Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: UqhNPp8pK/hClGrPADt/X0mxeJ6D6a7cla8TIEGL5SI=
Subject key identifier: 28:A2:EE:5A:B5:68:F6:68:BF:30:F6:29:D8:0C:81:07:AC:69:9D:C8
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 0198560EAB7C6DBEFACDAB941856354A402F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 1596
Signing time: Tue 29 Jul 2025 12:00:58 +0000
Manifest this update: Tue 29 Jul 2025 12:00:58 +0000
Manifest next update: Wed 30 Jul 2025 12:00:58 +0000
Files and hashes: 1: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: 4OdQxaRKKOZbXU8O3W1elqrUIHGljZSlkctD8/Vw8Ek=)
2: oHES2kIQSwcnceUnSAnzOBK0UoA.roa (hash: R0HeMmAONLyIzPgR+arZikegwIRj9xGz1jODUH2wdeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:ab:7c:6d:be:fa:cd:ab:94:18:56:35:4a:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Jul 29 12:00:58 2025 GMT
Not After : Jul 30 12:00:58 2025 GMT
Subject: CN=28a2ee5ab568f668bf30f629d80c8107ac699dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:5f:fd:70:27:62:4f:1e:78:08:98:44:d2:
c2:0c:7b:61:eb:01:02:a8:c5:9f:cd:5d:eb:c3:39:
56:e3:10:74:57:9d:23:0a:75:0c:cb:b8:99:e2:24:
d9:1a:12:25:1c:7b:87:46:b5:5c:45:06:7e:c6:1e:
89:0a:f5:65:69:18:48:27:74:08:74:49:f9:19:39:
b7:0a:fb:ec:fb:77:92:91:ad:46:3d:81:e1:e3:3d:
10:6b:70:66:77:42:99:51:5d:75:c0:ed:b8:81:0a:
3c:15:ad:66:c7:07:6a:1c:43:56:51:02:14:61:b9:
3d:94:8b:37:4d:8d:1e:17:af:1b:c6:0a:95:c2:35:
73:b6:90:f9:c0:41:f2:0a:90:a1:19:3b:a0:b0:c0:
ef:7d:28:9e:8d:ec:97:c8:b1:ee:1d:58:d2:b0:47:
99:35:93:7f:95:dc:98:03:a5:bd:4b:53:3a:42:9e:
70:f5:90:0b:81:4a:48:ea:d9:4c:05:3d:c8:65:73:
69:34:24:6d:cf:ed:4e:87:1c:64:ba:67:76:26:6c:
57:bc:b3:e6:9d:d4:bd:98:5e:d9:ad:ce:98:7a:ae:
77:e9:66:e4:6d:ea:09:b2:bd:31:e8:48:a8:9a:75:
aa:27:3f:13:02:f7:2a:f8:04:ae:95:be:49:18:98:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:EE:5A:B5:68:F6:68:BF:30:F6:29:D8:0C:81:07:AC:69:9D:C8
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7d:b6:bf:19:e6:71:ac:69:e3:ae:25:fc:ed:a9:0a:c9:c6:
00:56:68:0c:01:8a:23:40:4e:cc:d2:c3:9f:62:e6:ae:bb:c6:
d6:5c:59:0a:46:36:17:4d:83:13:1c:ed:9d:ef:ba:c9:aa:53:
af:3b:80:95:b9:84:b4:f2:47:cf:cd:0b:f9:ff:2e:7d:41:5e:
49:9d:bd:5a:d3:23:03:b0:5a:f9:e8:60:e7:29:e0:3a:5b:61:
67:6a:73:81:11:e0:4b:4e:39:ef:ba:64:26:fd:30:0b:fa:2b:
ca:69:09:34:d4:30:9a:a4:09:dd:c1:5e:90:1f:7e:84:3f:09:
c5:27:9c:15:43:1f:b3:a3:94:92:3c:f1:6c:eb:55:64:0e:b2:
51:46:14:17:be:58:fd:06:ad:86:b6:0e:79:fd:e6:9a:3d:85:
70:eb:a8:5f:35:e5:7d:6f:d3:77:3d:9e:bf:03:07:09:cb:2c:
95:c9:95:86:73:91:a0:50:3b:c9:6e:c1:73:02:da:6a:9d:31:
6b:93:d8:fe:00:c1:6c:0b:4b:fd:b3:6d:b7:1f:3d:47:77:d7:
a1:f1:dc:57:71:f7:5d:3f:ab:a6:9c:ea:0a:b4:80:bd:f2:d6:
df:1f:31:e0:1a:23:0e:3f:f2:9e:b7:c9:27:5e:52:85:91:89:
fe:ee:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:15 2025 by rpki-client