:30:33:A5:9C:FD:B2:48:D7:DD:31:35:41:7E:09:2C
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:96:fe:20:b3:e2:83:5a:02:9f:02:a6:43:d6:05:3d:17:d4:
25:6d:06:bf:32:ab:a2:7f:e0:e2:49:3e:ea:15:df:13:fe:07:
10:03:8f:54:06:9c:e2:58:40:a9:fa:94:0e:28:f1:87:d7:db:
42:df:0e:6d:2b:36:b3:86:c4:bf:2e:a7:64:2c:0c:b3:25:51:
97:71:90:32:22:77:78:0d:7c:46:fc:62:b0:dd:c5:d1:3e:13:
b9:6b:d5:fe:d1:00:a4:b1:a0:6f:e3:42:64:89:59:ad:c5:b9:
61:1a:46:e9:a5:f0:8d:22:74:f7:81:fe:f4:83:1e:83:c5:0b:
da:f3:ca:17:40:97:97:67:dc:be:dc:99:af:84:98:be:d6:d5:
75:30:6b:1f:84:75:9c:a4:af:a4:d5:53:e4:16:dd:1e:59:14:
7e:db:03:ed:17:8b:b3:1c:45:8d:8a:9d:3d:48:77:83:2d:b5:
02:4f:3e:ff:65:2a:d3:59:85:67:03:9c:61:3e:60:e6:49:a0:
ce:aa:09:54:b1:79:04:aa:f1:16:6b:0c:84:63:78:1c:02:5f:
67:bf:01:5b:30:b9:af:d9:f3:6e:b7:e2:1e:db:24:18:df:1f:
07:4b:f6:72:56:c0:f4:4f:40:29:0f:a1:8d:7c:d7:8c:56:8e:
8d:77:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:55 2025 by rpki-client