Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: 4GW1jHTVmzceHxBU8RrJTsET4QUWjjFQvuxp39AZxx4=
Subject key identifier: 38:88:2E:6E:F2:6E:A1:93:D9:3A:C7:A3:E3:9E:26:BF:FB:B9:B1:27
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 01974FD7B2B1E31E9B888C25921EE57521DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 0D71
Signing time: Sun 08 Jun 2025 14:00:25 +0000
Manifest this update: Sun 08 Jun 2025 14:00:25 +0000
Manifest next update: Mon 09 Jun 2025 14:00:25 +0000
Files and hashes: 1: Om-V-EmCFMGXb43s9fZ-DXbAF08.roa (hash: S2SC8pR//ywuBG9ZV7ZWtalhcLPclQLz9j+fN0Z1bo4=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: ZrhYF7eyuJcIfyPzQpCBuNVldrq+espAK8Pjw9tMufU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:b2:b1:e3:1e:9b:88:8c:25:92:1e:e5:75:21:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Jun 8 14:00:25 2025 GMT
Not After : Jun 9 14:00:25 2025 GMT
Subject: CN=38882e6ef26ea193d93ac7a3e39e26bffbb9b127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:00:cb:6b:33:55:51:42:4f:ca:c8:aa:30:
58:0b:d5:d7:11:a0:2b:71:29:ea:0f:22:b1:7a:79:
f8:08:41:d8:11:ac:64:f1:5b:94:b3:b6:35:4d:1f:
2b:b4:c8:dc:52:88:5a:e5:3c:e7:43:14:07:3a:b9:
7b:e6:d8:38:39:08:56:1c:b5:03:1b:67:97:52:0e:
4e:c5:43:e2:09:c1:ac:2f:43:e0:8f:92:ab:5d:6d:
8b:58:49:71:84:fb:ea:7d:35:84:8c:cc:7b:4c:e6:
be:80:12:68:05:64:11:ed:8d:8a:44:45:27:11:80:
80:bd:aa:d0:02:16:1f:2a:1f:71:67:1b:b8:72:62:
16:77:92:57:85:40:a7:88:10:60:c9:6c:19:a3:e8:
83:e5:ee:fb:71:38:5d:40:93:7e:10:86:25:f3:78:
38:2f:85:57:94:8c:f5:0d:cf:a8:2e:ef:1e:4b:03:
a7:f5:7c:c9:c3:7f:0b:c1:53:96:60:6e:c4:71:48:
be:e0:ec:c3:94:e1:b5:d2:2d:56:e9:d7:3d:95:c4:
57:56:c5:a2:04:59:43:06:64:3d:db:98:59:2b:17:
99:96:09:8a:0c:d3:c3:d5:a0:aa:9e:c0:6a:cb:f1:
01:ab:ea:df:48:ac:40:95:e5:42:bb:07:7c:95:0d:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:88:2E:6E:F2:6E:A1:93:D9:3A:C7:A3:E3:9E:26:BF:FB:B9:B1:27
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3b:24:4f:9d:4d:90:aa:70:31:81:51:a7:82:38:03:1d:2f:
c4:6d:d9:c7:7e:d5:75:46:1a:fe:1e:05:e0:5b:17:7b:12:af:
a0:20:69:58:ec:8f:2c:08:ff:60:15:be:c1:f5:da:22:ca:c6:
d8:84:65:8a:9b:37:98:d9:68:81:b9:95:b4:68:6f:f3:64:25:
18:19:d6:c4:2c:69:dd:e3:3c:b8:fb:d0:92:ae:80:20:71:87:
e5:1c:87:4a:62:d6:85:03:b6:3c:dc:0e:83:21:23:14:be:c2:
94:7a:d6:17:fb:d1:46:7d:5b:fd:3e:5b:59:b3:71:52:1f:57:
5d:98:9e:e1:d4:da:bf:80:0e:5c:32:59:f6:e4:ab:e5:44:e0:
a4:ee:b8:2c:f3:77:0a:75:ff:8c:11:a2:45:c0:0e:1a:91:8c:
e3:97:6e:7c:a0:46:4d:3c:3a:7d:2a:1e:1c:ef:d5:6d:8f:59:
e0:a3:0d:01:27:6c:8e:30:f8:c8:2b:f8:ef:3a:20:a5:27:95:
63:4a:7a:3e:6a:0d:c2:29:c1:1e:34:f1:aa:7e:b1:41:f5:7d:
ff:8f:92:2e:3d:3e:56:c8:b5:16:8c:4d:fc:d2:5f:22:8d:05:
2e:08:9c:8e:6f:7e:1e:31:66:fd:a5:d4:51:c5:da:04:0a:08:
7d:55:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:41 2025 by rpki-client