Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: FpC/5QgApxhiwmzhidRRnfYRg8eJ2NoIIGXajuyi4RM=
Subject key identifier: 13:40:12:59:17:65:FB:C6:61:8D:E1:77:27:85:C6:12:EB:35:60:C5
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 0199C42035AD40D1AAA8F8DBB0D0B8B726D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 07AA
Signing time: Wed 08 Oct 2025 14:01:09 +0000
Manifest this update: Wed 08 Oct 2025 14:01:09 +0000
Manifest next update: Thu 09 Oct 2025 14:01:09 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: 2oi03FicsasuDrbIVmZzg/hMwZ8196HcFQrnr1TPEsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:35:ad:40:d1:aa:a8:f8:db:b0:d0:b8:b7:26:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Oct 8 14:01:09 2025 GMT
Not After : Oct 9 14:01:09 2025 GMT
Subject: CN=134012591765fbc6618de1772785c612eb3560c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:ce:c6:3f:cc:65:41:a3:69:90:9f:ae:4e:
53:94:74:b1:27:06:92:5b:ab:ad:22:28:00:7f:d2:
82:ed:36:6d:97:a8:3c:fa:ca:65:f3:9c:22:c0:98:
20:83:da:8c:e1:f6:a2:49:76:dc:2b:a0:e7:ea:27:
e4:df:4f:8d:22:2c:41:39:b2:33:72:32:d4:87:e9:
8e:2d:b3:c9:f6:5e:5b:68:2b:9f:78:38:5d:45:11:
94:8d:7d:07:ef:f2:3d:db:e5:1c:c2:2f:80:4e:e9:
cb:df:b3:82:89:8f:7c:4b:fb:06:0f:7d:f2:88:85:
24:c8:74:17:43:fc:48:00:c2:e8:84:cf:cc:9b:50:
c6:a6:b0:a4:7a:d2:4f:1d:d6:3e:3f:f1:6e:18:bf:
a7:41:e4:3b:d5:a5:e7:c3:66:a4:38:8a:f7:b3:63:
70:12:2f:22:2d:82:ba:ec:9b:ac:f5:c7:27:7b:95:
0d:db:b7:67:08:af:29:66:68:54:21:c8:5b:c1:3c:
24:b4:b2:f5:42:8e:62:a9:6e:be:cb:f9:f0:57:6e:
89:b0:60:46:48:9b:4c:19:1b:3c:fd:44:56:2b:3a:
13:1a:12:ba:15:2c:65:97:8a:f1:75:b2:8d:72:14:
83:f9:34:5d:6e:0c:23:56:9c:0f:79:96:b0:e4:73:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:40:12:59:17:65:FB:C6:61:8D:E1:77:27:85:C6:12:EB:35:60:C5
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:71:f2:e3:69:d9:28:3d:84:b1:43:5e:cf:0a:26:85:ef:55:
22:44:1c:aa:fe:ad:5e:5c:db:e6:43:a9:46:a5:3a:5e:22:c1:
e9:05:1e:07:b9:d2:2d:cb:92:2e:16:ab:cc:1f:2b:e4:7e:7f:
32:07:eb:6c:68:eb:5e:67:fd:9d:49:cf:c9:d9:7f:0d:76:9d:
df:de:8a:fe:a5:12:76:77:ad:88:08:8d:6f:cd:e9:c7:d6:54:
a1:42:8c:79:8c:7c:37:10:c3:8b:67:49:3b:c3:de:59:43:39:
e4:54:f7:c2:40:1a:73:72:02:8e:15:0f:9d:cb:c6:f0:87:e1:
dd:3d:d7:14:14:32:26:fe:98:d3:7f:ff:45:1d:f7:c8:8b:cc:
93:2d:cb:a3:d4:76:94:99:37:8a:9c:f4:02:7b:34:18:f5:e9:
0b:22:dd:9d:e4:71:35:4c:58:cb:ec:0a:21:df:22:50:b9:90:
81:ca:37:04:6e:77:ed:fa:e2:c9:89:7c:b6:69:c8:6c:b0:4d:
08:67:4d:14:c5:22:9c:5e:99:93:f8:fe:2c:57:f9:a8:98:be:
1d:c8:96:ab:87:ad:0d:eb:c6:fd:05:8c:02:92:7f:52:cb:d3:
ae:4d:40:17:f5:5d:c7:c8:15:2f:ea:75:c7:61:e7:c6:de:72:
07:50:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:35:54 2025 by rpki-client