
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: jQM3td5+LsDEX8VuXW4IZtMH83Y04n6esPLFx/vfi10=
Subject key identifier: 12:3B:A3:61:83:0F:EB:AA:74:ED:FA:66:B1:A2:06:69:6F:AA:F6:7D
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 01987C403CCCB9114C8227E548FC3AE153E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 22:00:41 +0000
Manifest this update: Tue 05 Aug 2025 22:00:41 +0000
Manifest next update: Wed 06 Aug 2025 22:00:41 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: ymDDliRpKCbQRyyVtaKrZVykuom6GBDJeI2h1Ju8AhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:3c:cc:b9:11:4c:82:27:e5:48:fc:3a:e1:53:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Aug 5 22:00:41 2025 GMT
Not After : Aug 6 22:00:41 2025 GMT
Subject: CN=123ba361830febaa74edfa66b1a206696faaf67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:8e:ad:d4:c8:da:48:55:67:1a:03:10:d5:
c4:ac:a6:33:6b:b2:07:3c:53:c7:8c:4c:41:29:37:
eb:82:71:58:68:fe:65:db:21:72:0f:26:0b:09:f0:
0e:5f:b3:58:5e:65:8e:59:80:8b:b0:37:89:4b:c0:
fa:4d:ca:30:c3:87:8a:9f:9a:25:c3:f3:10:c2:e3:
d2:69:ff:c1:80:a0:67:18:03:4a:92:a2:47:f7:25:
f0:d9:94:21:96:4a:87:e1:81:c7:bd:e5:9c:61:08:
99:52:85:b2:68:20:f4:58:3d:3e:fd:76:50:9a:44:
2c:54:25:6d:a9:98:26:e6:c3:06:89:1e:72:f4:10:
b7:95:4d:a4:1f:71:2e:64:b1:90:3d:54:9b:93:93:
af:97:3f:0a:81:2b:32:44:f2:16:61:d8:c3:8e:e8:
03:14:f2:b7:b0:dd:06:74:09:65:ad:cf:db:f7:4f:
da:7a:32:5b:06:bd:32:5f:05:18:5c:7a:bd:3b:b0:
3f:01:3f:5c:13:70:10:e9:a8:82:60:34:1c:8a:4c:
ef:ab:ec:d2:be:ae:10:3c:2c:18:2e:d3:5b:52:20:
2b:b3:fa:5c:07:fa:88:46:6b:b5:73:56:6f:82:ee:
e8:16:3b:aa:df:3f:29:dc:62:94:19:7a:c7:97:e7:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:A3:61:83:0F:EB:AA:74:ED:FA:66:B1:A2:06:69:6F:AA:F6:7D
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5f:99:9d:af:81:6f:17:8d:91:a4:6f:14:35:cf:d0:b7:d0:
a1:06:ed:ff:77:3e:c7:fa:65:9b:da:59:6c:df:5b:26:72:93:
9e:29:fb:4f:ba:c9:6b:71:4d:10:93:b6:4b:85:01:4f:88:e7:
4c:93:d4:d4:ff:6c:1a:25:8b:e2:0e:21:f4:86:27:76:50:dc:
3f:76:9b:c4:6f:95:93:76:6b:88:06:21:56:e8:04:41:2d:d7:
1b:07:96:6b:30:9c:a5:b5:87:5b:57:fa:01:56:a0:1c:a2:d9:
3a:af:72:5d:f3:38:da:4a:e3:7d:57:05:36:99:83:cc:b4:ec:
ef:0e:72:6a:5b:45:66:a4:c8:92:e1:cb:53:f0:47:63:a2:40:
99:f4:f0:87:3d:04:6f:40:53:55:69:c6:27:72:08:a4:e4:2b:
2b:f5:b2:f7:38:24:6d:18:72:2b:6b:84:16:97:66:2f:8d:5e:
b9:bb:a8:27:0e:eb:0a:39:1b:6b:90:3d:a2:bd:43:a0:78:ff:
fb:76:b2:da:2f:3c:89:c6:15:46:ed:78:16:b4:5b:62:24:2b:
86:2a:23:25:84:28:d6:5b:ff:88:78:ff:30:aa:a3:3c:89:fa:
c9:bc:f8:e5:93:b1:cf:c7:0b:9c:70:a1:2d:40:b5:6f:e9:29:
74:03:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:22 2025 by rpki-client