Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: EpC0NALNI8m7gwvJhtmyUoCHCyYZE4NFv6Y8llZcYsQ=
Subject key identifier: 0C:8D:54:5D:8B:71:C6:29:55:E9:90:34:D9:72:24:34:05:D4:0D:25
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 01987306ECFC87DFB4790B570C4DD006F6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0A8D
Signing time: Mon 04 Aug 2025 03:01:30 +0000
Manifest this update: Mon 04 Aug 2025 03:01:30 +0000
Manifest next update: Tue 05 Aug 2025 03:01:30 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: TdyTZNfxaTefnoGaU2nOZE5BV0K4sjfeuy5YEjvVMsk=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:ec:fc:87:df:b4:79:0b:57:0c:4d:d0:06:f6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Aug 4 03:01:30 2025 GMT
Not After : Aug 5 03:01:30 2025 GMT
Subject: CN=0c8d545d8b71c62955e99034d972243405d40d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:26:29:6f:37:a5:18:aa:ed:07:8a:65:eb:
d2:4f:af:3c:f2:cb:46:1c:5f:98:41:61:7b:de:ce:
d7:81:96:24:a8:19:14:6a:76:37:90:bb:e6:bc:36:
ec:81:c2:4a:55:3a:bf:33:7d:e9:1b:42:02:f5:76:
0a:26:c6:7e:12:2e:ce:b5:00:ad:5c:4d:dc:8e:04:
0d:52:ab:7c:de:4f:9e:9a:28:a3:b5:3a:a3:15:32:
30:77:31:b2:7b:07:09:9e:3a:e8:8b:db:a8:51:6f:
6f:24:54:00:49:3d:58:53:a7:bc:85:ce:0d:46:c0:
14:6f:ff:e7:9b:88:a0:43:bb:d6:d9:26:70:aa:a7:
b1:45:3b:9f:f9:79:ba:80:f1:3a:2d:fe:02:14:8b:
19:7c:e1:c9:78:2d:18:76:43:4f:a6:7b:67:14:ee:
a8:00:a2:cc:b6:b7:41:6b:06:67:96:81:45:53:68:
73:1c:19:3e:35:80:f0:19:df:a1:35:32:32:2a:b6:
26:41:97:a8:71:da:de:3d:70:7e:3c:c0:dd:e9:16:
2b:fa:ad:36:d6:78:0d:46:aa:1e:1b:cd:dc:a0:ae:
09:44:07:6e:58:a5:50:6d:7b:14:3b:ba:59:5c:90:
ac:b1:f6:b5:46:79:f4:67:14:99:39:1d:4e:94:e7:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8D:54:5D:8B:71:C6:29:55:E9:90:34:D9:72:24:34:05:D4:0D:25
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:51:ab:c4:ee:0d:a3:eb:07:de:2f:3e:09:45:64:57:f2:ca:
fe:30:11:ff:8f:84:eb:5f:76:a1:2a:8f:38:a4:32:85:05:3e:
aa:56:4d:54:f8:8c:38:ed:2d:94:62:c7:58:5b:66:62:46:8a:
fa:fe:42:0f:7e:1a:70:02:77:f5:76:55:6a:1f:14:fb:bb:6f:
87:28:4f:f7:96:3f:9f:90:bf:d2:f3:9a:44:e0:07:c7:0c:1b:
f5:90:3c:0b:8b:7c:c9:d5:ba:d1:09:18:3a:4c:17:b7:55:bf:
d7:7c:4e:a2:7d:3a:71:2c:98:14:34:f1:a4:d0:7d:77:f7:55:
6c:d9:f8:9e:8b:ce:d7:d8:d7:37:af:30:32:ec:4e:d2:cc:73:
e3:a4:98:0d:05:28:13:87:01:67:99:06:97:93:26:ca:27:29:
83:b8:b5:ce:64:d7:dd:2e:7b:cb:bc:61:f4:61:52:8e:01:3a:
21:4f:e3:20:cd:45:b9:cc:66:0f:1a:1a:63:d9:1f:3d:bd:7e:
15:b0:08:59:44:fb:b1:54:c2:7d:b1:78:9b:1f:7c:e5:dd:63:
f1:4f:74:34:17:95:a9:43:7e:1a:3e:df:d5:b1:5a:49:00:fb:
1c:e8:47:98:31:7b:2c:e1:bd:a2:54:b8:d9:ed:4b:f3:74:6f:
95:05:40:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBuz8h9+0eQtXDE3QBvakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzQ0NDZiYTk5YjQzODkxZWNmMWY3ZmEyY2RiMDJlMTRh
MzQ0ZjMwHhcNMjUwODA0MDMwMTMwWhcNMjUwODA1MDMwMTMwWjAzMTEwLwYDVQQD
EygwYzhkNTQ1ZDhiNzFjNjI5NTVlOTkwMzRkOTcyMjQzNDA1ZDQwZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0wmKW83pRiq7QeKZevST6888stG
HF+YQWF73s7XgZYkqBkUanY3kLvmvDbsgcJKVTq/M33pG0IC9XYKJsZ+Ei7OtQCt
XE3cjgQNUqt83k+emiijtTqjFTIwdzGyewcJnjroi9uoUW9vJFQAST1YU6e8hc4N
RsAUb//nm4igQ7vW2SZwqqexRTuf+Xm6gPE6Lf4CFIsZfOHJeC0YdkNPpntnFO6o
AKLMtrdBawZnloFFU2hzHBk+NYDwGd+hNTIyKrYmQZeocdrePXB+PMDd6RYr+q02
1ngNRqoeG83coK4JRAduWKVQbXsUO7pZXJCssfa1Rnn0ZxSZOR1OlOfXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyNVF2LccYpVemQNNlyJDQF1A0lMB8GA1UdIwQY
MBaAFDrERGupm0OJHs8ff6LNsC4Uo0TzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMt
MDJhN2Y2ZGY2ODEwLzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMtMDJhN2Y2ZGY2ODEw
LzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1GrxO4N
o+sH3i8+CUVkV/LK/jAR/4+E6192oSqPOKQyhQU+qlZNVPiMOO0tlGLHWFtmYkaK
+v5CD34acAJ39XZVah8U+7tvhyhP95Y/n5C/0vOaROAHxwwb9ZA8C4t8ydW60QkY
OkwXt1W/13xOon06cSyYFDTxpNB9d/dVbNn4novO19jXN68wMuxO0sxz46SYDQUo
E4cBZ5kGl5Mmyicpg7i1zmTX3S57y7xh9GFSjgE6IU/jIM1FucxmDxoaY9kfPb1+
FbAIWUT7sVTCfbF4mx985d1j8U90NBeVqUN+Gj7f1bFaSQD7HOhHmDF7LOG9olS4
2e1L83RvlQVAlg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:01 2025 by rpki-client