Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: 5v9qZKdycrd+2P+sdL+Vu5kdh+tVbPd4kukeyPeoHFY=
Subject key identifier: 6B:7D:C4:13:2F:B3:09:BE:6C:96:F8:03:A0:AB:00:80:B3:D3:1F:9D
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 019A51F5B6B76425B7ACBC766D6B2EF4EF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 169D
Signing time: Wed 05 Nov 2025 03:00:48 +0000
Manifest this update: Wed 05 Nov 2025 03:00:48 +0000
Manifest next update: Thu 06 Nov 2025 03:00:48 +0000
Files and hashes: 1: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: 7BJS3ETA6sPUjYVwH827CxAS9tTi4/B7Mo84t/vVnKs=)
2: oHES2kIQSwcnceUnSAnzOBK0UoA.roa (hash: R0HeMmAONLyIzPgR+arZikegwIRj9xGz1jODUH2wdeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b6:b7:64:25:b7:ac:bc:76:6d:6b:2e:f4:ef:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Nov 5 03:00:48 2025 GMT
Not After : Nov 6 03:00:48 2025 GMT
Subject: CN=6b7dc4132fb309be6c96f803a0ab0080b3d31f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:4e:a9:e7:12:f8:e0:9a:8b:bb:01:b0:24:
f1:ea:6b:b2:8e:60:9c:8c:ea:53:ab:70:af:7f:ba:
be:c8:a4:96:67:ac:cb:c2:22:a7:29:ca:f4:59:97:
e0:1c:1f:40:b3:b2:98:b6:9c:83:92:2e:74:97:b8:
c1:a0:65:f2:ae:05:f5:e6:c2:94:e8:8e:75:21:dd:
eb:0f:d1:6c:7b:69:d4:59:b7:59:33:b3:c2:b8:b4:
bc:f9:f8:58:f4:14:b0:f8:fb:8a:93:6d:85:cf:db:
e4:84:67:a8:5c:b2:fe:60:f2:ee:f5:f9:2d:cb:98:
cc:95:4c:07:04:42:06:8c:6b:2b:14:40:34:c0:37:
f4:37:95:d9:c3:96:f6:37:2b:99:32:af:b3:8c:a0:
16:ec:51:51:77:1b:46:18:36:65:d7:ee:64:9e:8c:
6a:aa:d7:ae:86:2a:5b:55:99:5b:3f:1b:28:c6:d5:
ef:d6:d5:9a:86:16:9e:99:3e:0e:a7:d7:10:a1:63:
1f:bf:0d:8e:9c:d7:be:1a:49:cc:0e:2d:01:02:14:
11:ab:bf:cc:69:44:22:fe:b2:63:e5:a2:5b:0d:08:
81:20:78:62:d6:25:e2:a6:13:73:1b:8e:be:08:77:
80:b5:30:9f:78:38:d8:dc:d8:9a:bc:22:0f:12:42:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:C4:13:2F:B3:09:BE:6C:96:F8:03:A0:AB:00:80:B3:D3:1F:9D
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2c:a3:f1:5c:74:4d:d0:25:18:88:b4:f4:96:4d:12:d9:6a:
20:b7:ef:56:65:d6:fd:01:11:fb:89:fe:7c:75:b9:ef:18:fd:
02:7b:1d:e2:6f:33:56:ed:e8:83:93:af:bc:43:3e:89:3f:6e:
93:6f:c6:48:39:dc:fa:c2:ee:96:e7:fb:84:bc:30:e3:5d:db:
44:6b:f7:23:97:76:a2:cc:ea:09:4c:60:d4:69:29:61:5e:82:
77:cd:a7:06:37:ed:2f:ee:94:6b:94:83:e1:fa:6a:16:5c:5b:
bd:bd:27:bb:a9:a5:a4:ae:d6:96:f0:07:6c:7a:88:27:ae:7d:
95:be:2b:43:97:7c:35:89:36:76:de:30:31:fa:a2:58:04:f7:
9e:31:d0:30:58:06:58:24:52:9b:91:01:7c:a7:bb:d2:1b:4a:
e3:31:1e:76:81:34:1d:7a:1b:49:e0:cb:f6:d9:72:59:b0:3a:
db:71:10:b8:6d:45:b0:af:a1:45:af:6e:6c:a8:88:a1:07:27:
d6:c2:66:42:0b:e8:e7:7a:50:38:2b:93:39:59:b3:46:b8:b5:
8e:7c:d5:43:d2:78:32:c8:c3:30:d7:f9:d9:4a:b5:b2:60:95:
54:03:fd:af:bc:83:19:da:e2:74:3d:c7:e1:2c:6e:07:14:c0:
db:b8:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:28 2025 by rpki-client