Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: UvyeEo31Y8dT2r67KGJc8nixR5hdbo/8m7fCOTFJAmc=
Subject key identifier: C3:E7:AC:6A:29:15:28:AC:17:7B:8F:D8:E2:8B:D4:42:89:85:0D:EF
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 0199FEEBE6BAB108D179700B9D6BB7353986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0B5A
Signing time: Mon 20 Oct 2025 00:01:36 +0000
Manifest this update: Mon 20 Oct 2025 00:01:36 +0000
Manifest next update: Tue 21 Oct 2025 00:01:36 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: z2zTQnjFyorU24dDnKzNxQCN6NkH0JzqPa4kUin+wOk=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e6:ba:b1:08:d1:79:70:0b:9d:6b:b7:35:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Oct 20 00:01:36 2025 GMT
Not After : Oct 21 00:01:36 2025 GMT
Subject: CN=c3e7ac6a291528ac177b8fd8e28bd44289850def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:3d:22:2b:7c:35:0a:44:0b:e7:2e:9e:78:
9d:1e:9d:7c:5e:e9:15:36:fd:44:4f:62:25:4e:61:
d4:16:6d:0a:41:b0:d9:66:d9:70:17:77:bb:27:9f:
6a:30:f6:6b:83:35:59:0b:60:75:8e:1c:da:3d:cc:
1d:01:95:4e:58:95:20:f5:6d:74:7d:44:d0:8c:72:
ea:94:f6:3d:46:95:c0:7f:6d:18:4a:57:8c:ba:ed:
2b:5c:00:8e:a5:70:6a:8f:b4:8a:f9:d6:58:ac:ec:
be:2a:3b:79:20:16:32:24:5e:dc:35:e2:07:48:d8:
e4:a6:b0:be:94:3f:eb:47:4f:21:13:89:8a:ca:3f:
e0:69:32:aa:0f:60:ff:8c:26:b3:e9:cb:06:a0:87:
05:e3:79:a7:01:e7:0f:e6:b9:4d:9f:2d:01:a6:04:
7c:f5:e3:f4:58:cc:fa:69:52:a6:43:2f:ee:ff:77:
c9:fc:d3:55:71:3e:15:23:16:fc:08:64:29:15:a6:
81:68:bd:67:02:24:37:a9:4c:d8:08:12:1a:5b:6b:
38:77:f4:fb:b0:0d:1c:3b:7e:10:e0:ed:cb:26:46:
40:0e:87:7a:7a:34:04:d4:e8:ad:21:bf:aa:8a:22:
bd:5c:57:d6:48:1e:3c:36:58:8c:04:5f:73:d3:46:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:AC:6A:29:15:28:AC:17:7B:8F:D8:E2:8B:D4:42:89:85:0D:EF
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:8a:6d:26:cc:04:86:14:98:1e:23:b8:7d:98:13:af:b9:
e4:d4:3e:39:ef:c8:5d:3b:bd:97:f1:d1:15:fc:d1:bd:1e:c5:
89:b2:95:a6:5d:e4:63:3f:84:74:7c:e3:9b:02:52:b5:59:ca:
ab:66:7d:25:78:55:f3:c5:b7:71:d3:7c:fe:e7:0e:13:5b:a2:
44:47:d8:1d:54:90:f2:4b:af:63:01:e7:37:3d:90:1c:d1:77:
86:af:ae:6c:e1:56:2a:79:e7:c2:3a:57:d8:e2:21:a8:af:48:
5f:2a:67:58:14:ae:9c:7e:1b:9c:b6:8a:c5:7d:7e:15:63:22:
c0:37:50:7a:a0:df:a9:be:94:a3:36:d2:49:2c:32:36:af:09:
5e:ac:64:e3:4f:79:e5:05:63:e1:19:df:70:3a:dd:fa:16:17:
ad:ad:bd:8c:62:fb:83:5e:75:ac:74:e5:f3:0e:bc:cb:eb:d7:
06:c6:4f:b4:0f:53:57:06:10:68:db:f2:94:80:8f:43:2e:2c:
a8:a0:f1:b0:b3:24:be:5c:20:f3:35:79:2f:62:c6:9a:cc:3a:
a4:be:2a:90:8e:da:8e:d7:5a:4d:fe:6b:63:cd:76:f8:45:4e:
7d:f0:19:4e:6d:76:c9:44:32:78:89:03:05:78:e8:55:1f:99:
09:c2:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:55 2025 by rpki-client