Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: tjrCc+Og8rc63BW4aBfTyx1l7wcI4KnjG/W202k/KI8=
Subject key identifier: 26:20:5D:06:05:69:64:17:C8:62:30:C4:8A:3F:81:D2:A8:D6:04:02
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 019A7225B3A82215B625D41BFF949061416E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: /IQwLdFAAtqU17/Qpr/cF87g+ccFsw8RYfcLWpWnY4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b3:a8:22:15:b6:25:d4:1b:ff:94:90:61:41:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=26205d0605696417c86230c48a3f81d2a8d60402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:1a:08:e7:68:3e:5c:96:e9:01:7d:42:52:
7a:58:cf:b0:19:62:5c:79:fe:cd:d4:3c:b1:68:8e:
88:44:04:b7:00:14:d6:dc:3d:f6:87:10:6f:57:b1:
6a:1f:5b:76:4c:b3:a1:81:75:c0:83:09:61:d6:28:
92:b7:a8:ec:e5:67:e0:ff:b7:c6:0c:8d:70:b5:54:
66:69:8e:60:3a:24:42:04:10:f4:10:79:48:5f:c8:
6b:59:37:0d:15:9e:76:52:c8:1a:6d:4a:17:b2:f4:
87:0c:3d:e9:94:4e:77:a2:17:32:81:2d:92:eb:fc:
e0:e3:f9:f1:1e:4c:03:b8:30:a0:ac:82:3e:e2:1e:
27:57:14:98:b5:53:b5:db:02:57:93:02:92:3d:90:
69:dd:38:56:bb:a8:95:66:b9:52:bd:31:63:fb:e4:
54:cf:c0:65:41:fd:5d:26:83:60:fd:3c:6a:69:94:
2e:e0:f0:23:d3:86:04:d9:e8:77:a3:f7:13:20:f5:
dc:59:af:c6:c0:1b:cb:22:79:de:6f:4f:16:97:34:
cd:0d:d2:ea:d4:2c:e2:ac:e1:b5:14:d6:74:45:c7:
46:55:b5:af:17:0f:c4:5e:11:75:ea:6f:cd:d5:df:
c9:95:14:53:d0:be:35:88:60:97:67:5f:09:67:7a:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:20:5D:06:05:69:64:17:C8:62:30:C4:8A:3F:81:D2:A8:D6:04:02
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:94:49:b3:17:b4:33:2f:ad:2a:f7:73:4d:c7:fc:0c:ae:dd:
8e:86:e9:c0:83:2d:f0:a4:4d:65:24:a8:60:01:3c:82:39:a0:
d9:b3:6a:c9:1c:c6:c1:7f:d0:ee:8a:b1:a5:62:0f:c4:77:68:
2b:54:f3:48:2a:0c:fd:a6:28:71:bf:46:48:7d:31:98:0a:59:
f0:58:17:dc:e8:49:a8:f9:b4:81:f1:fa:a2:20:d8:ca:07:4a:
a3:ac:83:c3:98:8b:27:5f:2f:e1:4f:0d:14:b8:ac:12:5a:eb:
c1:96:5a:0c:5b:e8:53:63:b9:02:16:2f:7b:bf:33:73:f7:61:
6a:4f:bb:41:70:12:0e:76:b7:2a:36:05:8e:a4:ba:6f:3c:17:
e6:50:f0:47:6c:1f:36:a9:df:4b:5d:92:aa:cf:f5:16:37:93:
37:d8:e7:95:1d:51:32:1d:1a:10:d2:f0:e9:e7:7a:48:81:fe:
47:e7:9e:a2:af:0e:4b:eb:7f:b2:a4:e6:4d:62:9b:bb:3b:c8:
5a:76:4c:6b:14:9e:6b:7b:3c:df:11:32:07:e2:72:01:01:ee:
51:fa:9e:62:b7:25:f2:20:3b:5d:62:49:75:63:d2:d1:67:df:
e5:27:b7:94:d3:37:43:26:3f:ed:10:02:be:6c:6a:72:e7:6a:
a3:b7:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:56 2025 by rpki-client