Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: phhsa1tGdAhLlRIPIsvJUUbMmwY2R6HDCZ0hHu7wo1M=
Subject key identifier: 4F:29:17:F7:FC:1C:46:CC:B5:F3:28:A6:6D:BD:8B:17:D3:B6:3C:CD
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 019A134D8E9923AADCC69FC3A2BC147E3D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 0527
Signing time: Thu 23 Oct 2025 23:00:41 +0000
Manifest this update: Thu 23 Oct 2025 23:00:41 +0000
Manifest next update: Fri 24 Oct 2025 23:00:41 +0000
Files and hashes: 1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: qOA9a9UdSQMMeQO31SQRcZ2euGgCroWWUdIkmB26aEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:4d:8e:99:23:aa:dc:c6:9f:c3:a2:bc:14:7e:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Oct 23 23:00:41 2025 GMT
Not After : Oct 24 23:00:41 2025 GMT
Subject: CN=4f2917f7fc1c46ccb5f328a66dbd8b17d3b63ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:a4:66:98:ab:8c:b9:11:24:5b:50:3a:71:
54:89:f0:b4:64:d0:9d:c6:1c:99:49:e7:2e:1a:ff:
61:19:1d:58:cf:d5:de:c4:c7:84:cd:c5:4d:ad:26:
fd:05:c0:5e:07:57:15:99:ed:b9:45:d2:e4:b3:e1:
c8:1d:1c:0b:89:ff:37:4b:da:69:3d:d9:fc:09:01:
94:ff:8f:ab:03:f3:8a:29:cb:a2:dd:f2:6b:ac:4f:
d2:09:c4:86:69:79:07:12:a9:96:f1:cd:75:d2:05:
f6:20:d2:51:bf:14:59:f1:11:1a:d9:1f:c3:8c:34:
9c:ce:04:a8:8e:c1:c9:35:e6:df:14:fb:93:ae:09:
3c:d7:9e:1b:27:5e:e8:f3:dc:b2:25:f5:08:f3:63:
7c:79:f8:a1:b9:71:9e:58:3e:ba:c3:92:a7:a1:13:
bc:17:81:2b:a0:2c:92:b6:f8:17:27:e7:96:82:4d:
fd:91:92:f4:18:b3:37:71:78:c0:bf:01:46:bd:ca:
f5:a2:8e:14:1d:5a:27:30:3b:f8:91:c8:51:dd:50:
0a:3b:25:57:ba:46:7b:9f:f7:7f:14:90:85:b7:08:
cf:67:b8:60:9f:db:2b:70:c9:e9:9b:1d:36:81:45:
15:de:05:c4:21:cf:d9:3b:79:76:1e:e4:ba:c8:da:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:17:F7:FC:1C:46:CC:B5:F3:28:A6:6D:BD:8B:17:D3:B6:3C:CD
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9e:03:d5:1b:d0:ea:56:7d:2a:c3:db:76:57:a8:0f:e2:72:
30:f7:af:6b:fc:41:d9:77:0b:88:99:ca:c4:38:83:c7:8c:20:
25:5d:33:a1:8a:6b:7b:d9:1e:c3:20:45:6d:9b:c7:5e:ef:0d:
14:0d:f2:e0:3f:82:6c:04:13:70:85:03:a5:1b:f5:fc:43:8d:
cb:d7:85:9c:10:f1:8b:6b:d9:bf:28:4b:3f:21:ca:33:f4:7d:
a0:f3:6a:56:4c:ad:03:7a:ca:f3:69:df:99:ee:91:73:fe:74:
e6:72:44:b6:30:01:91:8a:73:f8:e1:82:d9:2b:d8:cb:1f:ca:
57:95:bf:dd:9a:20:3a:dc:07:15:08:ec:e6:49:e2:9e:4f:47:
2e:f5:fd:96:c1:42:9e:7d:4f:d6:3c:1e:fe:8b:a3:53:f3:66:
83:80:22:71:5b:be:b3:a3:fc:36:9e:bd:db:48:38:70:ce:8c:
5f:18:09:3a:f6:5a:17:ad:49:9e:59:4c:97:ea:cc:f8:43:40:
47:11:bc:cb:65:b1:09:59:15:d6:25:c1:03:f1:95:c5:52:73:
7b:0f:58:b9:53:19:37:09:7e:08:bd:24:32:93:b8:3b:69:3a:
ad:40:b7:b5:7c:07:98:c9:5f:47:64:7d:43:87:23:15:c1:74:
bc:07:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 03:35:01 2025 by rpki-client