Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: 2X9OzDKNL6yR1B0wBkImMyCWtSic+7vxDI54Q2uvhms=
Subject key identifier: 36:0A:12:06:78:F7:C9:A1:22:D1:08:DA:B6:75:B9:7A:12:B1:74:6A
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 01989E5EAD28DC0DDB4C26703BAC56C7DF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 13:01:01 +0000
Manifest this update: Tue 12 Aug 2025 13:01:01 +0000
Manifest next update: Wed 13 Aug 2025 13:01:01 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: S1hapHoRNk9Q3slJgJVXztU4AosdGbL5/KaEhaMhhQg=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:ad:28:dc:0d:db:4c:26:70:3b:ac:56:c7:df:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Aug 12 13:01:01 2025 GMT
Not After : Aug 13 13:01:01 2025 GMT
Subject: CN=360a120678f7c9a122d108dab675b97a12b1746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:e2:0a:ad:61:e6:e2:50:82:19:3b:d4:78:
3d:1e:16:e9:9f:ef:31:41:fb:36:77:0c:43:ec:ee:
20:5f:55:e4:c9:34:87:93:78:cb:f0:81:65:35:43:
fb:ea:e3:83:43:ed:5c:29:e7:c3:e6:b4:29:05:b9:
10:f9:ba:fe:c1:14:dc:78:95:79:d7:ed:4f:dd:a0:
13:6e:2e:e7:98:bd:e5:09:1b:51:72:b8:c8:29:cf:
2c:4b:78:11:09:e5:fb:40:f9:3a:52:20:e2:be:d1:
42:f8:72:d2:0c:f5:f8:3d:d1:a0:fc:c7:05:a3:3c:
b1:77:6c:f1:f1:d1:84:1c:7a:44:f0:3b:25:00:90:
d8:37:48:16:91:03:5f:e9:b3:b5:84:0c:85:85:5e:
eb:30:14:b4:50:7a:e8:80:a8:01:7c:05:43:22:e0:
ba:6a:93:fa:73:47:23:d4:6f:07:04:c4:b9:a1:98:
6e:1b:34:f1:54:a5:51:e0:0c:c9:cb:1e:e2:dc:89:
31:ae:07:c8:9a:89:d0:65:45:81:8e:e8:3d:bb:4b:
9b:6a:85:e7:65:1e:0e:bf:30:92:20:8f:72:5c:b5:
8e:40:df:a9:72:58:9c:f5:27:a3:7d:8e:9c:c6:a1:
be:de:ef:b0:69:2c:8e:af:55:c9:db:84:4c:ef:35:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0A:12:06:78:F7:C9:A1:22:D1:08:DA:B6:75:B9:7A:12:B1:74:6A
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d6:67:de:4d:fd:ad:fe:80:3b:76:d7:d4:fa:0b:f8:1f:21:
ba:1a:06:8d:09:c8:06:e7:64:e7:20:5e:50:da:ef:ad:76:9b:
ea:1c:8b:76:0b:69:dd:1e:cd:4c:65:ea:2b:3d:6b:18:80:a9:
d2:01:81:06:bc:fc:37:c2:bc:6c:21:fd:39:d4:5a:22:fc:ed:
58:77:aa:59:c5:56:e8:c1:6c:62:6e:35:81:9f:4d:9d:a5:ed:
67:37:4b:81:00:b6:f8:18:e7:e9:4d:fe:bf:de:07:e8:7c:01:
30:95:a7:32:78:6b:d0:a6:9b:96:9e:88:8e:50:26:5c:aa:a6:
92:b3:96:a5:e9:fb:01:31:53:54:b8:e0:d1:66:b3:7d:55:c5:
71:ff:38:7e:fa:70:1a:80:3e:91:dc:05:af:48:76:bd:ca:e0:
42:3c:5a:6e:80:2f:1f:6c:9b:ef:72:05:d3:e9:21:ce:5d:aa:
ab:be:b6:a1:be:3c:c3:69:c7:f9:56:0c:71:b6:d7:25:8b:fa:
43:16:64:74:e6:2f:de:b9:31:47:03:39:79:32:34:24:cd:0f:
d6:ae:62:d6:fd:90:4e:26:59:91:ef:75:c9:95:d5:04:99:c4:
9b:37:48:bf:75:e6:82:b3:d0:43:4c:62:af:8b:df:71:f3:17:
f1:54:6c:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieXq0o3A3bTCZwO6xWx98cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzc4ZjMzZThlMTE4NzMyNzY2N2ZhOTRmZDc0NDZiOGQ5
MWU1YjQwHhcNMjUwODEyMTMwMTAxWhcNMjUwODEzMTMwMTAxWjAzMTEwLwYDVQQD
EygzNjBhMTIwNjc4ZjdjOWExMjJkMTA4ZGFiNjc1Yjk3YTEyYjE3NDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9riCq1h5uJQghk71Hg9Hhbpn+8x
Qfs2dwxD7O4gX1XkyTSHk3jL8IFlNUP76uODQ+1cKefD5rQpBbkQ+br+wRTceJV5
1+1P3aATbi7nmL3lCRtRcrjIKc8sS3gRCeX7QPk6UiDivtFC+HLSDPX4PdGg/McF
ozyxd2zx8dGEHHpE8DslAJDYN0gWkQNf6bO1hAyFhV7rMBS0UHrogKgBfAVDIuC6
apP6c0cj1G8HBMS5oZhuGzTxVKVR4AzJyx7i3IkxrgfImonQZUWBjug9u0ubaoXn
ZR4OvzCSII9yXLWOQN+pclic9SejfY6cxqG+3u+waSyOr1XJ24RM7zWH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYKEgZ498mhItEI2rZ1uXoSsXRqMB8GA1UdIwQY
MBaAFDrHjzPo4RhzJ2Z/qU/XRGuNkeW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEt
ZGMwMWY0YjRiYWU0LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEtZGMwMWY0YjRiYWU0
LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdZn3k39
rf6AO3bX1PoL+B8huhoGjQnIBudk5yBeUNrvrXab6hyLdgtp3R7NTGXqKz1rGICp
0gGBBrz8N8K8bCH9OdRaIvztWHeqWcVW6MFsYm41gZ9NnaXtZzdLgQC2+Bjn6U3+
v94H6HwBMJWnMnhr0Kablp6IjlAmXKqmkrOWpen7ATFTVLjg0WazfVXFcf84fvpw
GoA+kdwFr0h2vcrgQjxaboAvH2yb73IF0+khzl2qq762ob48w2nH+VYMcbbXJYv6
QxZkdOYv3rkxRwM5eTI0JM0P1q5i1v2QTiZZke91yZXVBJnEmzdIv3XmgrPQQ0xi
r4vfcfMX8VRsIw==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:58 2025 by rpki-client