Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: ft9FyheyRmLmIvQZwQKKiMhSYf7Ai2H8KcW8JUnza2E=
Subject key identifier: 77:3A:C4:4F:29:FA:7D:07:AA:89:83:BC:9F:65:2A:9C:81:FB:81:C4
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 0198481B71DCF7DA577C426B11583F42E72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 19:00:14 +0000
Manifest this update: Sat 26 Jul 2025 19:00:14 +0000
Manifest next update: Sun 27 Jul 2025 19:00:14 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: fBs8m1QNmXTFa1gSnrui6DeCRwgFdfqxu1kJPswZ5E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:71:dc:f7:da:57:7c:42:6b:11:58:3f:42:e7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Jul 26 19:00:14 2025 GMT
Not After : Jul 27 19:00:14 2025 GMT
Subject: CN=773ac44f29fa7d07aa8983bc9f652a9c81fb81c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:28:a4:90:2c:5c:ba:aa:69:2e:3d:b2:43:
a5:72:45:f0:3d:6e:a6:33:5c:0b:09:c4:90:b9:80:
a2:f0:c7:06:20:bf:3d:6e:f8:78:a1:3d:f5:2c:88:
ab:18:98:ef:5b:fc:04:4c:eb:a8:87:58:09:6c:62:
79:57:ff:76:e9:05:2b:c8:e8:76:05:41:a5:12:39:
3f:bb:8d:2d:96:46:34:d1:90:fa:ba:d3:fe:76:1c:
19:21:75:f2:6f:43:3a:43:38:36:45:a1:41:0e:5d:
e2:98:d4:8d:6c:07:30:d5:d4:9c:de:f5:9e:ce:d8:
e4:d7:7a:09:9b:18:c2:e8:4a:a0:7e:80:29:b9:87:
19:79:bf:0f:df:86:f7:ce:6e:98:b1:0c:15:d1:cb:
5a:f0:a5:6c:7e:8d:1d:6a:2e:e5:5c:ae:90:5f:f3:
75:83:d5:59:48:27:33:94:e1:4a:a5:10:fe:66:c7:
b1:ab:1a:30:a6:b3:84:49:2d:f6:9a:d5:a1:df:45:
d7:3d:62:f9:6d:41:57:ae:63:ef:ff:4f:8a:62:f8:
d3:4f:08:89:3d:17:50:d0:47:94:cf:df:0b:14:1c:
e5:77:e5:d3:56:6d:b9:5f:66:08:ab:6b:2c:4d:bd:
17:ae:c3:71:76:66:1a:b0:3d:99:11:e5:bf:10:3d:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:C4:4F:29:FA:7D:07:AA:89:83:BC:9F:65:2A:9C:81:FB:81:C4
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cd:f9:6c:f8:0e:31:36:2e:5f:1a:af:ef:fc:23:4b:26:4e:
1c:97:79:88:31:74:50:49:f0:49:1a:de:ed:24:44:08:1c:84:
ef:b0:d7:a3:55:fd:bb:15:3a:21:cb:8b:e0:f9:0b:75:34:1c:
d7:38:c5:7d:59:e3:57:8d:47:91:0f:9d:7f:e8:2e:35:3b:f1:
94:4b:82:27:05:57:c2:48:3c:4d:2c:ba:5f:d3:09:89:79:50:
dc:fa:97:f4:6b:83:f2:9b:05:6f:3f:ba:fe:5d:c8:09:29:cc:
03:f8:34:4e:31:d1:14:0d:98:22:62:34:a3:93:ff:29:be:bc:
18:da:00:39:1d:e6:0a:fb:b0:f6:00:41:26:e6:82:a4:1e:73:
bb:95:d7:0a:58:03:b4:83:d9:ac:9a:64:f7:d2:55:f8:64:d4:
38:9c:c4:a8:5d:b1:47:b7:0f:e8:a2:6c:12:ee:2a:05:05:2b:
7f:30:71:7d:17:7d:67:6b:46:ba:2e:f9:c7:61:42:21:fc:07:
29:7a:73:29:50:11:c8:5d:61:37:eb:51:94:3b:f9:aa:e2:25:
23:d5:c8:cc:ea:15:32:fd:5b:45:b3:0c:b8:89:7b:5a:b9:ac:
2e:20:44:da:f7:fe:f6:cc:11:09:b8:36:99:29:f2:ce:b3:67:
ca:20:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:31 2025 by rpki-client