Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: WSluKDKl0z0lUNoxtNAT8xlmeAG/DVlHEB+EhPQ1Mxo=
Subject key identifier: 58:AB:9B:07:8F:9B:C7:10:FC:6C:64:0D:EA:AE:2A:05:88:61:87:ED
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 0198D5F147D202476188E384AA9101A1C961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 0389
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: e3MDa/AtUYkTtPVWQeSUcv+CtE14kAX/LhvngfeeYx8=)
2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:47:d2:02:47:61:88:e3:84:aa:91:01:a1:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=58ab9b078f9bc710fc6c640deaae2a05886187ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:3a:73:6d:77:8d:af:f8:da:2a:8a:99:69:
1b:90:22:fa:e6:e6:78:b9:8f:99:e5:d2:77:5d:5a:
70:dd:c2:a4:3d:cd:5f:72:59:f1:5c:2a:da:3d:e1:
1f:70:1d:f7:93:f2:76:7b:ff:b2:ff:ed:ec:2a:77:
b8:da:ba:1b:39:2c:77:bd:e9:e7:0f:c9:c3:fa:de:
75:bb:c2:a8:28:77:a9:bb:f7:d3:4f:61:a0:a9:53:
eb:6d:99:db:c5:39:5d:63:8d:d6:24:0a:49:66:23:
c7:d3:8d:a7:81:87:46:9a:32:5c:7f:6a:23:25:c7:
48:be:15:b9:fa:f1:76:6d:7b:38:20:d7:e9:0e:04:
fc:b7:d2:02:23:4b:98:f5:ba:09:59:ac:61:7a:08:
9c:06:cb:e2:5d:2b:9a:af:12:7d:05:aa:b8:b7:30:
74:f9:ba:bf:3a:6d:52:6a:82:6e:23:4f:2a:84:0e:
b1:ab:71:77:fc:03:3f:25:cd:82:7f:19:cd:66:87:
51:38:39:c7:42:38:f0:70:75:bb:61:33:05:3b:10:
28:78:b2:45:66:17:ca:ea:84:b0:b6:09:31:f0:e7:
32:2a:8f:10:5a:b7:22:29:4c:fb:7d:3f:36:99:be:
2b:a8:73:5d:a6:91:db:59:1b:65:51:ab:f9:76:c3:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:9B:07:8F:9B:C7:10:FC:6C:64:0D:EA:AE:2A:05:88:61:87:ED
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:79:d1:37:d0:2c:4d:61:53:85:d2:b6:8a:3d:26:0d:f8:48:
96:31:1b:64:7f:15:a9:df:2c:3d:e8:33:1f:36:5d:11:de:c1:
61:a3:ba:59:cd:04:8f:bf:15:13:a2:51:34:8e:1f:b7:e2:c5:
6c:aa:37:4a:02:b4:a6:be:df:10:39:02:c0:70:92:da:59:09:
42:06:ff:23:ac:dc:e9:31:97:97:29:09:78:b3:7a:0e:33:2d:
bb:b5:38:64:30:6b:b5:54:b8:b8:8a:25:6e:dd:b5:a5:2f:c3:
05:25:bf:44:b2:68:e9:11:73:0f:e4:f8:b4:37:67:df:78:90:
7c:2b:07:a3:63:c8:19:f0:d9:5c:e0:2c:ce:8a:1b:81:d9:00:
75:7f:1e:27:ea:1f:21:08:ad:9d:d2:d9:be:5a:9d:83:eb:bf:
cc:b9:0f:d8:95:b5:83:c3:e4:d9:d0:77:dc:74:e6:31:fd:0f:
6d:7d:46:a7:2b:ab:55:2f:3a:ba:98:42:96:86:1f:b2:ac:53:
d6:97:5d:58:62:70:b8:b3:27:29:79:89:fe:4d:d7:1d:47:0b:
68:55:26:c3:40:e3:70:fa:87:c1:14:7f:1b:12:61:12:46:20:
2e:aa:0b:5b:7c:9e:3b:cc:f4:6f:4e:88:28:60:23:4e:13:91:
53:c2:3e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:16 2025 by rpki-client