Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: fqrpdZxICrQm4fZEodtXVIB2+7KMeEXgjaF13IzPMTo=
Subject key identifier: 79:59:07:51:AC:2C:0C:DC:0F:2D:1C:3C:31:29:4E:0D:20:68:5E:7C
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 019776E5902BC417609C3049C7A19E9D8289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0986
Signing time: Mon 16 Jun 2025 04:00:45 +0000
Manifest this update: Mon 16 Jun 2025 04:00:45 +0000
Manifest next update: Tue 17 Jun 2025 04:00:45 +0000
Files and hashes: 1: 2r58NpxvTCdcnNGrjt0v-zkeUtY.roa (hash: TkXA680kjgu+5bXWMHrgD9kPPHcPEiisIsJWWTeRFzw=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: nSwT2FPrXFwQPL3wE/n0Mtl0TREzJArls25BFKd6NKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:90:2b:c4:17:60:9c:30:49:c7:a1:9e:9d:82:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Jun 16 04:00:45 2025 GMT
Not After : Jun 17 04:00:45 2025 GMT
Subject: CN=79590751ac2c0cdc0f2d1c3c31294e0d20685e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:ab:e5:c2:6e:70:85:44:00:d5:b4:e4:6c:
6c:53:35:80:51:55:91:9b:99:57:1e:d4:5e:cc:72:
3f:da:99:45:43:20:54:89:1b:e5:3a:b4:65:b5:0e:
41:3c:ab:6d:61:4a:e8:87:a1:df:90:62:51:31:db:
29:83:dd:b4:0c:a0:7b:b4:bf:16:ba:fd:e3:9a:42:
93:b9:6e:f4:fc:db:22:55:85:2c:73:25:9a:a6:07:
65:03:29:73:3c:77:22:d8:1b:64:cc:54:b3:07:93:
da:6a:a7:2a:ef:c8:a2:02:7b:c8:a1:b3:d0:08:2b:
4a:5a:50:7a:80:83:a9:22:37:c9:2d:b8:b8:82:b9:
69:c6:eb:b8:43:02:df:d5:2d:64:b9:99:8e:b0:a7:
21:d6:e8:4b:ae:32:f6:ad:ea:e5:67:5c:10:92:84:
6f:b7:d6:c7:d0:53:b9:10:28:b3:d8:d1:a7:3e:45:
86:66:00:47:6c:b9:ef:6f:65:b2:9d:bd:6e:2a:3b:
56:d7:4c:3f:0d:93:35:40:23:8c:38:6b:60:10:ae:
48:c0:b9:e8:13:4e:5d:d5:d2:bd:2c:72:b6:5f:3e:
1d:51:9e:58:27:18:9a:86:93:6e:1e:7f:a8:ce:b7:
5c:95:e0:34:fb:8e:26:88:21:59:54:99:4f:a6:62:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:59:07:51:AC:2C:0C:DC:0F:2D:1C:3C:31:29:4E:0D:20:68:5E:7C
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a4:33:7b:ba:1b:ed:05:b8:1d:61:57:77:80:7c:53:b4:78:
d2:71:4d:dc:8f:eb:6c:c6:bf:e5:36:77:6e:cd:3b:79:67:17:
1e:65:70:40:53:34:f3:97:4d:e2:3c:11:27:81:86:b7:c0:1a:
a6:00:b7:17:47:ed:36:1d:1c:97:89:3b:4c:1a:8b:28:1c:44:
1f:f6:af:af:a4:95:c2:44:5a:83:39:18:90:d9:99:a9:4f:3c:
9d:03:cd:ea:09:6c:95:34:b4:15:af:4d:6f:e1:48:f2:e8:a5:
3a:43:57:1d:4e:39:90:7c:b9:6f:61:38:9f:0c:6f:02:7c:27:
93:b7:31:de:d5:8b:2e:44:d4:6b:17:33:ed:5b:9b:ec:fd:c7:
3f:a4:90:4e:f1:bc:84:6f:70:38:f9:61:02:c5:03:60:ad:bf:
a5:de:46:b5:17:44:5c:0b:49:1f:7e:99:7a:5a:78:bd:bd:3d:
79:83:bd:d9:43:57:87:fd:c2:57:df:11:90:be:8d:61:ec:ee:
57:32:cf:4d:29:39:84:d4:3e:c3:3f:28:c5:22:5e:08:96:44:
4a:db:36:1f:c0:90:07:54:2f:0e:12:84:d3:c1:bb:f9:58:03:
5f:1b:ae:5d:24:1f:48:6a:14:b7:9d:12:72:43:ed:db:1c:3e:
b2:d4:46:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25ZArxBdgnDBJx6GenYKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzg5MTEwMGU1MDBmYjVjNjRmMzBmMTYwM2ZlNTQ1ZGFi
NDkwMTYwHhcNMjUwNjE2MDQwMDQ1WhcNMjUwNjE3MDQwMDQ1WjAzMTEwLwYDVQQD
Eyg3OTU5MDc1MWFjMmMwY2RjMGYyZDFjM2MzMTI5NGUwZDIwNjg1ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LGr5cJucIVEANW05GxsUzWAUVWR
m5lXHtRezHI/2plFQyBUiRvlOrRltQ5BPKttYUroh6HfkGJRMdspg920DKB7tL8W
uv3jmkKTuW70/NsiVYUscyWapgdlAylzPHci2BtkzFSzB5Paaqcq78iiAnvIobPQ
CCtKWlB6gIOpIjfJLbi4grlpxuu4QwLf1S1kuZmOsKch1uhLrjL2rerlZ1wQkoRv
t9bH0FO5ECiz2NGnPkWGZgBHbLnvb2Wynb1uKjtW10w/DZM1QCOMOGtgEK5IwLno
E05d1dK9LHK2Xz4dUZ5YJxiahpNuHn+ozrdcleA0+44miCFZVJlPpmIUCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlZB1GsLAzcDy0cPDEpTg0gaF58MB8GA1UdIwQY
MBaAFKLIkRAOUA+1xk8w8WA/5UXatJAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTIt
OGNhMGM5MGY1NzdlLzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTItOGNhMGM5MGY1Nzdl
LzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqQze7ob
7QW4HWFXd4B8U7R40nFN3I/rbMa/5TZ3bs07eWcXHmVwQFM085dN4jwRJ4GGt8Aa
pgC3F0ftNh0cl4k7TBqLKBxEH/avr6SVwkRagzkYkNmZqU88nQPN6glslTS0Fa9N
b+FI8uilOkNXHU45kHy5b2E4nwxvAnwnk7cx3tWLLkTUaxcz7Vub7P3HP6SQTvG8
hG9wOPlhAsUDYK2/pd5GtRdEXAtJH36Zelp4vb09eYO92UNXh/3CV98RkL6NYezu
VzLPTSk5hNQ+wz8oxSJeCJZESts2H8CQB1QvDhKE08G7+VgDXxuuXSQfSGoUt50S
ckPt2xw+stRGRQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:24:21 2025 by rpki-client