Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: JQ0NoaxehW7jLpP2iFyeT9TXwA6TjjnDSBfYdh6C9Ck=
Subject key identifier: FA:1D:38:A3:B1:6F:48:12:23:1F:7B:95:47:CB:E2:DF:5C:8E:1E:B7
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 0197BA0FBD48F32BF9080916A60619895798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 0DA8
Signing time: Sun 29 Jun 2025 05:01:22 +0000
Manifest this update: Sun 29 Jun 2025 05:01:22 +0000
Manifest next update: Mon 30 Jun 2025 05:01:22 +0000
Files and hashes: 1: Om-V-EmCFMGXb43s9fZ-DXbAF08.roa (hash: S2SC8pR//ywuBG9ZV7ZWtalhcLPclQLz9j+fN0Z1bo4=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: BCoxNUJ2E4qgnShp0jvLRP4z41LzkbceUXWtQoa6X+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:bd:48:f3:2b:f9:08:09:16:a6:06:19:89:57:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Jun 29 05:01:22 2025 GMT
Not After : Jun 30 05:01:22 2025 GMT
Subject: CN=fa1d38a3b16f4812231f7b9547cbe2df5c8e1eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:54:29:13:1d:32:4f:7f:d8:42:fc:f9:cd:
a4:9a:8f:c4:30:8e:53:02:de:b6:7b:eb:a1:a1:1a:
40:58:29:74:82:89:83:e6:53:c5:b5:32:4b:0d:ee:
06:f1:c5:eb:77:2f:99:25:f1:4d:d6:ff:0a:32:59:
7b:94:99:5b:dd:fd:d9:7b:ea:21:b1:b9:7a:bd:07:
f0:7f:b9:f7:4d:5e:ff:65:2a:95:05:02:30:1b:e0:
9b:81:f6:e1:73:e6:c3:e1:7e:51:4f:7e:73:d1:b0:
5b:34:59:d6:33:22:01:c3:fd:78:d9:a9:56:92:c6:
3d:45:8f:70:26:23:04:77:db:ec:76:ee:0f:50:e2:
2f:c0:6e:2e:d0:49:6b:3c:7a:61:c4:fc:05:19:f6:
6d:b5:77:2f:43:c0:4d:46:64:a4:8c:a9:5b:02:7a:
f0:c6:4c:5c:5b:78:79:29:3c:5d:4c:c9:10:f1:16:
fb:d4:b5:88:f2:ed:2b:9c:08:70:04:a3:61:dd:11:
64:58:15:ee:09:43:73:ce:a5:cc:c7:f9:ab:12:f7:
d5:a8:e7:ee:41:ec:8b:1e:7d:9e:ce:de:89:5e:44:
30:f2:49:65:ea:f7:82:f6:26:26:92:33:e7:ae:2d:
6e:c7:ee:a1:cb:b2:d2:ed:59:91:f2:55:c6:64:87:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:38:A3:B1:6F:48:12:23:1F:7B:95:47:CB:E2:DF:5C:8E:1E:B7
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c4:17:6b:d7:c8:48:46:6a:b8:a2:97:bd:03:0c:64:b2:c2:
1f:16:d7:e8:ad:7d:ac:e0:49:d0:95:6e:e7:a3:a2:cf:87:0d:
b5:98:96:7a:be:c6:ea:44:f6:55:80:72:2f:2a:cf:f0:34:2b:
f6:00:6d:b7:1c:96:43:68:34:16:f7:39:95:43:c6:6c:1d:89:
f5:8e:f4:61:6b:64:60:e3:96:6d:de:f3:64:52:38:72:c1:e4:
c8:13:aa:8f:be:4e:13:43:c7:87:74:5e:f2:67:8e:de:14:e9:
3a:84:6e:f2:d8:08:1e:cb:57:38:ae:f6:48:6c:cd:bb:de:62:
af:87:23:1f:35:52:2b:78:ad:30:ac:6f:02:6f:0c:f4:97:1a:
c7:87:31:73:a5:67:47:76:fa:85:fa:d4:81:a0:f3:66:32:d2:
b5:81:b7:df:83:b5:4e:9b:c5:e7:3b:7d:96:2a:50:6b:37:82:
d2:04:7c:ce:83:86:51:f7:8f:86:c5:39:dc:13:56:26:fb:42:
ba:b6:d9:f7:a8:00:bc:7e:19:c4:48:e8:a9:be:d4:e9:de:f1:
9e:39:0f:b5:ac:58:81:f9:b2:1e:be:00:54:95:98:4f:b5:b6:
d6:03:95:81:e2:f5:cc:21:95:7e:9d:7e:2b:58:ad:e1:28:ab:
dd:e8:34:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:13:07 2025 by rpki-client