Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File: OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier: AKT+UrmvX2KwpMqVvjqhjoTlq1rmkhMLqZrEWSoLLH0=
Subject key identifier: 7F:09:65:BA:DA:9C:24:7F:CF:DB:16:1D:1F:B2:FA:A8:68:44:00:68
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 019A4EF4A6C055C1743B1A555634E4EE6685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number: 0789
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: xH01DlfUv6FTd9rDiKblAguGWN+5TFDa832Jitxoi0s=)
3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a6:c0:55:c1:74:3b:1a:55:56:34:e4:ee:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=7f0965bada9c247fcfdb161d1fb2faa868440068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:43:ff:39:e5:02:8c:94:7e:5e:d4:c8:8b:
d0:6d:1c:40:7c:55:b8:82:ab:b0:f7:f9:d9:87:67:
90:11:4a:d2:28:66:bc:6f:19:f3:fb:b4:6f:9c:53:
91:cc:a1:a8:3a:76:96:de:7f:c6:6d:57:bc:72:42:
09:00:53:14:fb:6e:1a:9a:81:38:ff:4a:1a:cf:f5:
95:19:1c:53:60:21:08:64:ec:47:22:ce:46:42:bd:
dc:3a:93:46:7e:c9:fa:80:62:af:0b:7e:d3:17:b9:
fc:16:1e:b1:d8:c1:d4:01:13:3f:0a:cd:f9:92:90:
23:43:5d:71:fb:a4:d7:10:73:a2:c0:b4:fd:af:93:
f6:f8:f5:f4:2f:97:42:6e:98:43:ce:17:2d:f7:9b:
ac:e5:7f:f2:4d:46:84:44:fd:6d:7d:bd:e2:a9:f0:
33:17:80:13:4c:27:69:25:25:59:9d:22:4f:60:73:
2f:db:a0:98:c8:cf:84:45:a6:28:a9:1a:ff:36:f4:
96:33:18:6d:b1:1e:17:a9:92:d3:b0:50:2d:85:84:
36:f3:0e:34:3d:92:2e:da:f1:19:f7:f9:8c:19:44:
60:5d:7b:e3:2b:55:75:2f:30:6a:f8:87:47:f1:cc:
3d:fd:55:fc:2e:04:7c:09:16:14:c3:50:33:e0:32:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:65:BA:DA:9C:24:7F:CF:DB:16:1D:1F:B2:FA:A8:68:44:00:68
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2b:d9:f5:c8:5e:26:81:bf:42:b7:17:af:fc:0b:05:6f:18:
33:7b:2c:59:ec:ab:51:27:cd:cb:00:86:99:08:28:9b:ff:1c:
7d:c5:e5:65:e5:32:5f:24:33:62:53:bf:bf:4d:f9:d8:e1:08:
b6:e5:1c:e7:33:80:45:d5:e5:76:16:eb:67:b2:79:55:4d:9b:
c8:90:9a:b1:6b:39:60:fb:7d:ee:5b:13:a6:cf:38:49:7a:6f:
b5:72:15:71:9d:db:0e:44:86:3a:6f:04:65:3a:41:83:53:2c:
04:74:84:91:f4:bd:cf:e2:70:d8:e8:d6:56:1d:a6:28:9f:81:
dd:06:9a:70:55:ac:33:6c:ac:a2:dc:c9:c0:59:03:43:d0:02:
5a:b7:9a:19:b8:9b:92:b1:84:f0:fc:6a:7b:cc:13:09:36:e0:
35:c6:9a:40:91:bb:c8:21:b2:34:68:a8:57:b4:d7:a8:68:89:
72:c9:64:cc:ed:6f:ec:62:a0:d7:d6:cb:a2:6b:dc:75:b5:7e:
7e:36:23:ee:21:52:65:84:35:97:b0:3a:b8:21:57:3f:5c:f3:
f2:2e:ad:b2:95:20:6c:42:79:4c:71:15:b3:13:35:7b:2c:f8:
52:72:01:0e:c6:00:fd:1f:55:0d:ba:30:a5:c5:a7:4d:5a:15:
0e:6d:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:24 2025 by rpki-client