Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: 6vFe9pRdAEvLQpr6ors2ItSomnvcDYoUMzIHI24LEUo=
Subject key identifier: A1:FD:BB:E4:AC:85:87:20:85:52:B0:21:7C:0B:3C:D6:6E:B9:A9:A8
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 0199172CBE13E59A5B4BD4E6E1DB0EE33677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0AE2
Signing time: Fri 05 Sep 2025 00:00:32 +0000
Manifest this update: Fri 05 Sep 2025 00:00:32 +0000
Manifest next update: Sat 06 Sep 2025 00:00:32 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: cnYXsRmjgrcXIgAWtTJjBs1g4hwgIP/Rj4DwaTnN8Bk=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:be:13:e5:9a:5b:4b:d4:e6:e1:db:0e:e3:36:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Sep 5 00:00:32 2025 GMT
Not After : Sep 6 00:00:32 2025 GMT
Subject: CN=a1fdbbe4ac8587208552b0217c0b3cd66eb9a9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:ea:3d:00:05:85:c6:15:9b:ee:6c:2b:cc:
7f:47:14:e9:31:95:9b:e7:fc:1c:57:f4:4d:b0:e8:
fb:5e:7c:78:f0:42:48:07:5a:3e:1f:56:c4:3d:8f:
cd:5c:b5:04:f1:41:ba:2d:15:5c:f6:e8:8a:63:04:
e0:cc:19:e9:79:6a:69:7b:25:9f:ca:43:dc:64:3b:
99:3e:15:d6:02:b2:3b:0f:a3:c6:1d:b5:20:16:97:
09:f1:78:2f:7e:2c:a4:90:8c:c0:9a:75:d5:8f:e9:
ad:03:4c:37:7c:95:b3:b0:24:02:57:96:6d:89:96:
2c:ff:96:38:7e:cf:6c:7c:27:c7:fc:ce:6f:af:3f:
68:e1:a4:ac:40:80:0c:33:e4:e9:7b:e5:90:51:e3:
a1:ab:62:ce:f3:36:82:40:55:f1:85:9a:92:0d:49:
26:3c:3d:a7:96:d6:9d:19:54:05:a6:e6:ac:b6:36:
c0:ca:ed:63:a7:6d:c8:11:1d:59:9d:91:27:c8:5a:
48:8d:fb:d2:b1:3e:cd:3b:86:b2:88:a8:af:5f:ee:
2f:20:f7:43:9a:26:70:e2:b0:78:1b:76:67:66:d6:
72:a3:08:ec:08:3b:ca:18:55:6d:6d:49:9b:47:27:
f2:af:8f:fc:41:2f:98:99:f0:ee:e7:e1:ce:e7:c4:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FD:BB:E4:AC:85:87:20:85:52:B0:21:7C:0B:3C:D6:6E:B9:A9:A8
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7a:fb:6c:77:d6:5d:b3:7f:07:05:7c:58:7a:ff:da:b5:3f:
f2:8a:92:10:80:04:49:51:ad:af:9d:b8:04:4c:1c:bb:20:2c:
16:07:77:67:76:d9:6e:e7:6b:14:6e:3a:20:2f:79:4d:07:d2:
a3:59:fd:0d:9d:bd:b9:40:94:61:83:53:db:a3:6e:5d:ae:60:
74:b9:db:f1:8e:09:ec:6f:94:22:db:6d:67:80:99:ef:45:0f:
fc:17:1f:0a:74:17:9f:30:34:dc:4a:d0:54:5a:78:57:18:4b:
8c:69:f6:0e:8f:b8:b5:c8:d8:19:ba:4d:03:51:56:8b:88:df:
95:c5:2d:26:f5:5d:14:be:bb:60:4e:01:90:d6:ef:6c:c9:31:
d9:62:9b:31:f6:6c:04:fd:21:5f:22:45:c0:26:71:54:30:01:
23:9d:f3:46:87:c2:e2:c8:97:d9:81:29:de:fd:65:99:30:90:
38:bf:86:f9:fd:5e:d4:d8:55:1d:08:3b:e4:ed:be:38:8b:c3:
69:33:16:43:34:3f:03:37:98:1e:d7:b0:71:98:60:90:3f:9f:
c3:a1:13:df:14:8c:7c:0c:be:93:ba:09:36:ba:55:8a:e8:87:
12:02:91:6a:40:a7:2a:4e:47:42:ac:e3:c5:ec:4b:96:f3:c0:
69:30:9c:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXLL4T5ZpbS9Tm4dsO4zZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzQ0NDZiYTk5YjQzODkxZWNmMWY3ZmEyY2RiMDJlMTRh
MzQ0ZjMwHhcNMjUwOTA1MDAwMDMyWhcNMjUwOTA2MDAwMDMyWjAzMTEwLwYDVQQD
EyhhMWZkYmJlNGFjODU4NzIwODU1MmIwMjE3YzBiM2NkNjZlYjlhOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyPqPQAFhcYVm+5sK8x/RxTpMZWb
5/wcV/RNsOj7Xnx48EJIB1o+H1bEPY/NXLUE8UG6LRVc9uiKYwTgzBnpeWppeyWf
ykPcZDuZPhXWArI7D6PGHbUgFpcJ8XgvfiykkIzAmnXVj+mtA0w3fJWzsCQCV5Zt
iZYs/5Y4fs9sfCfH/M5vrz9o4aSsQIAMM+Tpe+WQUeOhq2LO8zaCQFXxhZqSDUkm
PD2nltadGVQFpuastjbAyu1jp23IER1ZnZEnyFpIjfvSsT7NO4ayiKivX+4vIPdD
miZw4rB4G3ZnZtZyowjsCDvKGFVtbUmbRyfyr4/8QS+YmfDu5+HO58SLgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH9u+SshYcghVKwIXwLPNZuuamoMB8GA1UdIwQY
MBaAFDrERGupm0OJHs8ff6LNsC4Uo0TzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMt
MDJhN2Y2ZGY2ODEwLzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMtMDJhN2Y2ZGY2ODEw
LzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3r7bHfW
XbN/BwV8WHr/2rU/8oqSEIAESVGtr524BEwcuyAsFgd3Z3bZbudrFG46IC95TQfS
o1n9DZ29uUCUYYNT26NuXa5gdLnb8Y4J7G+UItttZ4CZ70UP/BcfCnQXnzA03ErQ
VFp4VxhLjGn2Do+4tcjYGbpNA1FWi4jflcUtJvVdFL67YE4BkNbvbMkx2WKbMfZs
BP0hXyJFwCZxVDABI53zRofC4siX2YEp3v1lmTCQOL+G+f1e1NhVHQg75O2+OIvD
aTMWQzQ/AzeYHtewcZhgkD+fw6ET3xSMfAy+k7oJNrpViuiHEgKRakCnKk5HQqzj
xexLlvPAaTCcqQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:25 2025 by rpki-client