Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: 0+Jf4hYxYsnwKHAxO+a4xAUXfnMFZZBXR1TMg5yaOHE=
Subject key identifier: AF:82:97:63:E3:51:5F:6C:A1:CD:FD:D3:1F:41:C4:A5:B5:F3:2D:5A
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 0199FAD7B2E94E21A76C64E131FD22555C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 0438
Signing time: Sun 19 Oct 2025 05:01:04 +0000
Manifest this update: Sun 19 Oct 2025 05:01:04 +0000
Manifest next update: Mon 20 Oct 2025 05:01:04 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: kP271IzOP7j0zpmmSzosqWdxzLWxm6KNEsWlPdIbt8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b2:e9:4e:21:a7:6c:64:e1:31:fd:22:55:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Oct 19 05:01:04 2025 GMT
Not After : Oct 20 05:01:04 2025 GMT
Subject: CN=af829763e3515f6ca1cdfdd31f41c4a5b5f32d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:dc:ee:d1:fe:f5:ff:81:45:68:7d:73:51:
69:fb:b7:6c:4f:1d:ed:0b:ee:ed:98:ec:39:40:58:
f5:96:d9:06:e8:86:d5:04:a6:b7:70:b9:59:86:14:
18:4f:ca:2f:72:ea:b2:fb:32:11:d1:eb:78:6d:d7:
ac:ad:5d:b1:6e:fc:71:86:99:f4:9a:24:32:ec:88:
e8:0c:a4:6e:99:aa:5c:84:d5:fc:21:36:95:7c:52:
45:6c:ab:80:76:5a:79:f9:8e:ad:f4:b2:4e:f8:31:
87:50:76:ed:13:ca:2a:be:d6:5a:ab:27:4b:9e:da:
87:f6:bf:da:4b:da:f2:3a:33:5a:67:17:51:fd:e1:
f6:da:bd:78:4b:7c:17:58:d9:70:a9:ec:dc:ef:0f:
d4:ef:cf:45:1f:f7:cf:cc:45:da:c8:4b:6e:17:b0:
9d:3c:7e:71:55:86:d4:e2:10:27:05:28:92:2a:75:
88:9a:9d:c3:60:8d:2e:e2:af:de:85:f5:85:ee:b0:
4c:f5:2d:60:15:06:2a:2c:eb:0b:13:6c:11:48:ab:
07:ae:30:f4:b6:1d:3e:90:a3:99:e4:54:c4:b4:35:
3f:f0:d9:69:8b:d7:0f:0b:da:88:44:62:12:fb:91:
17:09:04:67:d5:e5:a1:0b:f4:ea:55:b5:fe:99:7f:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:82:97:63:E3:51:5F:6C:A1:CD:FD:D3:1F:41:C4:A5:B5:F3:2D:5A
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:b4:63:6b:20:39:1b:82:06:14:f4:91:01:c9:0e:30:2c:
53:f5:ac:e3:6e:03:b2:53:8b:53:59:14:8d:67:4e:f8:6a:5c:
1f:20:07:0b:ce:48:35:4d:54:db:5d:88:a7:a5:09:fe:7c:a3:
bb:4b:1c:61:57:10:2f:38:30:a4:9a:f3:65:9f:41:f6:18:ea:
b4:ef:11:91:93:54:dd:04:f8:98:6f:60:f8:03:e5:e4:39:6f:
c2:75:36:0f:5a:2f:1d:e7:19:b5:0d:e2:f4:9b:0e:74:e9:3e:
e7:71:f9:95:07:a1:03:e4:9a:2f:2e:40:01:3f:0a:14:d6:c6:
28:0f:e3:9b:66:48:27:12:51:14:b2:22:6f:04:f7:9c:63:10:
dc:4b:ee:d9:93:9a:76:87:32:85:4a:79:b7:c2:5b:fe:6e:26:
16:de:6d:07:e9:39:41:12:2b:ef:f9:2b:99:1d:a1:60:92:ee:
ad:c3:13:94:e7:8a:60:19:7e:f1:0a:4d:7e:98:b6:ff:a4:9e:
60:33:34:63:ff:5c:a3:c2:2b:db:31:ce:76:39:53:0c:e7:74:
23:9e:67:5d:48:0b:1b:99:bd:55:35:81:d7:ea:2e:cd:f9:53:
96:dc:3e:15:9e:5d:71:6a:e5:1b:f6:6a:61:85:bd:34:7f:cf:
52:7f:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:01 2025 by rpki-client