Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: j5Tiow3NHLLuE7ICv3gXbypGypdfVWdGGVDXA2USTOQ=
Subject key identifier: 64:19:E8:B4:88:F8:82:0E:C1:99:0B:20:6D:70:09:CC:D1:AD:44:14
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 019921B06E7264DE7D3461C78CE096F5BFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 01:00:34 +0000
Manifest this update: Sun 07 Sep 2025 01:00:34 +0000
Manifest next update: Mon 08 Sep 2025 01:00:34 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: /qk8eKc3axRN/U8CjW/BkwIQASq3IHjGn14NRIQ2Zt8=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:6e:72:64:de:7d:34:61:c7:8c:e0:96:f5:bf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Sep 7 01:00:34 2025 GMT
Not After : Sep 8 01:00:34 2025 GMT
Subject: CN=6419e8b488f8820ec1990b206d7009ccd1ad4414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:34:5c:5d:7b:28:81:08:10:aa:43:31:26:
38:95:94:6e:12:61:3e:6a:9d:6b:58:93:92:11:c0:
71:85:74:79:b6:5a:16:81:aa:57:8a:12:a5:2d:bf:
aa:87:c2:de:bf:4b:16:fa:44:fe:de:d2:c7:3f:4a:
3b:0c:83:89:2c:57:2f:50:3f:44:9f:d3:e8:95:e4:
61:38:a6:2e:bc:5a:df:0c:56:70:23:c1:a8:c5:f1:
f4:c9:cb:77:82:cd:95:c8:fc:d8:ea:84:66:8d:20:
16:ef:19:38:76:ab:f4:e7:4d:33:41:ec:97:f5:84:
5a:25:5f:a2:66:b8:ab:d3:08:5b:d2:6b:b4:2c:47:
45:d4:58:0e:0a:fe:0c:3d:05:e1:7f:70:fa:d6:cd:
3b:07:99:bf:25:62:55:05:3d:57:13:45:3e:9b:c9:
81:fe:5d:54:06:f2:34:16:d5:e7:0d:81:3c:35:c8:
52:28:08:34:34:f9:ea:fe:b9:1d:0e:48:da:e0:04:
2e:ff:45:f4:ae:22:d6:67:16:94:72:ae:73:28:7b:
37:b7:b1:1e:db:ff:72:93:d2:26:43:6f:90:2e:7a:
1c:54:07:ec:e1:7b:76:97:43:af:f5:d7:ce:3f:93:
04:40:f0:3f:73:8c:86:46:c1:7c:d3:be:7b:cb:97:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:19:E8:B4:88:F8:82:0E:C1:99:0B:20:6D:70:09:CC:D1:AD:44:14
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fe:d7:fa:21:36:44:f9:dc:a3:a7:58:37:77:af:8b:be:be:
b1:fb:19:ef:19:3e:49:0c:43:ec:92:3b:67:1a:6a:5c:bf:8a:
88:73:d4:1e:d6:65:be:c8:87:8f:59:e5:24:db:e6:75:9a:d4:
6f:16:00:dd:58:de:53:a6:7a:1a:7c:36:af:5e:d5:1e:51:ef:
f8:84:34:86:26:24:b0:ae:6b:a8:39:94:f5:d5:18:f1:cf:95:
b7:be:7a:09:e4:ea:36:75:df:e7:fe:3a:e4:7e:af:06:0a:96:
ef:ac:1d:f1:9d:12:60:36:06:b2:65:83:a1:91:91:1d:d3:26:
1a:a6:b8:0c:80:1a:5e:32:8c:2b:4b:99:c0:02:ce:98:67:92:
d8:d1:ec:ed:0a:0d:3a:09:27:b7:62:6a:8e:02:fc:f7:57:df:
29:f5:18:ba:cf:57:c8:aa:ba:51:2a:b5:3e:94:e9:ef:46:b7:
99:55:3f:61:4d:1f:ea:83:a2:51:1d:5b:44:fb:24:5c:d4:c5:
5f:8e:f4:c7:b6:b8:14:db:67:78:a0:de:50:96:8f:11:06:d3:
eb:60:a6:17:e4:00:34:39:ce:6d:1c:d1:fd:38:ef:95:ec:4c:
8c:ef:a9:7d:03:67:3f:4e:04:b6:a3:83:c5:6d:07:89:4d:a2:
72:9a:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:31 2025 by rpki-client