Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: I6UlHOrcAIDRSUDANoeoPqAIhuZ+g7v/L5U1IYaMf4g=
Subject key identifier: 3A:2C:42:01:8B:F6:8F:B5:96:13:49:C8:89:D3:68:9E:8C:3B:F2:2A
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 0198D4A799CAE85595B562EAFCBD0BB2F53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 072E
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: L3ZrP2s3K/J3M9LqeUaF7J08m8qEjtAcVRV4VID+d8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:99:ca:e8:55:95:b5:62:ea:fc:bd:0b:b2:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=3a2c42018bf68fb5961349c889d3689e8c3bf22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:d0:ad:61:f2:31:28:0d:d6:c0:d9:05:98:
28:5e:59:24:54:cc:5d:64:af:e0:23:e7:79:64:4d:
3a:4e:49:9b:fd:a9:d3:88:67:8b:4d:58:41:e8:e6:
4c:29:75:19:f8:9e:76:49:2a:a8:3a:ca:f9:83:f4:
53:ac:cf:e0:02:09:a6:21:99:6e:2e:4f:2b:58:77:
47:78:7f:6b:75:f0:95:51:44:49:32:aa:4c:0b:6c:
19:44:00:05:14:0b:b1:cb:e4:15:46:32:59:aa:02:
e9:c7:be:5f:67:17:cf:16:87:0b:e4:8b:0f:ab:94:
03:f8:f6:33:ee:7e:2c:b6:cf:03:b7:b8:7a:d8:2b:
d5:dd:88:75:5e:7a:a5:4f:51:7a:55:6a:70:5a:16:
f3:80:12:d2:b0:4e:68:6d:5d:3b:c2:00:a7:49:2c:
63:7f:d6:ab:9d:87:22:61:0b:83:13:80:da:75:aa:
8b:6b:f7:ea:39:ad:bb:73:17:85:a0:a1:93:e1:49:
58:d1:30:3b:ca:fa:68:84:32:25:14:12:46:d1:c8:
98:25:44:f6:57:82:27:13:45:95:b2:f2:f5:4f:c9:
8c:d9:aa:e2:d8:ec:19:26:86:47:c9:76:db:3b:18:
2e:2b:29:79:d8:ee:11:8f:1b:b9:11:db:45:2e:a3:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2C:42:01:8B:F6:8F:B5:96:13:49:C8:89:D3:68:9E:8C:3B:F2:2A
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:74:e0:68:75:e2:31:8c:90:59:25:ae:36:86:51:27:e3:2e:
23:e0:41:92:8f:7c:b8:b8:9d:bd:5c:f0:be:0c:1f:ad:bd:e0:
23:c1:46:57:8d:0b:d4:e8:f5:4f:36:2c:72:3b:02:02:c1:2b:
2a:dc:0c:ee:a2:4e:eb:3c:d1:be:12:8e:f8:59:b2:28:fc:92:
b2:ff:22:e9:76:6e:08:9c:d8:98:08:1a:9c:18:93:69:a1:82:
cc:05:91:cd:69:80:f7:e8:b5:b8:56:17:66:94:03:7f:19:2d:
03:88:31:06:58:4c:2e:a5:d0:48:1d:66:09:15:4a:be:be:b3:
92:6d:e8:32:56:4e:22:d0:47:a6:2b:e8:1a:22:15:c5:5a:5d:
35:0a:54:10:3a:92:1c:aa:99:85:99:8e:58:aa:63:a0:ed:4f:
25:e1:bc:04:a6:74:36:7f:bf:26:e2:1c:ab:85:9d:3b:b8:19:
69:97:fc:e5:00:6a:89:aa:0f:ab:ed:8d:33:0a:dd:14:f2:a2:
bb:bd:6e:75:87:82:ec:7b:71:51:ea:73:2d:76:ff:a5:a2:91:
b5:4e:da:d6:72:1e:98:fe:13:95:60:bd:fa:62:b0:5b:c3:c8:
2f:6d:a7:1b:6a:89:0e:97:fb:e1:4d:47:30:65:57:0a:f3:6b:
42:33:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:43 2025 by rpki-client