Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: nKq8+046H2NgwwZGoGP38WGAlRJrudet8xAZzWZnIEg=
Subject key identifier: 05:75:32:A7:ED:BB:02:64:37:42:A0:EF:00:6E:1C:E3:DE:8E:75:C5
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 0199FC21CBFB310327FB9E7BD5D4AA8AE48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 07C7
Signing time: Sun 19 Oct 2025 11:01:37 +0000
Manifest this update: Sun 19 Oct 2025 11:01:37 +0000
Manifest next update: Mon 20 Oct 2025 11:01:37 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: SDJcw5GF7V4MpJKXHa2+ENelXU2tAi+gHpWerdvdieQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cb:fb:31:03:27:fb:9e:7b:d5:d4:aa:8a:e4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Oct 19 11:01:37 2025 GMT
Not After : Oct 20 11:01:37 2025 GMT
Subject: CN=057532a7edbb02643742a0ef006e1ce3de8e75c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:11:c8:7f:e5:db:fc:bf:ec:8f:5a:86:9a:
99:77:6b:49:6b:c9:ad:0c:16:0f:49:e3:59:49:0e:
47:3b:2e:fe:78:ba:2e:bd:02:a6:a4:76:1c:b1:de:
24:cb:fd:06:7e:0a:4a:70:48:9e:cf:d7:5f:b3:72:
a6:7e:88:28:74:1e:9a:ae:45:63:01:7b:d3:b1:ec:
bb:70:5f:90:b4:00:ec:ad:8d:27:82:1b:8d:3b:d2:
ec:12:c1:11:8b:14:7f:b6:ce:54:41:ba:69:5a:5f:
87:d5:e3:92:d6:0e:f0:88:62:34:0e:14:e4:e9:59:
f3:96:ad:04:22:e2:8c:78:4c:0a:ca:32:79:79:89:
19:b2:0e:7f:d4:eb:16:94:6a:12:08:dd:32:76:dc:
e6:54:c1:e5:8e:c5:f1:0b:35:80:25:64:da:a4:16:
fd:ff:47:54:28:0e:3e:67:4f:c2:35:9a:07:ff:78:
69:cc:97:ee:ad:0a:11:b8:6b:0f:5b:d4:6e:16:98:
3a:45:74:13:fb:8d:a4:c0:96:47:dd:dd:ae:01:3e:
08:95:b8:03:9c:5d:8b:70:38:22:e6:77:c7:04:13:
86:08:4d:fd:1f:c7:19:15:1e:4e:14:38:5b:a7:21:
c6:e5:8d:ed:cc:d2:7a:66:07:f6:3a:4e:f2:de:0c:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:75:32:A7:ED:BB:02:64:37:42:A0:EF:00:6E:1C:E3:DE:8E:75:C5
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ed:50:51:e4:19:f8:ea:bf:ec:67:80:6a:49:c0:1e:0d:fa:
7a:5d:d0:be:ce:53:77:3b:98:52:84:d6:31:b8:98:6e:1c:4d:
9b:9a:5e:ef:9d:cb:23:d3:e7:13:21:c7:7d:8a:b5:dc:c0:d0:
ee:e8:ff:5c:a0:f2:7f:7f:eb:a4:17:26:c8:d8:ac:b2:a7:2f:
6c:9c:10:9d:1e:ae:7b:41:68:31:34:45:83:f2:c7:a0:0d:4a:
0c:d7:93:54:eb:06:04:48:e0:a7:66:9c:ef:ca:c8:29:b5:42:
b5:44:92:73:d9:f9:c4:b3:2a:36:c5:e6:8a:b3:14:3a:fa:89:
42:53:cc:81:17:59:c5:0d:7b:7b:49:ee:f0:35:f9:2f:90:74:
7f:05:a1:79:90:90:cf:6f:0a:9b:5e:e5:7d:01:61:7a:cc:ad:
47:b3:72:1b:46:2d:0a:92:83:93:9d:e3:f6:4a:8b:04:aa:66:
79:4e:59:07:38:b2:76:a4:df:f7:f3:43:54:16:8e:4b:c5:31:
22:10:40:76:bf:8d:47:23:57:46:51:d5:19:df:b2:3d:23:65:
ed:5a:7a:c1:87:c0:27:41:0f:28:6c:9f:25:11:96:62:f2:6c:
d9:31:f3:94:47:1f:0a:cd:56:b1:fd:2a:d4:16:1f:01:29:e3:
9d:f4:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:28 2025 by rpki-client