Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: T1D4tqjCPvDd8ibhKeXZSCA/3Kh6ottVvkB5QmEgQRI=
Subject key identifier: 87:12:23:20:2D:77:EF:6A:EF:74:C0:01:97:24:A3:4C:6A:13:FB:63
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 0197469E855D326A668DC66B3C07832736FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 19:01:23 +0000
Manifest this update: Fri 06 Jun 2025 19:01:23 +0000
Manifest next update: Sat 07 Jun 2025 19:01:23 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: qZk14QmQq+d24QkTxkesDJR0A1wgRwaWkGipMbz/yOQ=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:85:5d:32:6a:66:8d:c6:6b:3c:07:83:27:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Jun 6 19:01:23 2025 GMT
Not After : Jun 7 19:01:23 2025 GMT
Subject: CN=871223202d77ef6aef74c0019724a34c6a13fb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:2b:df:a8:32:a3:1c:fb:38:bf:5e:db:0c:
1b:ee:d9:09:a0:97:b2:de:14:12:37:5c:86:f4:fe:
16:92:19:28:25:d4:ea:76:4a:3c:e7:53:77:aa:79:
1f:fe:72:e5:49:6f:59:d4:e1:bf:f9:41:51:60:33:
ed:cc:bd:d2:6e:6f:c3:0d:30:5e:c2:07:8f:30:c9:
ff:09:a8:29:c5:7f:2c:74:1f:f6:7e:e9:3b:94:44:
6b:61:e6:5c:ad:71:d5:07:66:31:1a:2c:0a:22:63:
29:fb:90:54:b2:02:93:58:f1:12:ce:c6:fc:e6:8a:
c4:9c:ff:80:94:73:de:91:ca:9d:9a:5a:e7:58:a5:
42:a4:a3:41:62:77:7b:b9:9f:6b:0c:53:dd:12:ac:
ea:12:40:93:51:d7:3c:c4:2f:22:b5:99:9d:1c:ae:
25:63:16:ac:a3:00:51:df:55:85:fd:80:eb:c8:8d:
9c:e1:0b:6e:28:ae:0d:f4:ca:ea:a3:89:19:c0:c3:
20:19:9c:66:7c:98:6b:4f:2b:86:9d:66:75:ca:e0:
ac:c8:c7:1a:74:18:c4:68:ac:25:9e:7c:7f:de:00:
83:43:e1:b7:bd:6b:9b:cc:f2:5b:aa:6d:2e:aa:28:
13:8c:61:10:69:e3:25:39:b4:14:dc:47:63:31:3a:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:23:20:2D:77:EF:6A:EF:74:C0:01:97:24:A3:4C:6A:13:FB:63
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7a:c6:2d:28:1a:2c:86:0c:ee:62:a1:b9:33:9d:da:ab:46:
ed:c1:b2:14:b2:d5:c4:ea:af:07:cd:88:2c:53:41:d5:50:b5:
2d:3f:61:41:f1:35:83:a3:4d:96:12:da:22:c1:31:0e:42:d5:
ff:a2:f6:38:a7:d9:f4:3c:55:2d:b4:6c:8f:eb:00:79:d0:17:
8d:77:d3:fe:54:a0:ac:db:c2:6f:8c:de:de:3c:09:63:25:66:
1e:f7:79:67:33:ff:91:1a:5e:bd:33:8b:60:12:b6:0a:29:f8:
7f:40:fb:56:73:a1:23:3d:52:1a:b3:e5:1a:a0:13:a7:a9:04:
63:58:ed:46:ce:c0:ae:92:ba:0e:00:52:e0:bf:e6:54:ee:9e:
f9:52:4e:ac:7d:c5:9d:33:ef:12:73:6d:e6:ff:b1:94:d5:66:
02:df:61:00:0b:2a:ba:0e:4b:5c:f6:ca:8b:88:e8:78:2a:24:
24:64:e2:9d:47:cd:00:3e:c6:59:20:44:a0:80:89:1b:fa:c9:
29:ad:8d:12:f1:8b:f0:e5:76:f2:07:85:e8:5f:fc:b2:99:9d:
04:2a:7e:6f:a6:89:bf:06:7d:68:70:a9:cc:9e:ae:22:0e:33:
cb:0a:fa:b4:6b:d9:1b:4a:0c:f2:03:82:5e:ed:15:39:c4:cb:
73:98:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:45 2025 by rpki-client