Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: pZU9sBHm8fzXvgduKhey25yqlrGlazbv5ZX6CfUy4Xs=
Subject key identifier: 59:0D:8B:4F:B1:D3:01:63:41:D2:9B:59:E0:9F:47:CC:FF:16:D8:F1
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019A533F0F04FED4002B385A8B944240C515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 6A
Signing time: Wed 05 Nov 2025 09:00:32 +0000
Manifest this update: Wed 05 Nov 2025 09:00:32 +0000
Manifest next update: Thu 06 Nov 2025 09:00:32 +0000
Files and hashes: 1: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: sRhwSL39ovONozyYLiopv/pNQR3moyvgii9oKQUE2hc=)
2: k_uwe0_hbp0DrMLcpHMI8wGcruA.roa (hash: qbYK3P/JMzm2gpspT6OG1E1S38E2GDjqMXcyX1H7Szc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:0f:04:fe:d4:00:2b:38:5a:8b:94:42:40:c5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Nov 5 09:00:32 2025 GMT
Not After : Nov 6 09:00:32 2025 GMT
Subject: CN=590d8b4fb1d3016341d29b59e09f47ccff16d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:af:de:d9:32:49:8d:e1:a6:3c:b3:ec:ef:
41:1b:e9:b3:b3:f3:46:97:3c:46:d3:4a:d6:d9:f1:
e1:bd:c3:41:68:b5:11:8a:03:3c:d0:7f:41:82:07:
d4:6e:19:dc:3d:b0:bb:78:8a:22:ed:32:d1:2b:aa:
2f:f6:d2:79:2f:43:dc:a8:81:a8:ae:a4:8f:81:ac:
dc:f8:58:61:01:c8:68:1e:54:fc:bd:85:78:01:7e:
4d:c8:42:fc:de:a3:c2:41:5d:f6:81:65:8c:d0:5f:
f7:f3:25:6a:9b:92:25:07:5f:d2:47:3c:0a:d2:c5:
ba:54:50:55:f7:46:3c:52:3a:b2:86:4d:df:09:74:
7c:3c:76:bd:93:2b:f4:61:ab:fd:62:04:7e:95:80:
9a:22:f9:fc:34:57:e0:0b:e5:74:de:ef:99:1a:b8:
cf:92:e1:d0:61:ec:aa:29:e5:25:63:08:97:98:81:
db:22:b2:db:55:ee:72:33:bc:18:42:1f:c4:bf:11:
66:20:17:cd:4f:2e:f3:01:f3:74:c6:f7:45:e4:8a:
bd:ac:3e:5e:2c:37:64:82:bc:be:87:48:62:71:0a:
41:7d:5a:66:9d:47:02:22:4e:ce:10:9e:78:28:66:
e1:93:e0:26:e7:b1:e6:00:76:18:59:b7:d6:9f:c6:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0D:8B:4F:B1:D3:01:63:41:D2:9B:59:E0:9F:47:CC:FF:16:D8:F1
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:87:4d:85:95:6d:eb:5b:e6:db:87:d2:54:c9:fe:72:bc:18:
f9:e6:c0:86:99:a4:02:4d:f5:d8:48:56:75:8d:f3:10:16:04:
21:81:86:77:7b:11:5f:e0:f6:d4:e1:ba:2e:5a:1d:9e:7d:d8:
1c:6b:09:ae:69:6f:c8:b4:98:19:64:18:61:57:04:82:ef:f8:
38:50:97:93:c1:a5:fa:e0:d7:3d:65:e6:54:8d:e5:88:17:93:
37:96:f7:31:70:d7:f7:31:b8:8d:7f:49:9b:55:ec:6c:0d:21:
51:34:01:ea:26:f7:62:5e:cb:1b:b2:f9:b4:ba:c8:4b:81:14:
1d:8c:30:7c:5d:d2:ea:af:7a:20:1b:d9:fa:06:cf:44:23:30:
06:b6:17:b5:9a:b0:13:a5:fa:57:61:d7:67:70:c2:33:cd:20:
d9:73:99:56:92:3b:7c:71:9b:63:81:65:e0:2c:44:9f:47:18:
8f:62:68:72:a4:d2:12:a2:19:b8:02:da:d7:ff:41:10:9a:b5:
d1:fd:75:ea:d6:ad:a3:4e:f8:f5:40:49:e4:43:3f:6c:ee:60:
71:12:0c:66:61:4d:8d:2b:79:c1:d8:1b:47:42:2b:79:01:95:
f0:20:4a:14:2b:5c:25:0e:96:a7:dd:43:a4:16:4d:55:33:60:
0c:20:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:06 2025 by rpki-client