Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: 2rumDJ2z0k+7/ogxDr78ikp80kelOgiYHEhzBeAcSM0=
Subject key identifier: 1D:B4:7C:E9:4C:A0:2E:4B:81:A2:29:C1:0A:66:D3:11:A8:D5:C5:8C
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 0198548D6F4DCCB1183C92658CE437CEC4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 0DF8
Signing time: Tue 29 Jul 2025 05:00:11 +0000
Manifest this update: Tue 29 Jul 2025 05:00:11 +0000
Manifest next update: Wed 30 Jul 2025 05:00:11 +0000
Files and hashes: 1: Om-V-EmCFMGXb43s9fZ-DXbAF08.roa (hash: S2SC8pR//ywuBG9ZV7ZWtalhcLPclQLz9j+fN0Z1bo4=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: C7+SPVp5nYa/Z60hDp44FAcJsYR16/nHWK70F294YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:6f:4d:cc:b1:18:3c:92:65:8c:e4:37:ce:c4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Jul 29 05:00:11 2025 GMT
Not After : Jul 30 05:00:11 2025 GMT
Subject: CN=1db47ce94ca02e4b81a229c10a66d311a8d5c58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:4a:29:38:08:70:ad:b4:97:fe:06:ab:04:
b4:ee:d8:7d:02:b9:54:9d:5e:6f:b9:0a:48:af:36:
18:d2:3b:e0:6e:a0:fe:ba:fe:2a:a1:d2:4e:45:de:
76:fe:f6:ec:30:a0:ff:e8:a0:a0:9b:20:13:22:a7:
47:a8:7d:ca:cb:e1:56:7b:c6:90:7e:1d:51:a1:69:
5c:07:9b:cc:5d:24:b2:7d:06:e2:57:a0:e9:52:bd:
a0:41:16:3f:e6:79:46:ae:b7:64:76:6a:29:de:73:
6b:60:89:cb:5e:87:ae:87:bd:24:2e:d2:e4:ab:5a:
cb:7e:c7:1e:f3:58:e9:7e:9a:9c:67:df:21:66:8c:
4b:4e:c1:4c:64:23:f7:6f:66:29:bd:d5:83:e6:fc:
9d:c0:78:46:9c:a5:a8:cc:95:86:da:c7:0d:ca:3a:
83:e0:67:0e:90:9c:90:7a:ea:51:44:2c:9c:9f:01:
33:5d:77:ea:2b:8a:56:c0:3f:42:9b:1b:e0:55:3c:
53:85:93:d3:33:dd:01:30:b2:bc:99:ee:9a:f9:7f:
ff:ca:41:8b:96:84:7f:2c:dc:ee:43:14:04:2c:78:
34:c2:fb:13:6a:e3:d2:ff:cc:a2:69:bb:c6:4a:69:
71:43:91:6f:00:cc:19:82:ad:70:4e:00:42:9f:49:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:7C:E9:4C:A0:2E:4B:81:A2:29:C1:0A:66:D3:11:A8:D5:C5:8C
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1d:60:f5:f0:7c:cb:5e:e8:a2:b0:ce:09:24:99:fa:46:2f:
50:f0:0c:66:a1:4b:12:bf:b5:38:b4:46:03:5a:df:84:54:4c:
53:2f:54:ad:b2:9a:b5:7e:5f:ff:1c:e7:c9:1d:2f:4d:9c:8a:
a9:b6:f6:48:09:e8:e5:45:4f:78:a6:bc:c6:eb:6d:de:f7:04:
7a:ad:3f:19:6a:26:43:46:fb:34:97:06:57:3c:00:e2:11:ee:
1e:3f:0a:56:98:28:ef:1c:8d:0d:56:a1:4e:86:db:7f:21:98:
97:82:3c:9a:64:c8:29:81:43:0c:ff:b8:31:e7:e8:cd:91:41:
fc:2e:e2:61:84:8c:6f:b1:52:97:d6:bf:94:47:b8:7e:b0:83:
11:85:53:66:62:a1:64:95:24:6c:fc:b5:d5:82:cd:45:53:c8:
76:2a:cb:5c:74:e9:14:22:6f:57:92:95:75:45:b3:d0:48:23:
98:43:cb:95:f0:fd:00:5a:5a:a7:30:06:ff:85:5b:22:1a:bc:
a3:ce:eb:7b:6c:fb:62:34:85:56:b9:c2:6c:5a:1a:2f:70:7e:
88:c9:10:1b:17:f7:7b:c2:77:6c:1d:67:14:90:69:ee:89:37:
42:b7:48:40:26:ac:32:44:ef:52:eb:ca:37:98:84:8b:d5:9d:
50:d7:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:41:49 2025 by rpki-client