Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: OqjTyOy6AtYBE9kYaGDQeCi+5y4ngET2fTmDtuQlOXs=
Subject key identifier: A4:52:B0:4F:FA:77:9A:CC:44:41:B4:4F:09:72:F9:6C:4C:D8:11:4C
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019874193007EB65BCF99FFCF80B7CEA0767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 06FC
Signing time: Mon 04 Aug 2025 08:01:04 +0000
Manifest this update: Mon 04 Aug 2025 08:01:04 +0000
Manifest next update: Tue 05 Aug 2025 08:01:04 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: 3EnBsBKxV72nuVUgJeObj+w02bEIvxnGmfDy1X3ldS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:30:07:eb:65:bc:f9:9f:fc:f8:0b:7c:ea:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Aug 4 08:01:04 2025 GMT
Not After : Aug 5 08:01:04 2025 GMT
Subject: CN=a452b04ffa779acc4441b44f0972f96c4cd8114c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:2e:a5:37:90:2b:b4:71:15:1c:d4:78:7d:
a5:10:91:c6:14:10:74:12:a3:ce:e1:bf:6e:5f:58:
af:1b:f0:58:de:9f:d7:93:3b:e9:a0:c3:57:e6:94:
46:e3:83:d0:71:dd:11:c3:c3:7c:9b:eb:7d:4d:c7:
3e:48:41:c6:11:60:63:89:88:b1:0c:dc:90:25:2f:
91:c8:7c:45:f3:06:66:9d:1b:49:c0:12:3e:1f:7e:
4b:cd:21:70:f8:cf:9a:9b:4f:be:22:b6:7f:be:90:
3d:8e:56:d2:01:ee:2e:5e:60:8b:6e:a3:c6:8d:85:
84:8a:65:65:18:cb:ea:05:d6:7c:32:78:a3:f3:06:
5d:5d:96:54:cd:c9:05:cf:5b:25:a4:e3:ea:96:2d:
52:0a:a4:5d:29:16:d5:fa:4f:76:7d:cb:0e:4e:9a:
45:cb:6e:9f:28:9c:a8:a6:36:ed:19:42:46:0b:e1:
f6:7b:64:84:3d:cc:ca:cf:3d:ab:0f:32:e9:1c:d0:
fd:6a:94:e2:31:19:c6:ca:72:66:49:a9:85:73:20:
bc:ae:64:b9:a2:98:a4:75:54:3a:5f:af:c5:b5:4c:
45:36:83:d8:55:ff:bb:84:6d:e0:da:87:d3:62:e4:
61:2a:21:ad:19:cb:c9:44:ea:0a:b0:65:9f:ad:08:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:52:B0:4F:FA:77:9A:CC:44:41:B4:4F:09:72:F9:6C:4C:D8:11:4C
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d1:06:c7:24:a5:d4:e9:75:bf:0b:6f:51:c7:30:6d:6f:c1:
11:fc:67:de:fd:da:dc:dc:e4:85:29:ae:01:86:fb:0b:8d:eb:
cf:24:5f:51:47:01:22:7a:59:10:46:3b:81:94:8d:11:22:e6:
32:bb:b3:30:81:4e:1a:cd:0e:bf:70:b3:db:08:2b:ce:64:83:
1e:54:19:00:7c:43:79:cf:a6:1e:e8:74:59:96:cf:80:2a:5c:
c5:bc:8f:ed:48:bc:44:d1:2a:a7:e6:90:98:10:d6:f6:ff:8e:
a6:5d:38:39:81:ac:cc:e3:84:14:ad:aa:d1:88:40:1c:91:37:
a3:53:d5:b5:d6:e5:c8:1d:4c:1a:eb:35:b6:78:1f:d8:2a:4b:
de:12:82:3c:0d:71:50:0c:e3:ea:95:cc:7b:da:28:af:b0:a6:
e4:3a:b2:aa:03:99:bc:f3:b1:6d:9a:3b:ac:ab:20:e9:e6:67:
10:99:58:75:83:dc:31:f3:d2:63:49:7b:ad:d3:62:93:ee:fb:
ca:8d:83:63:a3:94:08:02:bb:a4:2b:b2:b5:2c:e7:5a:9d:e0:
78:c5:d8:29:d5:ee:d8:cc:cf:67:d5:41:07:0e:63:94:1e:59:
89:5e:1d:93:8e:e3:92:37:d6:98:d5:f5:0a:22:35:7f:0f:44:
83:ea:c7:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GTAH62W8+Z/8+At86gdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3
ZmJhYzQwHhcNMjUwODA0MDgwMTA0WhcNMjUwODA1MDgwMTA0WjAzMTEwLwYDVQQD
EyhhNDUyYjA0ZmZhNzc5YWNjNDQ0MWI0NGYwOTcyZjk2YzRjZDgxMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ0upTeQK7RxFRzUeH2lEJHGFBB0
EqPO4b9uX1ivG/BY3p/XkzvpoMNX5pRG44PQcd0Rw8N8m+t9Tcc+SEHGEWBjiYix
DNyQJS+RyHxF8wZmnRtJwBI+H35LzSFw+M+am0++IrZ/vpA9jlbSAe4uXmCLbqPG
jYWEimVlGMvqBdZ8Mnij8wZdXZZUzckFz1slpOPqli1SCqRdKRbV+k92fcsOTppF
y26fKJyopjbtGUJGC+H2e2SEPczKzz2rDzLpHND9apTiMRnGynJmSamFcyC8rmS5
opikdVQ6X6/FtUxFNoPYVf+7hG3g2ofTYuRhKiGtGcvJROoKsGWfrQi3EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRSsE/6d5rMREG0Twly+WxM2BFMMB8GA1UdIwQY
MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It
Y2U5YzlmM2FhODU1LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1
LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9EGxySl
1Ol1vwtvUccwbW/BEfxn3v3a3NzkhSmuAYb7C43rzyRfUUcBInpZEEY7gZSNESLm
MruzMIFOGs0Ov3Cz2wgrzmSDHlQZAHxDec+mHuh0WZbPgCpcxbyP7Ui8RNEqp+aQ
mBDW9v+Opl04OYGszOOEFK2q0YhAHJE3o1PVtdblyB1MGus1tngf2CpL3hKCPA1x
UAzj6pXMe9oor7Cm5DqyqgOZvPOxbZo7rKsg6eZnEJlYdYPcMfPSY0l7rdNik+77
yo2DY6OUCAK7pCuytSznWp3geMXYKdXu2MzPZ9VBBw5jlB5ZiV4dk47jkjfWmNX1
CiI1fw9Eg+rHsQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:11 2025 by rpki-client