Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: EFYzYpeEufDz3S+wYs/MSJY1wgHt3/6pmqQAyLLKbTM=
Subject key identifier: 54:04:A9:BE:AC:EB:95:E7:D8:4F:23:74:DC:EF:EF:4C:AE:4D:FD:A2
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 019A2E201C25BFAB61ECACEFD520CD32B6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 16FE
Signing time: Wed 29 Oct 2025 04:00:47 +0000
Manifest this update: Wed 29 Oct 2025 04:00:47 +0000
Manifest next update: Thu 30 Oct 2025 04:00:47 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: 9GS0PIQgHgWDnR8AnbDy7hMKoahlL53Pil8ntGdoiG8=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:1c:25:bf:ab:61:ec:ac:ef:d5:20:cd:32:b6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Oct 29 04:00:47 2025 GMT
Not After : Oct 30 04:00:47 2025 GMT
Subject: CN=5404a9beaceb95e7d84f2374dcefef4cae4dfda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:d9:16:c9:61:89:64:07:65:c9:87:47:52:
4a:4f:74:0e:f9:bb:b3:91:6f:05:57:92:a6:51:85:
09:f3:19:49:ca:66:65:90:8d:8e:1f:67:19:ee:e7:
36:09:d3:af:49:09:a1:fb:31:4d:47:9c:ab:9c:85:
74:de:b0:ca:1b:c3:85:2d:bf:e0:d4:24:90:f4:ed:
af:c6:83:e7:84:a2:1d:4d:84:a5:6b:91:0c:86:4b:
34:59:a0:a5:31:38:90:aa:da:ad:39:c0:71:a2:7a:
4d:86:63:1e:c0:f2:61:13:db:e3:00:9e:1d:f7:74:
06:ec:cd:92:7c:4f:6f:15:9f:5f:59:1d:e0:2d:79:
b1:94:b6:04:25:81:b2:45:17:e3:86:c5:8e:79:08:
64:de:f2:45:55:c0:4c:23:e5:a7:48:02:be:30:96:
62:eb:3c:5d:dc:0a:37:c5:42:34:d5:b9:3a:0f:db:
85:b4:42:b8:bd:eb:5a:54:0d:6a:55:e8:39:b2:40:
ca:1e:2b:63:99:5a:a7:63:9e:69:c0:d3:82:04:b2:
90:93:f9:6c:4e:3e:00:c1:3c:d2:d2:61:4c:ef:cf:
b2:67:14:41:98:ec:d4:1a:0c:39:48:26:bf:35:5e:
90:2d:e3:89:68:af:52:64:be:bc:fa:90:71:cf:4d:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:04:A9:BE:AC:EB:95:E7:D8:4F:23:74:DC:EF:EF:4C:AE:4D:FD:A2
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:58:41:2f:3f:9f:56:b3:26:a4:73:38:80:ce:39:9c:62:ea:
3a:68:09:0e:d5:01:ca:86:83:10:da:36:df:09:46:90:69:ad:
b2:41:00:53:5d:27:62:85:6b:25:08:f2:6a:01:22:c9:5d:04:
13:d6:59:01:fc:d5:53:c8:03:75:fa:16:c6:1e:17:84:49:27:
8f:76:52:d0:16:fb:6b:8b:d1:39:47:61:cc:a7:ca:51:ef:10:
e3:4e:f0:cd:b5:4a:f8:b0:fc:23:b4:8f:e6:e9:33:48:b2:9b:
97:80:c2:1c:c7:cc:19:4b:05:5e:46:5c:4f:7c:dd:5c:ff:cc:
d3:c9:c9:4d:cc:67:8a:64:e9:1c:f9:80:c1:ac:38:25:90:18:
e0:da:59:00:3a:81:fa:8a:57:69:9e:40:f0:2f:d1:d6:36:93:
0e:73:e1:d5:4d:fb:bd:25:95:86:18:87:49:c8:5f:77:e7:da:
5b:de:13:5a:34:06:d6:28:26:14:4a:6c:b0:5b:bf:b0:09:16:
c2:20:9f:ca:46:1c:b5:cc:a5:c9:d1:76:d9:fb:bc:17:74:ec:
24:f8:de:2e:a7:9f:f5:60:15:5a:32:aa:bc:f3:44:b3:7d:60:
5a:74:63:e9:50:7b:88:63:de:b8:87:67:85:23:c4:d0:15:8c:
25:61:e5:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouIBwlv6th7Kzv1SDNMrbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzc4ZjMzZThlMTE4NzMyNzY2N2ZhOTRmZDc0NDZiOGQ5
MWU1YjQwHhcNMjUxMDI5MDQwMDQ3WhcNMjUxMDMwMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg1NDA0YTliZWFjZWI5NWU3ZDg0ZjIzNzRkY2VmZWY0Y2FlNGRmZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfnZFslhiWQHZcmHR1JKT3QO+buz
kW8FV5KmUYUJ8xlJymZlkI2OH2cZ7uc2CdOvSQmh+zFNR5yrnIV03rDKG8OFLb/g
1CSQ9O2vxoPnhKIdTYSla5EMhks0WaClMTiQqtqtOcBxonpNhmMewPJhE9vjAJ4d
93QG7M2SfE9vFZ9fWR3gLXmxlLYEJYGyRRfjhsWOeQhk3vJFVcBMI+WnSAK+MJZi
6zxd3Ao3xUI01bk6D9uFtEK4vetaVA1qVeg5skDKHitjmVqnY55pwNOCBLKQk/ls
Tj4AwTzS0mFM78+yZxRBmOzUGgw5SCa/NV6QLeOJaK9SZL68+pBxz01TXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQEqb6s65Xn2E8jdNzv70yuTf2iMB8GA1UdIwQY
MBaAFDrHjzPo4RhzJ2Z/qU/XRGuNkeW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEt
ZGMwMWY0YjRiYWU0LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEtZGMwMWY0YjRiYWU0
LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzVhBLz+f
VrMmpHM4gM45nGLqOmgJDtUByoaDENo23wlGkGmtskEAU10nYoVrJQjyagEiyV0E
E9ZZAfzVU8gDdfoWxh4XhEknj3ZS0Bb7a4vROUdhzKfKUe8Q407wzbVK+LD8I7SP
5ukzSLKbl4DCHMfMGUsFXkZcT3zdXP/M08nJTcxnimTpHPmAwaw4JZAY4NpZADqB
+opXaZ5A8C/R1jaTDnPh1U37vSWVhhiHSchfd+faW94TWjQG1igmFEpssFu/sAkW
wiCfykYctcylydF22fu8F3TsJPjeLqef9WAVWjKqvPNEs31gWnRj6VB7iGPeuIdn
hSPE0BWMJWHlzg==
-----END CERTIFICATE-----
Generated at Wed Oct 29 11:07:24 2025 by rpki-client