Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: wgfZ9gY0ITUzOElXUM8wna/wYwijVkfL/1J8vyyRj7I=
Subject key identifier: 9A:9D:4A:17:C1:59:04:84:1D:40:44:26:E2:82:48:64:CE:2F:B2:A8
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 0198D5839C9A9A9CD3F9D5A93C29EA4D3238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0AC0
Signing time: Sat 23 Aug 2025 06:00:28 +0000
Manifest this update: Sat 23 Aug 2025 06:00:28 +0000
Manifest next update: Sun 24 Aug 2025 06:00:28 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: 7DkV9RLmWWoU3fUsMYATOKqzXSdsONXn/o1Pg+ioPDg=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9c:9a:9a:9c:d3:f9:d5:a9:3c:29:ea:4d:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Aug 23 06:00:28 2025 GMT
Not After : Aug 24 06:00:28 2025 GMT
Subject: CN=9a9d4a17c15904841d404426e2824864ce2fb2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:2a:8b:9d:34:c8:64:03:6d:45:f6:7b:7b:
2c:80:da:06:e6:e2:6d:80:87:f0:8b:81:e5:78:71:
f0:d7:92:df:8e:c6:ca:a4:13:c0:e1:db:63:c0:2a:
20:5d:32:27:18:32:c4:d4:ae:d4:54:0b:a4:67:da:
20:f5:83:18:45:9b:e1:b9:dd:53:67:08:49:68:22:
2c:d5:68:cd:4b:76:6f:1e:c3:28:d8:f2:bb:5c:b4:
ba:d6:73:57:91:9b:e7:42:36:e5:17:33:f9:7f:57:
ec:46:8e:35:60:41:0d:c4:9f:17:70:fd:29:6f:c5:
3b:7f:b3:e5:f5:1a:17:47:d8:ec:6d:2d:40:59:62:
25:fd:da:72:c4:7d:bc:3f:87:c4:0e:64:fe:df:3a:
62:d8:32:fc:16:2a:65:a8:41:be:79:d6:98:25:95:
10:65:32:fa:c9:58:fa:43:ce:13:51:f2:87:0a:26:
45:25:7c:01:15:14:01:8e:53:56:2f:20:ea:08:94:
4e:03:81:5b:cc:3b:c6:d0:57:d8:c5:87:1c:10:0f:
9b:45:07:bc:7f:67:d1:0a:ef:40:37:8f:ef:aa:ad:
b1:98:55:90:4e:69:b2:d8:ed:39:06:d8:dd:72:06:
20:af:53:b6:30:7a:25:a8:ef:8d:2b:82:74:a8:43:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9D:4A:17:C1:59:04:84:1D:40:44:26:E2:82:48:64:CE:2F:B2:A8
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:03:e8:65:b3:ff:4f:78:2f:a1:d5:15:f0:fc:b1:65:6d:55:
09:a7:a8:f5:a8:fc:46:90:f2:df:75:f4:0b:bc:88:d5:38:55:
3a:e2:31:7e:7b:fe:2c:1e:04:02:89:db:87:5a:f7:64:b5:22:
8c:b9:bf:b8:03:d3:d3:7f:c2:0b:61:39:cd:e2:7b:4d:94:ee:
91:3b:bb:fb:48:67:a5:7d:28:36:ec:e8:40:d8:99:f3:fc:80:
80:f4:4c:8e:8f:2a:90:e6:52:77:47:c7:ed:ab:25:71:15:0e:
55:e7:81:c1:db:d1:e8:a3:50:41:bf:78:e5:13:99:4d:d7:e2:
40:c7:7d:20:e0:a2:65:35:94:b8:f9:4d:d3:e9:32:c2:f9:9b:
4f:33:25:70:7e:23:87:8f:d7:34:7a:6f:96:1c:d8:2e:5b:27:
4f:1a:c5:e0:f4:d7:20:a8:10:e6:13:b6:27:10:49:be:96:f5:
ea:20:6f:04:08:8e:92:0b:fe:d1:6a:b1:17:02:3d:3e:f1:22:
84:a1:54:a1:ea:27:a4:82:54:33:03:37:8c:69:e8:c6:d0:23:
55:79:fd:1d:2c:61:dc:38:3d:9c:a8:38:e5:ea:db:a8:b4:0d:
3b:54:28:47:7a:55:74:f6:b0:d9:ef:cf:0b:33:e4:ef:f0:1e:
6b:6b:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:20 2025 by rpki-client