Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: R3ubPtZuyNsHsCh1xGa1hFMdbmDgK1aUvUwuqLjVQIE=
Subject key identifier: A9:A4:A6:4E:91:D8:EC:98:57:15:DF:AD:14:84:C2:D9:93:24:0C:D7
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 0197688528547DF1E6EAA1F24C6906BF02EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 151B
Signing time: Fri 13 Jun 2025 09:00:46 +0000
Manifest this update: Fri 13 Jun 2025 09:00:46 +0000
Manifest next update: Sat 14 Jun 2025 09:00:46 +0000
Files and hashes: 1: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: SESNk4zxTK8PHw23pFr1vqtQaW3vyrU4FAfuxP3aJEU=)
2: oHES2kIQSwcnceUnSAnzOBK0UoA.roa (hash: R0HeMmAONLyIzPgR+arZikegwIRj9xGz1jODUH2wdeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:28:54:7d:f1:e6:ea:a1:f2:4c:69:06:bf:02:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Jun 13 09:00:46 2025 GMT
Not After : Jun 14 09:00:46 2025 GMT
Subject: CN=a9a4a64e91d8ec985715dfad1484c2d993240cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:bf:6c:36:7b:86:3a:ec:c5:9e:ce:60:97:
0b:50:de:64:ba:ce:3a:28:b3:e2:25:74:37:4c:b6:
2c:0b:4b:92:3d:01:13:ac:9c:61:a4:b5:32:4c:7e:
19:f3:6d:41:91:cb:4f:79:a8:ce:4a:b1:f9:3b:ce:
df:c3:2e:ad:0b:67:5c:c0:6b:7a:44:15:f9:1b:2a:
41:e0:91:03:69:d5:69:5e:05:49:28:f8:07:69:4f:
7a:f9:cc:b1:d4:24:a9:28:fd:c6:0f:2a:96:a6:69:
e6:3e:e5:85:24:38:87:a7:64:58:2d:bd:04:cf:64:
ac:8b:0a:4c:ed:b4:ac:17:b9:38:e5:89:da:20:92:
12:5b:ac:74:52:f0:8c:36:b5:be:3a:51:fe:83:59:
8f:05:9f:33:20:f9:c4:41:3f:b7:ed:23:e6:07:b6:
16:47:bd:d5:72:2e:e9:8e:07:f5:ef:4e:8c:be:5e:
07:e5:2d:43:2c:7e:52:22:a6:6b:85:f0:68:9a:9f:
56:3c:92:43:36:25:51:b2:60:35:39:0c:f1:99:8b:
e7:da:22:a8:41:9f:20:7b:df:ff:b5:31:5a:de:c1:
8f:43:cb:93:3d:0f:23:08:8e:17:49:59:1e:7f:cf:
99:dc:4e:c1:98:f5:73:2d:e2:3b:ba:a0:af:0e:16:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:A6:4E:91:D8:EC:98:57:15:DF:AD:14:84:C2:D9:93:24:0C:D7
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9a:f9:48:5f:00:e2:c6:6e:e9:e4:e6:43:8c:56:f4:ff:8e:
b1:75:8e:05:86:8a:09:42:65:00:aa:27:87:3c:8b:9f:58:15:
14:89:4e:0a:e2:69:d9:44:55:04:57:ee:fc:fb:60:22:ce:d4:
7a:68:91:d9:63:ca:72:d7:47:f0:e8:ec:2d:75:07:a3:88:bc:
3e:ee:76:10:ce:98:9b:4a:18:db:4f:d3:d8:5e:7c:74:e8:d8:
30:22:4b:dd:e5:75:47:aa:7c:e2:99:45:40:f5:04:92:29:68:
c1:e1:27:e9:e2:73:80:ce:b3:ff:67:b1:0d:74:8b:08:7c:1f:
fb:08:a5:6a:29:9e:99:ac:9c:f4:7a:06:28:15:3e:e6:6e:4b:
66:34:28:f1:93:82:c2:92:3f:ef:77:fd:20:a8:eb:cd:c9:1a:
f3:ea:15:1d:52:38:1d:75:a1:56:a2:8d:ad:df:4b:e4:f2:9b:
9d:2e:fa:5c:dc:8d:47:27:9c:0d:82:24:bc:3a:9c:75:63:99:
2d:71:89:55:18:58:2e:4d:fe:7f:51:10:08:0e:dc:2b:0d:6b:
f1:80:46:84:e7:c0:c6:9f:c0:dd:d9:4e:a9:ea:89:ba:9d:9d:
6a:7e:01:cc:cb:b6:a4:79:90:0e:f6:92:7c:e9:9f:49:1d:dd:
8c:31:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:07 2025 by rpki-client