Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: FjOcQqnsLHdLnRcNQgiHWJ4PmlqHAGrnI2tjvmd5uJs=
Subject key identifier: 5C:55:23:62:69:78:AD:30:D8:09:27:44:11:1D:5D:40:F4:64:27:B8
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 0198D4DFD065BCB670BBBD2726FFEF013ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 0234
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: 9oIpNPmD9tx7cFbRR/U838CTOPhieTyt6hgP+xYwrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d0:65:bc:b6:70:bb:bd:27:26:ff:ef:01:3e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=5c5523626978ad30d8092744111d5d40f46427b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:c9:a5:22:c8:3f:db:3c:06:35:41:19:a6:
21:97:3d:41:f0:2f:1a:1d:a7:bf:c8:58:ae:bc:c3:
02:78:b7:1e:8f:fd:ef:7c:9d:5e:61:37:3a:1c:b2:
75:ee:47:5c:fa:61:28:1b:ed:66:f6:82:e6:07:d0:
04:7a:92:5a:46:c8:f6:ac:11:47:e2:ee:82:e5:df:
26:32:fd:8f:55:8c:97:a3:b8:e0:47:fe:4e:43:44:
15:a0:88:bb:bf:3e:8b:22:89:ef:d9:32:2d:ee:a2:
6b:2a:0b:22:3c:71:b7:7d:3c:4b:7d:99:9d:d9:c1:
4f:db:73:60:7a:aa:37:e5:22:ac:31:b8:6a:ca:3f:
b3:ef:ed:33:3a:67:ce:11:f5:8e:4c:66:e2:30:54:
87:2a:66:65:78:e8:11:8c:6d:05:ef:e8:ce:32:dc:
8e:f1:93:a7:89:df:c0:0c:56:2c:99:46:8c:e1:42:
57:42:23:cf:41:1f:28:a6:08:b5:7c:b3:8d:a3:89:
4e:1b:00:4a:01:30:5c:bb:8f:2c:8e:ca:7f:34:a8:
00:8d:25:9f:e3:b5:ed:d2:4b:5e:39:3c:48:76:dd:
e7:9a:f1:ee:a6:b7:95:9f:68:03:66:02:4e:56:4a:
01:37:a9:db:05:2d:82:f3:e2:fd:77:36:b5:59:93:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:55:23:62:69:78:AD:30:D8:09:27:44:11:1D:5D:40:F4:64:27:B8
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:76:4c:66:ec:61:2a:c8:6d:15:a0:2d:ed:b1:9e:8a:04:44:
04:e3:bf:ed:bc:73:b7:a4:3c:fa:8a:d1:c1:b5:46:08:df:38:
4c:69:71:85:58:4d:38:ec:04:04:7c:4d:53:7b:ba:e8:31:a4:
94:83:d1:4c:56:44:b4:cf:81:be:a0:70:22:5a:33:38:dc:64:
9b:8c:76:06:a0:48:7d:54:4f:5a:b8:03:99:d8:af:b4:2c:88:
dd:d7:c8:04:25:0c:99:d1:ff:ad:3b:e6:c7:91:54:52:98:34:
32:05:89:65:96:8e:79:4a:be:57:f8:54:6e:5d:93:9f:ac:cd:
34:4e:34:12:57:d2:40:ae:c0:39:b9:f2:98:2e:af:ec:d7:e3:
2b:cf:88:1f:c9:08:09:48:c4:b9:dd:c2:f9:31:ba:ea:92:f0:
2c:23:43:4a:ad:02:51:41:39:c6:bf:88:9d:73:99:15:00:c4:
aa:51:08:2c:fa:3d:02:ba:94:99:52:7b:b0:33:1e:82:a5:71:
9f:ad:6d:4c:c2:19:09:4b:42:58:78:f2:13:2a:13:c6:af:10:
37:eb:16:60:db:ed:19:e2:5c:5e:22:72:f0:f7:bd:01:53:13:
28:c4:93:6d:8f:b9:a1:21:c0:e5:20:93:bc:74:9c:02:34:85:
80:70:1a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:43 2025 by rpki-client