Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: Bi5pmGB8a4GkJsXvrUI0KwNQmK026LM0AXq3D+4M0Iw=
Subject key identifier: 31:81:8D:7B:73:D0:5E:62:1B:3C:D8:19:1D:97:67:4B:8B:21:F2:EB
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 019A4D73BF248510AF5F87F48BCA00E79BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:22 +0000
Manifest this update: Tue 04 Nov 2025 06:00:22 +0000
Manifest next update: Wed 05 Nov 2025 06:00:22 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: rSd+5nXLcGL5y8l0qBieN+/IDWOFWM1BgdKJKD3O3SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:bf:24:85:10:af:5f:87:f4:8b:ca:00:e7:9b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Nov 4 06:00:22 2025 GMT
Not After : Nov 5 06:00:22 2025 GMT
Subject: CN=31818d7b73d05e621b3cd8191d97674b8b21f2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:d9:cf:18:97:c1:b8:68:67:2c:da:e4:b8:
40:70:9d:0c:56:f2:b6:ae:4f:30:0a:f0:5d:b8:6a:
e4:34:36:19:c0:5d:8f:a1:fe:fe:67:6c:31:b9:d5:
3b:be:08:3d:49:26:13:f9:77:77:30:79:27:0a:09:
cc:a6:91:55:c1:69:1d:55:fb:c9:ce:02:f6:e0:b3:
ce:e4:5c:f2:c4:97:cf:e6:37:79:a3:6f:ae:83:27:
3a:b6:0c:a3:72:c6:f5:47:61:45:98:f9:25:7b:34:
2b:f9:c2:96:2a:70:21:68:29:ef:73:67:36:94:84:
ce:a4:cc:55:34:37:ff:36:17:88:bf:bd:1c:6a:49:
9d:ef:a8:fc:c4:bc:23:25:53:5f:75:2c:aa:73:78:
7e:0d:da:de:a4:06:a5:9c:a5:87:25:16:34:f6:af:
1a:af:9c:59:e3:7c:0c:10:4b:76:a5:87:cd:43:84:
0b:98:47:d2:79:6c:62:7c:d8:f3:2a:3e:58:42:c5:
e0:7e:10:28:0f:6f:50:ad:38:33:56:04:b1:c0:15:
2f:15:55:06:96:e5:72:bf:1b:eb:72:a2:b1:74:4c:
2d:41:f6:1b:7a:2a:a8:25:83:59:2f:64:3d:f7:6a:
af:4a:e9:1c:9c:ad:52:eb:e7:7a:5c:29:f6:92:31:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:81:8D:7B:73:D0:5E:62:1B:3C:D8:19:1D:97:67:4B:8B:21:F2:EB
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:92:f5:80:57:dd:87:f3:0b:fd:33:84:73:61:ed:8c:1f:22:
0c:f3:ac:03:ea:fa:45:dd:79:81:54:95:b0:fa:17:0b:4e:1b:
88:1a:09:be:41:cf:b0:a4:de:08:10:eb:7d:f7:85:d6:fd:24:
c5:df:a1:0a:96:3a:bc:0a:a2:77:8d:96:45:43:92:55:03:eb:
ab:76:3c:20:6f:14:e7:32:c6:b8:d7:d0:06:b7:e0:7e:85:a2:
62:ec:6b:17:c2:c9:7f:e2:ba:e0:13:f9:cb:41:d1:fb:3d:1e:
ac:3b:70:40:78:85:30:2d:8b:a8:88:26:7b:5c:97:52:cb:d2:
1a:82:d4:a9:8c:5a:4e:90:88:4d:03:14:e8:23:af:b9:16:93:
74:cd:a3:bd:7e:63:37:86:14:af:87:f3:4e:93:81:fc:a8:12:
b8:6d:b9:f8:53:c3:19:70:31:62:7f:ec:0d:5b:b1:cc:ef:e1:
1a:35:a9:17:b7:8c:6e:b2:81:5c:fc:55:59:13:2f:b5:f2:46:
08:cc:e2:23:5d:f7:5f:c3:af:ea:ca:eb:a6:88:17:00:b5:fc:
bd:9c:94:5e:c1:3e:35:3a:45:01:b5:1f:20:0c:7e:48:32:cd:
81:ad:d0:0e:b0:53:de:5a:b8:d8:9b:9e:d2:cf:5a:5d:81:ca:
2b:0d:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:04 2025 by rpki-client