Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: Ba5s0xu1YBO94oHu+CPSNyQEwaDkhsSrbltHix7tSW8=
Subject key identifier: A2:65:E4:7C:5F:74:7B:15:28:21:29:4A:CC:6D:AD:B2:23:7E:E7:07
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 019890DB63205B4558F08EF065C761A1599C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0A18
Signing time: Sat 09 Aug 2025 22:02:33 +0000
Manifest this update: Sat 09 Aug 2025 22:02:33 +0000
Manifest next update: Sun 10 Aug 2025 22:02:33 +0000
Files and hashes: 1: 2r58NpxvTCdcnNGrjt0v-zkeUtY.roa (hash: TkXA680kjgu+5bXWMHrgD9kPPHcPEiisIsJWWTeRFzw=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: KEN8e8iDrikU5qyTBhBlI0PyLqEQ2P/aLrY7lq5l0r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:63:20:5b:45:58:f0:8e:f0:65:c7:61:a1:59:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Aug 9 22:02:33 2025 GMT
Not After : Aug 10 22:02:33 2025 GMT
Subject: CN=a265e47c5f747b152821294acc6dadb2237ee707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:cc:0d:89:8b:40:9f:a8:c7:72:43:be:3b:
ff:ca:1d:81:a3:a3:65:fb:9b:03:e8:5e:e0:30:42:
8f:5f:59:f3:ec:7b:fd:4f:47:10:bb:d6:6d:1d:67:
37:11:13:82:96:49:24:07:d1:9d:fb:ec:1b:88:2c:
66:63:1e:1b:a8:19:ce:f9:a4:31:75:c1:cb:df:a3:
e6:dc:e0:01:03:b7:df:57:09:1f:8c:55:f7:73:a9:
f8:f3:f5:91:5e:1d:b6:4c:8f:cd:d2:e8:3f:7a:4c:
67:63:80:1a:5b:81:93:e7:ca:13:0a:81:42:ab:53:
cf:57:f0:57:8c:5d:30:cc:50:26:03:27:92:fc:97:
71:05:29:7f:ca:a9:23:80:98:2b:be:f7:f1:f7:33:
76:d5:6e:32:f9:17:1b:3e:d7:15:45:50:f0:43:4c:
5c:0b:5a:16:5b:05:77:62:32:ca:9a:84:cc:26:d4:
07:31:ca:51:d8:df:40:cd:94:e6:1a:ee:a3:40:18:
ae:37:28:ff:9b:90:ff:27:49:1c:c4:23:d3:3d:4c:
2b:dd:7a:43:5d:b2:43:96:9f:3b:41:dd:8f:5a:d1:
f9:8d:d6:66:8b:4d:f7:f2:5f:80:c3:67:ff:5c:fe:
84:04:56:82:9d:57:6a:b4:d2:64:59:7a:60:2d:15:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:E4:7C:5F:74:7B:15:28:21:29:4A:CC:6D:AD:B2:23:7E:E7:07
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1b:93:65:8d:0e:64:99:8e:40:3c:a7:b2:4a:77:96:17:70:
12:0d:22:f5:11:b7:c8:da:43:52:b1:02:9b:b6:fc:0a:19:88:
ca:65:39:5e:31:bc:61:a4:d0:97:08:cd:fc:92:d6:f4:f3:75:
dd:55:fe:61:42:06:39:96:7b:03:2f:03:0c:a2:fc:3b:cd:c6:
c8:cd:eb:cd:22:ab:7c:9c:33:35:48:80:81:e2:28:fe:5f:65:
56:dd:68:95:87:7b:b3:96:26:91:db:fc:ca:d6:6d:7d:25:d8:
3e:a4:b8:63:9c:fc:c2:5b:65:82:e0:91:c8:7e:75:59:ed:6c:
ef:08:54:b9:40:b6:11:e2:3a:74:08:23:18:b3:cb:0e:7e:4d:
02:49:b1:c3:d3:7d:15:67:db:f8:8a:c5:64:c3:61:b0:31:96:
e5:8b:85:dc:34:ca:ff:06:27:b1:5e:cf:6c:d9:12:db:3e:c4:
2b:f8:4a:68:ea:24:c0:27:b4:a7:21:94:3b:bc:a4:61:fb:3c:
53:af:67:c3:0d:fe:6c:67:b6:02:28:6b:7b:9d:a2:8d:a6:b6:
72:4d:bc:21:36:68:cd:0b:02:ba:1a:98:5f:dc:a1:c2:4a:b8:
8e:b8:51:47:22:7c:3e:7d:9b:7a:d5:c9:58:a3:fb:b8:bf:60:
0d:ff:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:47 2025 by rpki-client