Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: frrnDD5zZIAMSHwNAuF1Q7e2UOUikWfXTBM32LtYfb0=
Subject key identifier: F1:07:DF:A1:64:DD:C6:71:01:29:8D:F6:41:24:58:A6:54:0F:7B:06
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 0199FDD9206C781EFEE939D1589CDE7C01DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 0F54
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: Ogi63twsc9pe8v36FqKliErKrCdeDQWYs4laMpc+yTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:20:6c:78:1e:fe:e9:39:d1:58:9c:de:7c:01:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=f107dfa164ddc67101298df6412458a6540f7b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:e5:a4:ea:07:3e:87:16:f5:be:6b:7c:0e:
b2:73:4d:8a:d5:91:3a:68:03:58:c0:2c:80:28:e0:
48:48:e0:05:db:bd:29:ec:6d:ea:f1:c4:2f:57:07:
5a:a2:4a:30:8d:a7:e2:e6:37:33:73:b5:35:e3:70:
e2:b0:83:48:2e:5b:fe:c4:7f:e6:5d:c9:f5:8e:d3:
11:09:fd:32:5a:aa:78:ea:40:e6:f9:f2:58:96:21:
bd:75:d0:5e:ad:74:6c:a3:a5:8c:03:60:c0:ad:90:
f3:83:8c:80:69:d3:23:85:93:56:fe:ea:a0:8b:27:
ec:9b:69:12:b4:71:66:0b:b2:84:74:f5:74:c0:08:
03:d7:f8:b9:30:41:a3:81:c1:09:c9:6f:93:56:28:
2d:24:f2:a9:77:26:ec:83:6d:27:7f:0c:3f:f3:aa:
4a:ac:e0:c7:ff:d0:fe:96:c8:2a:c3:ab:d3:1a:77:
e7:49:be:44:0d:47:30:00:bb:d5:8a:1f:71:7d:ab:
e7:8b:67:ab:8d:35:e3:28:12:ed:93:1c:28:e9:15:
18:7c:bc:a5:87:22:c7:9d:8b:4d:29:ee:55:c2:9a:
8a:d3:08:b0:00:fd:58:0f:f7:5e:bb:61:0c:f4:5d:
2c:c0:8d:29:fc:b0:f7:01:65:44:7b:27:ee:c6:83:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:07:DF:A1:64:DD:C6:71:01:29:8D:F6:41:24:58:A6:54:0F:7B:06
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e9:b8:89:60:12:09:28:fa:13:aa:57:b2:77:dc:cf:a5:91:
a6:7f:91:2e:40:78:27:0b:2b:7f:2e:ea:af:6c:8d:f7:ab:d4:
45:5b:0c:24:ac:d3:08:5f:7f:bf:73:f4:d5:45:d5:06:00:92:
52:99:4f:89:58:44:f9:f5:6d:13:1c:7a:b6:38:3b:37:d1:a0:
92:f6:34:9a:40:a8:24:4b:65:92:57:6a:d3:0a:ee:f6:db:aa:
f6:9f:92:37:41:42:1d:0f:b6:f3:d9:0e:d0:77:ea:fe:da:ac:
ab:64:87:f0:8d:68:37:02:e9:52:7d:a9:3b:54:b6:0b:d9:67:
25:d1:b0:41:aa:03:59:e9:30:00:7c:9e:f3:34:0e:ca:42:c9:
a4:8e:60:f4:67:ac:1b:46:fc:43:d7:30:3a:36:f8:fe:9a:f8:
6b:1c:f4:81:4d:8d:d7:7f:eb:f3:32:80:3a:6f:b7:01:65:d3:
de:ab:56:e4:85:fc:56:4a:c9:64:44:c9:a9:d5:f7:cf:c5:bf:
14:a2:e0:88:ee:bf:73:5d:68:38:1d:a1:bf:68:82:b5:3c:b0:
81:be:5d:a0:c8:22:21:a0:c7:86:cb:ec:f7:97:4c:32:8d:5d:
74:5b:6e:5c:96:b7:c0:b7:7e:85:f3:2a:a1:c3:ae:81:57:77:
75:85:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:19 2025 by rpki-client