Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: sZ/vRQx3RkPCO5J7+hgI4ACBpE11Zwy34Q0ANUfAvf4=
Subject key identifier: 49:1B:03:2D:21:24:35:C3:6C:76:D0:82:B8:42:3E:C0:F5:3E:05:7B
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 019A51F54CAFF31DB5FA3397878155D04F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0B85
Signing time: Wed 05 Nov 2025 03:00:21 +0000
Manifest this update: Wed 05 Nov 2025 03:00:21 +0000
Manifest next update: Thu 06 Nov 2025 03:00:21 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: a0g2A9dA1SBs8Fpdi2kWYJJQpiSIehW4Ui6VpgYfgPE=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:4c:af:f3:1d:b5:fa:33:97:87:81:55:d0:4f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Nov 5 03:00:21 2025 GMT
Not After : Nov 6 03:00:21 2025 GMT
Subject: CN=491b032d212435c36c76d082b8423ec0f53e057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:32:4c:3e:e1:83:1b:37:06:eb:64:98:65:
29:15:1c:62:05:da:da:3f:5b:b2:b1:27:1b:f3:1b:
15:db:31:d2:74:a2:54:09:d8:4a:5e:a6:96:fe:7c:
35:b8:4e:7f:62:90:19:6d:2b:76:91:49:8d:96:dc:
1f:2f:b0:b2:e2:04:64:c3:4e:b6:e9:c2:3d:a2:e8:
c1:3d:51:be:03:50:9e:37:2f:c2:d5:38:e7:fc:f3:
4a:56:da:17:f1:90:46:17:dd:70:55:3d:e2:a1:0b:
42:b0:71:ec:a5:41:9c:f3:2c:2c:f2:52:1e:8c:d8:
65:a7:d5:37:e6:2a:6a:c9:d2:9f:61:be:28:8b:b4:
81:58:d8:7e:17:97:87:17:f3:13:6d:bf:32:94:1f:
8a:1c:aa:c1:0c:6f:99:f1:15:0b:53:4f:52:7f:32:
9f:49:de:8f:2e:18:14:d1:41:dd:cd:4e:c3:66:69:
3a:81:01:a1:cb:c8:15:61:1d:b1:90:32:8e:b4:81:
bf:13:ec:ea:98:ac:98:60:76:a8:6d:71:9c:d4:0b:
cb:7b:e0:71:13:2c:c7:cf:0b:15:b9:9d:9d:fd:fd:
b7:14:69:33:bc:3c:79:cf:b4:5c:8a:a4:f0:9b:fc:
65:1b:f7:28:21:04:d0:c1:0e:b0:88:7a:a0:c5:1e:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:03:2D:21:24:35:C3:6C:76:D0:82:B8:42:3E:C0:F5:3E:05:7B
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9f:df:7e:ee:2f:13:b2:3e:f9:c1:ac:80:e4:08:e0:9c:0f:
39:73:78:87:9b:84:12:f0:56:b8:f2:3f:dd:c8:40:9c:3e:33:
e5:79:25:ef:e6:67:8c:35:2c:84:ac:74:bd:4f:46:e5:0c:ba:
01:36:6a:70:ba:2e:5a:89:1c:36:d6:84:2a:5a:82:06:87:02:
15:68:16:81:8f:2b:c3:dd:d7:3d:b2:33:eb:83:d0:3a:39:41:
ec:3f:29:a6:9f:b9:b8:6a:3b:c8:43:b0:5a:2d:4b:1a:72:1a:
a3:99:74:a2:6d:17:c8:b7:94:6c:38:75:03:1d:c7:d3:f0:a1:
cf:a3:ed:bf:db:d3:b8:ab:4e:53:7f:7d:c2:12:89:0e:0b:17:
6b:ee:4f:14:19:f1:48:87:15:f2:6b:68:86:14:84:d3:cd:6b:
66:6e:ef:ce:d8:2c:3f:21:e5:58:1d:02:65:e4:e7:9e:da:8b:
9e:42:11:69:43:24:02:dd:d2:fa:da:8e:8d:1c:be:3d:cd:eb:
c4:56:dc:ad:bd:16:76:cc:98:a5:20:ff:9a:61:95:17:d0:50:
2e:a9:3b:bc:97:4a:e4:ae:4e:6f:ef:a1:08:5d:2d:23:06:51:
8c:06:32:ee:eb:9a:84:f0:b7:bc:d7:fc:ae:94:06:a5:7d:00:
7d:51:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:38 2025 by rpki-client