Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: 2N85DN1xN7B+kvaJo+MzNnkQQivvQKreCcsfP0SrTeE=
Subject key identifier: 97:A3:63:F1:9B:B9:E0:E6:CD:32:74:E3:87:66:EA:B2:58:44:82:89
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 0199FC58F6476BE6FA155BE5F9808135F032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 02CD
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: tB+AyVIpdmu52YgxCJn+ccKDOd8OBJ22zBKacuzr/0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f6:47:6b:e6:fa:15:5b:e5:f9:80:81:35:f0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=97a363f19bb9e0e6cd3274e38766eab258448289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:82:41:d1:82:84:cc:1d:ae:fd:06:68:02:41:
8f:71:fc:4c:1f:65:46:29:11:5f:cc:00:aa:54:32:
ca:58:b2:64:aa:69:16:4c:82:eb:92:cd:09:4d:58:
65:3b:a9:62:2b:d8:f8:5c:31:1a:af:19:b7:b3:eb:
55:3c:6d:72:b5:49:a0:81:a0:22:0a:0f:cf:fc:24:
86:7d:70:ca:cc:9b:22:38:ad:d6:b5:eb:6f:03:76:
28:3e:c4:ba:9c:e7:13:a2:39:bd:c0:0f:70:80:54:
a6:09:91:e7:6b:04:bf:a4:62:48:32:76:74:4d:e3:
10:53:80:fd:24:65:b0:2b:7d:11:fa:b2:8c:32:1e:
aa:f9:7b:04:64:9e:bc:23:d0:94:05:67:f5:a3:2c:
e4:76:83:77:c6:14:8c:c3:17:21:e6:b8:97:79:1e:
55:82:a7:63:23:66:b1:db:0b:a6:4a:61:41:f3:59:
5c:42:8f:c2:91:f0:6c:1e:0d:d1:8a:40:f8:73:9a:
71:83:e5:51:30:6e:ce:de:0b:ba:36:7c:8f:37:46:
45:e5:fd:0e:e7:b3:7e:3c:7f:04:87:5c:50:f5:53:
0f:2b:31:56:42:28:de:fd:92:c2:16:b5:00:fe:f0:
76:94:00:c8:4b:84:fb:5c:5d:11:70:44:bc:75:b2:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:63:F1:9B:B9:E0:E6:CD:32:74:E3:87:66:EA:B2:58:44:82:89
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d9:13:39:4f:ac:82:e2:6e:99:06:aa:79:d7:c7:26:fb:93:
c7:20:61:97:4d:18:c9:76:76:e1:99:b2:ae:41:ca:9e:d6:91:
a9:c7:f9:3a:79:2e:98:a6:8b:6f:62:00:5b:60:3f:c8:82:59:
7c:76:92:1f:aa:02:64:b4:9a:2a:3c:56:2d:91:fa:ac:5a:48:
be:f3:c1:02:c3:db:2d:4d:09:3e:e5:c0:ff:eb:95:1c:4c:27:
cc:1a:4c:88:b4:63:cc:8b:2c:fd:5f:5e:71:ec:09:ca:13:41:
0a:5a:36:fa:3c:86:b0:54:32:69:66:0b:36:d5:0d:a7:ad:3f:
52:d5:f4:42:7f:e6:24:30:dd:24:59:f8:9a:e9:80:23:50:f0:
4f:63:30:6f:a0:79:8f:9d:75:52:3c:d7:97:70:08:3e:c6:3b:
fc:06:df:ee:6f:7c:2e:23:17:21:8d:a4:7c:c6:1d:04:bd:9c:
18:49:d8:2e:08:d2:34:01:85:78:e6:19:5b:63:a3:a4:47:0a:
32:e9:55:2e:87:d9:f6:8f:6e:8f:63:3d:ea:d2:a4:ab:8e:47:
ff:6a:91:05:c1:6d:82:a7:a7:4b:c0:f3:22:1d:86:11:30:02:
17:64:eb:53:f3:11:96:88:4b:da:5d:81:44:8d:4d:63:34:3f:
63:50:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:24 2025 by rpki-client