Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: PpybHfWuOdBVLX7q/j2gkp0Tu3N6QqQh1DEyyPs90Ic=
Subject key identifier: 30:72:5E:46:15:6A:FB:A5:C3:70:C8:5C:EC:E1:88:B0:3A:C1:E2:EE
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 019846645C5E53CB4E90B2DF926A59760E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 0356
Signing time: Sat 26 Jul 2025 11:00:39 +0000
Manifest this update: Sat 26 Jul 2025 11:00:39 +0000
Manifest next update: Sun 27 Jul 2025 11:00:39 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: 4qdY7fbaLTyCWWn1X3t+XeP9V09uiehP11miauDTkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:5c:5e:53:cb:4e:90:b2:df:92:6a:59:76:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Jul 26 11:00:39 2025 GMT
Not After : Jul 27 11:00:39 2025 GMT
Subject: CN=30725e46156afba5c370c85cece188b03ac1e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:51:a1:22:6e:ce:65:e7:41:76:2b:19:68:
4d:ab:e3:ab:15:e4:ce:0a:7a:64:18:20:b9:5f:95:
6f:1c:74:89:23:f5:06:92:30:1b:b8:ac:e6:a7:cd:
de:50:d4:1e:71:fb:82:c3:47:bc:dd:37:c9:be:bf:
56:f4:1e:96:da:72:d5:5c:ee:98:ac:a1:88:e8:87:
5b:6e:c5:49:38:d6:ed:93:43:bb:0e:6d:c1:c7:18:
da:56:e3:a4:29:c0:81:31:0b:66:1a:13:ee:2a:ba:
aa:d3:ce:54:3a:da:c2:b8:13:da:e2:45:d7:a5:36:
91:3c:9a:e7:fa:5c:92:e6:eb:22:82:e0:df:ff:e7:
5b:ef:95:0f:91:e2:bf:9d:c4:e7:f1:53:d7:f3:14:
1d:2d:e8:b6:d4:2d:0a:45:5e:92:c1:44:31:73:44:
20:03:90:0a:6f:e8:bf:23:1b:44:74:55:cb:19:14:
4a:66:0d:50:1c:3c:44:fd:28:f4:35:99:ec:d6:3e:
91:25:7b:e8:f9:a7:2e:86:d0:c8:e6:23:1f:bd:8e:
dc:c6:18:53:e1:7f:b9:f3:93:96:d6:4e:93:b4:3c:
52:34:59:ea:4d:5a:51:dc:d0:9d:af:83:bd:e3:05:
68:27:92:c6:a9:3a:6e:21:0b:ee:40:b0:79:fb:40:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:72:5E:46:15:6A:FB:A5:C3:70:C8:5C:EC:E1:88:B0:3A:C1:E2:EE
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:79:92:a9:79:f9:8c:d1:e3:67:03:db:ab:44:ea:86:29:69:
be:e4:67:f8:e0:60:af:5d:c0:02:85:76:99:fe:bc:cc:eb:0b:
ed:a0:b5:30:ca:6a:f7:b5:a2:56:a2:86:14:01:b4:c0:28:76:
29:68:8c:a3:f5:39:42:26:97:01:b9:cc:26:ad:58:ab:71:99:
23:fd:be:b0:59:5f:2e:72:cd:b0:20:7b:4f:66:0c:dd:93:08:
41:63:52:f4:3f:9d:dc:6a:61:29:fe:7d:ff:db:87:d7:a0:fa:
27:12:91:4c:85:a0:bc:00:be:1b:ee:56:af:ee:c1:89:3b:bb:
c1:a5:ea:2c:d6:a7:18:9b:54:73:0b:75:0a:5c:c8:16:e2:69:
ab:34:e8:4d:12:10:e5:ae:36:3d:e2:12:ca:7e:29:b5:a4:ed:
ee:76:c4:43:80:b6:cd:9e:85:c2:31:80:99:c3:5a:3d:85:0a:
30:92:02:75:27:6d:33:79:1a:e8:a3:97:c5:56:62:d2:91:ac:
0e:a8:73:5d:30:b5:89:3a:53:18:6b:1d:13:17:21:39:44:18:
45:d1:c6:58:23:38:75:9f:97:09:92:0f:4f:8f:a8:92:ab:3a:
6c:b7:10:a2:13:3d:52:67:f0:39:c4:41:3b:6e:81:ec:f8:1e:
ac:0a:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:50 2025 by rpki-client