Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: VzW1d5zsS0FzmCG7Rm/RPt3HoseslgHmvS2APLKVmTI=
Subject key identifier: 6A:57:79:E6:73:4A:AB:E5:44:2A:D9:E2:7F:57:AD:88:3C:C3:68:F6
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 0197B5C4A622AAB54CF699F0532C1CF331AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0A2B
Signing time: Sat 28 Jun 2025 09:00:52 +0000
Manifest this update: Sat 28 Jun 2025 09:00:52 +0000
Manifest next update: Sun 29 Jun 2025 09:00:52 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: CRL6nObJfQW2zi5xB+PAmlx3Z93VVpspYtMYHNAWM/M=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:a6:22:aa:b5:4c:f6:99:f0:53:2c:1c:f3:31:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Jun 28 09:00:52 2025 GMT
Not After : Jun 29 09:00:52 2025 GMT
Subject: CN=6a5779e6734aabe5442ad9e27f57ad883cc368f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:00:fb:78:b0:4a:90:66:c9:f1:e1:d6:a2:
35:16:14:eb:a5:b7:41:79:47:c0:2a:54:de:60:c5:
15:ea:a7:46:41:23:80:cd:d6:33:5c:76:9a:42:d7:
30:a4:8c:f1:be:f4:5d:7f:41:16:7f:8d:dc:52:9d:
2f:67:9e:64:78:12:c6:08:6f:1d:d1:c3:22:6e:e1:
d1:01:dc:34:d3:9e:35:4d:9c:1b:1e:f7:b1:23:b1:
d7:1a:2a:bd:e6:7a:06:23:9e:bb:12:f7:f1:a8:87:
45:c6:d7:4e:21:ba:d3:a3:52:df:b7:8d:7b:4f:b3:
79:32:2c:07:ec:12:58:25:ec:36:52:38:07:04:c2:
c6:73:b4:74:40:38:06:0a:a8:bb:3a:0c:1f:5c:e1:
e9:0d:40:38:c4:09:07:18:6b:c9:5e:c2:f8:0c:59:
b9:1b:da:c1:3b:b6:fa:7d:33:bf:58:17:50:38:d8:
97:9c:47:2e:0e:3c:40:71:5a:5d:da:82:64:f7:cd:
6f:a4:55:d0:69:a5:b0:50:25:32:ad:86:91:09:74:
6e:87:9a:3a:a2:3d:58:82:46:e0:bc:c4:51:20:8a:
f4:e2:f3:6e:26:0b:83:14:3e:78:70:e4:d4:db:b9:
88:a2:a3:85:ca:50:8b:4f:eb:fb:5c:5a:08:49:93:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:79:E6:73:4A:AB:E5:44:2A:D9:E2:7F:57:AD:88:3C:C3:68:F6
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:29:a8:f2:89:a7:6c:a1:a7:34:86:21:d9:61:62:95:cd:f6:
ea:16:91:16:33:34:c3:83:1a:0a:0e:06:e8:8e:c4:25:c0:09:
5e:a2:7a:96:6e:17:51:2c:39:58:3c:56:bf:29:c0:49:59:ac:
84:bf:df:cc:8d:41:62:90:7d:a1:e2:73:f6:07:93:79:12:8d:
84:0e:1f:1d:d5:c4:0a:41:ff:b3:4e:bc:41:29:3c:08:9a:b8:
1c:e3:aa:6e:a5:c5:d9:15:f9:65:a6:b6:db:e6:1e:6b:6e:ac:
b0:3d:95:02:86:20:7b:42:d5:3b:37:bf:2d:e5:0a:a1:e0:d1:
36:32:fd:eb:86:89:31:a9:d3:66:c1:eb:96:a3:33:c3:02:66:
a0:20:e4:49:69:84:4c:fd:71:f8:07:17:38:08:73:a4:39:33:
65:31:36:44:11:f5:c1:ac:f3:2d:f2:68:3b:55:3f:2e:21:a1:
e0:27:d3:03:e6:37:9e:d5:f0:c7:bc:43:68:d0:aa:0c:7e:c0:
5d:70:e1:83:a5:ad:dd:75:51:dd:20:d9:8f:7a:bd:98:d2:09:
71:4c:6b:d5:0f:cb:2d:08:b9:b6:d0:fa:fd:bd:93:44:97:db:
db:af:6b:03:d2:bd:b2:2e:54:d1:da:07:9d:9d:a4:30:10:28:
e9:28:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:51 2025 by rpki-client