Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: h/5her3VKnjPTwQa9FYqNsgJWgDsbaQ52e8Cu5DX4hU=
Subject key identifier: C5:D6:E6:BC:36:02:AC:55:B8:B2:6B:66:E1:92:78:86:B4:D0:65:85
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 019A4EF4BFCA9B8F1351577D43F63A6F6006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: ykjrdotBDHFlTzVD2TkcYVXQbk3s56dddiQb86q9XW4=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bf:ca:9b:8f:13:51:57:7d:43:f6:3a:6f:60:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=c5d6e6bc3602ac55b8b26b66e1927886b4d06585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:7b:93:34:21:93:83:82:41:00:ca:36:2f:
62:f4:60:a3:e0:09:f0:aa:c9:06:19:aa:44:24:11:
8e:74:65:e0:4e:ea:6b:08:7a:ee:cf:27:9c:c1:2a:
88:4d:3c:45:60:cd:a0:a7:72:3f:b0:eb:5e:39:b8:
a1:83:0f:ae:21:38:ad:f4:14:14:ca:b6:64:8f:9c:
e9:31:c8:d8:07:64:13:e6:61:34:ff:92:82:ba:3f:
a4:77:16:fc:31:dc:92:37:29:d3:c9:c5:d0:53:4f:
64:8a:e9:d5:9e:1e:75:cf:21:23:37:1e:6a:3c:6e:
35:58:4b:b3:eb:2d:0c:c0:bc:ae:3c:4f:db:d3:a0:
d5:d1:4e:19:22:c2:63:f1:7b:3b:8f:ae:5a:bd:0c:
d5:ab:91:51:db:7f:00:af:46:7e:89:f0:60:b8:25:
b8:25:ae:14:32:b6:fa:3e:6c:81:a3:6b:8f:41:0b:
99:5b:36:17:18:0e:5c:6d:2f:4b:7d:d7:48:2f:24:
3b:e6:7d:c1:7c:50:43:33:24:c6:35:3d:96:a0:e6:
f3:03:bf:45:14:58:94:9f:7c:9f:ab:d3:a8:5c:61:
62:f3:3e:1a:55:a8:e5:78:6e:df:cb:7b:08:54:31:
54:f0:fa:b1:9b:43:b5:66:e9:11:3e:87:7b:17:e9:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D6:E6:BC:36:02:AC:55:B8:B2:6B:66:E1:92:78:86:B4:D0:65:85
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:45:44:3d:c4:5f:aa:26:81:d0:b5:7c:d0:19:fb:8b:3a:ca:
dd:f2:a6:3a:16:43:8a:78:f4:46:a5:77:eb:6e:e0:24:b1:39:
27:8c:7a:93:56:e0:bc:f6:6c:76:17:3a:4e:92:16:b4:98:fe:
29:c2:91:11:4c:61:83:4d:24:30:46:b8:c9:bf:21:30:18:3c:
d4:f7:4a:17:c0:1e:fc:85:30:03:1e:08:01:12:39:c8:67:c5:
05:f5:0c:06:3a:61:61:fc:c2:26:88:7b:ff:94:fe:cc:94:5b:
3a:d4:25:cd:37:f4:4e:f8:5c:05:db:1a:c2:88:80:2f:68:06:
fe:ae:9f:b3:13:55:32:5b:08:5e:8d:d3:f5:6c:91:7f:22:58:
f8:0a:54:97:84:47:51:08:70:74:95:44:1e:a3:3e:c2:4f:0f:
0b:09:ad:c3:f0:64:be:42:33:ad:73:aa:f3:c4:7b:ff:08:eb:
74:f5:40:9d:4c:65:b6:6f:d5:20:f9:52:f0:e6:bf:e4:18:b4:
11:8e:f8:ef:03:87:e4:31:1a:5d:e1:02:30:c9:fe:a4:46:f8:
d3:39:03:6b:02:28:31:03:3c:f4:22:dc:73:42:b1:9f:64:93:
54:df:23:3f:91:c5:39:20:86:c9:c4:c7:68:92:96:68:9f:f8:
0e:48:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:43:00 2025 by rpki-client