Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: 6g7hlwNSToAm1Y9Ptl0PbvXfycpgEKsBDWfqwM55m5g=
Subject key identifier: B8:BA:3D:F1:DA:83:DF:53:DC:65:F0:AC:7B:B6:54:C5:FA:F6:00:C0
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 0199FF597D4A65EEA61A2FD9B682AB039568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 0ED5
Signing time: Mon 20 Oct 2025 02:01:18 +0000
Manifest this update: Mon 20 Oct 2025 02:01:18 +0000
Manifest next update: Tue 21 Oct 2025 02:01:18 +0000
Files and hashes: 1: Om-V-EmCFMGXb43s9fZ-DXbAF08.roa (hash: S2SC8pR//ywuBG9ZV7ZWtalhcLPclQLz9j+fN0Z1bo4=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: dKIAFICJEHi3z+/KLwkSMkr2felCwu6FXLMwA1Da3VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7d:4a:65:ee:a6:1a:2f:d9:b6:82:ab:03:95:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Oct 20 02:01:18 2025 GMT
Not After : Oct 21 02:01:18 2025 GMT
Subject: CN=b8ba3df1da83df53dc65f0ac7bb654c5faf600c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:36:ab:4e:03:ca:17:bf:6e:97:e3:2f:14:
95:18:da:0d:93:14:9b:3a:e2:38:7a:58:a7:f2:fd:
03:cf:29:26:3b:2c:61:b7:64:e7:c1:4d:9d:ae:62:
e7:dc:f7:4c:ca:6b:cb:5e:6b:11:88:32:99:2c:d9:
3f:b0:c8:b4:32:42:03:57:70:d0:04:5d:af:11:69:
6f:61:f2:9b:36:af:78:21:fa:b7:98:c6:9b:ee:7f:
43:cb:81:41:30:26:3a:91:e1:12:5a:b6:ad:cf:cc:
8a:14:96:7b:78:92:b3:01:b9:f0:59:e6:07:96:94:
21:af:e7:27:2f:d0:f2:1a:a4:1f:f5:ce:0b:90:b5:
3e:1f:41:a6:98:30:6a:af:02:dd:92:2a:e8:3a:17:
e7:6d:35:cd:19:30:2d:84:2b:d1:c6:a6:af:ea:b0:
f0:3f:df:a9:90:67:21:bf:15:e5:7e:01:26:ce:70:
b5:3a:11:70:d4:2a:7c:df:65:40:bd:4e:a5:4c:85:
81:85:ba:8b:8c:68:d7:dc:a8:cf:d5:08:61:a3:a0:
70:a7:86:96:b8:d3:6e:73:8e:1d:44:9c:40:ec:ce:
47:3f:80:33:29:8c:a1:8d:67:7e:09:5d:a4:fd:f4:
91:41:6d:21:37:bf:18:54:8d:9f:0c:26:f6:75:09:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:3D:F1:DA:83:DF:53:DC:65:F0:AC:7B:B6:54:C5:FA:F6:00:C0
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ea:80:5f:ee:a0:1a:90:b2:86:0d:9f:aa:b5:67:ed:93:db:
7a:29:a0:ba:15:5d:38:ea:c6:28:f9:1f:5e:58:9b:7b:ea:37:
e9:18:62:9f:e9:65:c4:98:57:11:88:b3:08:6a:f9:76:ca:01:
80:1f:29:98:11:1e:ed:da:8b:59:8e:eb:5d:d3:bb:2b:f7:7f:
9a:a9:82:4a:b2:a9:f3:45:db:7c:6e:1b:df:b4:45:29:13:c4:
e2:bb:8a:45:fa:67:a8:39:9b:68:a7:8c:a9:b9:c4:1c:79:aa:
ab:72:a5:70:83:f6:2a:17:f6:9c:76:e2:36:6d:23:63:19:56:
26:d5:47:5d:54:c5:18:10:40:a8:1a:bc:19:85:1c:f8:00:f1:
23:ea:3f:c5:2e:69:9d:a8:a2:d0:95:08:c8:75:27:62:fc:fa:
d0:ab:e2:35:61:30:a9:7e:07:51:ad:78:7d:26:b9:14:14:4c:
d8:cd:a3:c5:98:10:d9:ba:20:f2:96:71:1b:d1:3c:b7:7c:be:
41:40:f0:23:7b:bb:e2:b5:59:29:95:46:9b:b3:be:a7:99:6f:
0b:7e:9e:9d:56:1f:5d:6f:e4:e9:5a:6b:90:94:e7:fe:a3:d8:
57:ec:a2:fb:22:49:40:2d:b0:8a:9a:43:be:8a:b4:fe:17:67:
34:fe:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:06:01 2025 by rpki-client