Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: j/DmpzVXvngiWd/8qOtiZainiuM4O47GnE3cHtQxxQM=
Subject key identifier: F2:B5:89:60:00:C8:FA:4A:9D:4E:AA:51:81:29:4C:08:4F:37:94:0F
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 0198D54E65E384D3C83676C6391985440D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 03A0
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: aGLxsgsMtDCyuRJHWKyZIqwXnHBLAJ+ssh+StcmJEtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:65:e3:84:d3:c8:36:76:c6:39:19:85:44:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=f2b5896000c8fa4a9d4eaa5181294c084f37940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:2e:37:38:d5:e4:52:cd:cc:a5:c1:89:45:
87:5f:df:e7:04:53:d0:ad:57:27:20:3d:d0:42:fe:
f9:19:24:96:10:9a:09:9f:52:f2:27:a9:a8:d7:64:
4d:34:a7:26:15:07:09:ba:f4:d0:7b:26:b8:61:bd:
af:95:57:1b:77:f4:98:49:c6:9a:30:c6:4d:24:85:
c3:bc:58:54:cb:a3:98:dc:10:7c:87:79:e8:47:24:
86:cd:e4:5e:c4:fd:36:9e:f0:5d:66:d8:18:87:d1:
39:c5:1e:b8:0f:4b:8e:82:c2:73:f8:58:c2:77:74:
5c:66:8b:73:bc:0c:f9:61:fb:28:17:a3:5e:2c:6d:
c4:bd:d1:e0:25:25:9e:e5:a9:dd:cc:ec:6b:de:10:
2e:eb:c1:6e:a5:e3:6d:b9:72:2a:15:16:83:98:49:
4f:90:10:3b:5a:04:8b:37:1d:ad:ab:a8:38:e6:01:
4c:76:fc:71:cf:4d:e1:78:ae:95:dd:45:e7:f3:de:
ba:6c:65:7a:80:77:ae:05:76:35:db:6a:32:2c:31:
b8:b8:05:df:a2:54:55:21:ce:6b:12:7d:d9:c6:de:
69:c7:a1:5f:a9:ab:1c:9e:e9:79:27:de:27:25:2d:
95:26:da:91:f2:60:5b:c0:a3:a6:66:e1:9d:74:1e:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B5:89:60:00:C8:FA:4A:9D:4E:AA:51:81:29:4C:08:4F:37:94:0F
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:11:90:d6:0b:7a:31:b7:de:65:db:80:7b:14:5f:a7:28:d8:
24:c6:e8:91:ef:32:b4:31:2f:7d:89:64:78:3a:af:57:33:98:
2d:40:44:ee:63:f2:44:eb:46:b9:10:5a:54:9e:f1:5d:9e:66:
18:68:e4:71:7d:f2:cb:b8:b3:33:ab:bf:ad:82:9e:25:2c:26:
7e:74:b0:42:63:9a:2f:f8:fd:e7:de:eb:14:34:9d:64:33:bc:
f2:98:6a:8b:ec:fb:d4:5b:dd:80:44:40:8c:f9:90:7c:27:22:
80:09:d7:59:8d:4e:48:ec:36:67:95:ff:04:da:2d:76:7c:a4:
63:6a:77:8d:15:2e:ee:31:84:c0:6a:b3:94:9c:6a:3f:90:d4:
cf:f8:eb:e1:73:f7:dd:fb:65:bc:df:28:b9:d8:52:2e:72:50:
9b:aa:db:e2:fa:b7:36:fa:38:89:dd:c6:b6:5d:dd:65:1d:d0:
6c:9a:e3:b2:ad:73:b4:6c:5f:ae:21:cc:35:6e:9f:35:79:b6:
b9:1b:48:5d:f7:ac:5a:5b:22:0b:96:06:a1:ea:84:63:53:95:
50:e8:3d:92:54:70:d4:94:63:48:0f:6f:49:9d:b1:d4:7a:f1:
b5:c3:9b:1d:39:3d:a7:af:73:bb:be:d2:8d:8e:39:9e:eb:7b:
ea:8f:23:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmXjhNPINnbGORmFRA0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzFmYjQyNDlmYzUxODhhOThiNjJiMGQ0MGJiYTliZjdl
MzM5MjMwHhcNMjUwODIzMDUwMjIxWhcNMjUwODI0MDUwMjIxWjAzMTEwLwYDVQQD
EyhmMmI1ODk2MDAwYzhmYTRhOWQ0ZWFhNTE4MTI5NGMwODRmMzc5NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudwuNzjV5FLNzKXBiUWHX9/nBFPQ
rVcnID3QQv75GSSWEJoJn1LyJ6mo12RNNKcmFQcJuvTQeya4Yb2vlVcbd/SYScaa
MMZNJIXDvFhUy6OY3BB8h3noRySGzeRexP02nvBdZtgYh9E5xR64D0uOgsJz+FjC
d3RcZotzvAz5YfsoF6NeLG3EvdHgJSWe5andzOxr3hAu68FupeNtuXIqFRaDmElP
kBA7WgSLNx2tq6g45gFMdvxxz03heK6V3UXn8966bGV6gHeuBXY122oyLDG4uAXf
olRVIc5rEn3Zxt5px6Ffqascnul5J94nJS2VJtqR8mBbwKOmZuGddB5OUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK1iWAAyPpKnU6qUYEpTAhPN5QPMB8GA1UdIwQY
MBaAFMdx+0JJ/FGIqYtisNQLupv34zkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNIN1FrbjhVWWlwaTJLdzFBdTZtX2ZqT1NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hODc4YWUtZTk3Ny00NWIwLTkyM2Mt
YzkwZmEzNDVjNjZlLzEveDNIN1FrbjhVWWlwaTJLdzFBdTZtX2ZqT1NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hODc4YWUtZTk3Ny00NWIwLTkyM2MtYzkwZmEzNDVjNjZl
LzEveDNIN1FrbjhVWWlwaTJLdzFBdTZtX2ZqT1NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExGQ1gt6
MbfeZduAexRfpyjYJMboke8ytDEvfYlkeDqvVzOYLUBE7mPyROtGuRBaVJ7xXZ5m
GGjkcX3yy7izM6u/rYKeJSwmfnSwQmOaL/j9597rFDSdZDO88phqi+z71FvdgERA
jPmQfCcigAnXWY1OSOw2Z5X/BNotdnykY2p3jRUu7jGEwGqzlJxqP5DUz/jr4XP3
3ftlvN8oudhSLnJQm6rb4vq3Nvo4id3Gtl3dZR3QbJrjsq1ztGxfriHMNW6fNXm2
uRtIXfesWlsiC5YGoeqEY1OVUOg9klRw1JRjSA9vSZ2x1HrxtcObHTk9p69zu77S
jY45nut76o8j/A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:36 2025 by rpki-client