Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: tV0rKfzOZdouKP8z0VuwT0IxJGXpeh52VLTO4QCx2HQ=
Subject key identifier: 95:0A:0E:FE:C4:3B:95:F9:83:87:07:8C:D2:F0:79:29:FE:D1:91:A9
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 019A7293B52C19B4A5F8F8314E02E9FD8F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 0476
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: aB0thjLwqMkXABa9Yt/EaqgmlCgHQxP59rLtrWzL/ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b5:2c:19:b4:a5:f8:f8:31:4e:02:e9:fd:8f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=950a0efec43b95f98387078cd2f07929fed191a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:2a:56:04:62:31:88:55:b6:0a:84:f6:ae:
44:2d:0b:8b:2f:61:01:72:f3:9c:a5:df:1c:aa:d0:
e2:15:ba:66:83:94:56:36:63:12:5d:a8:cf:c2:bb:
21:02:c0:2a:4c:3b:2b:7f:72:fb:69:57:be:61:8f:
6b:b9:db:8c:bf:67:bb:4e:9e:67:98:f4:4c:19:99:
ac:8c:db:92:90:ee:27:d8:29:dd:73:b8:3c:03:27:
0c:ae:16:bc:e0:85:49:e6:ab:e5:e3:83:55:fb:ea:
62:0b:d2:f2:c0:32:17:fd:1c:30:11:52:63:fa:c9:
39:3d:f5:7c:b2:0e:aa:2e:df:54:21:27:74:64:06:
cc:af:cb:bb:00:91:4c:f3:77:b3:54:e1:53:b1:9a:
3b:56:1e:e0:ef:5e:a5:bb:df:1b:28:0f:dd:df:62:
b3:2e:69:32:82:9c:25:a5:08:64:cc:fa:7b:79:3c:
ec:d0:89:5f:3a:d8:3f:dc:8b:8d:7a:96:22:77:48:
59:f3:10:89:ef:b6:68:2d:a7:75:75:2a:aa:a2:17:
59:c2:cd:82:c3:b1:a9:ed:e3:db:74:6c:7a:58:d7:
48:a1:13:4d:aa:9e:7d:ac:7d:5b:65:96:01:fd:78:
6d:7d:18:1c:09:84:f8:7a:0a:ad:7c:87:90:f2:01:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:0E:FE:C4:3B:95:F9:83:87:07:8C:D2:F0:79:29:FE:D1:91:A9
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:f7:ff:da:d5:06:fb:83:46:72:24:85:bd:5c:08:a4:be:
58:02:4c:b2:1d:e9:b7:3b:94:53:3b:17:7e:b0:64:d3:09:6a:
1f:52:5f:57:2c:18:68:11:cc:16:40:16:80:71:5d:e0:9b:38:
b2:d9:f9:d1:73:be:ba:79:43:32:e6:c5:9f:28:d3:91:43:79:
ef:c7:1d:38:97:f7:29:87:b8:f8:da:8f:27:3c:98:25:f0:c3:
01:b8:72:42:bc:bc:e8:4e:47:16:1e:83:af:cc:92:2f:12:2f:
04:c6:d7:07:c6:0d:a6:08:27:4d:0c:dd:32:59:1b:79:e5:ff:
d8:69:f3:82:78:40:50:ae:a6:5c:90:49:37:69:5e:39:87:d3:
72:06:5a:d6:ef:92:25:53:07:0e:57:45:bf:b8:f9:bc:22:41:
5d:0a:36:37:36:a4:47:92:10:44:e2:53:69:7b:d1:7c:b1:6d:
58:b3:62:67:62:fc:58:11:b0:0b:6f:6d:eb:71:c8:cc:82:df:
05:1a:7c:46:7a:e5:29:00:58:e0:07:56:1a:45:e1:a4:e3:4a:
ce:51:6b:db:85:d3:2a:7b:5c:64:b3:fe:ca:25:5b:be:fc:b4:
a0:e6:4d:5f:28:10:75:fa:f0:dc:60:ff:21:7b:e0:b1:cd:c5:
37:ce:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:41 2025 by rpki-client