Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: fLKSW99gkeGK0i7JAA2OBmFLevH3/rdTHDZIQTSC8GQ=
Subject key identifier: AC:2C:A9:7D:FE:43:C7:C1:7D:E8:1D:AB:D1:48:64:40:71:84:8F:B2
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 019A72CA5FCAC12C36295008A4EC35418361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0B96
Signing time: Tue 11 Nov 2025 12:00:56 +0000
Manifest this update: Tue 11 Nov 2025 12:00:56 +0000
Manifest next update: Wed 12 Nov 2025 12:00:56 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: i4HAJeMzdAOwCOeF738+ofVu9pezawDsZE2SHon21mY=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5f:ca:c1:2c:36:29:50:08:a4:ec:35:41:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Nov 11 12:00:56 2025 GMT
Not After : Nov 12 12:00:56 2025 GMT
Subject: CN=ac2ca97dfe43c7c17de81dabd148644071848fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:aa:f8:90:d3:dd:d9:56:47:69:53:4f:02:
81:89:58:e7:24:e0:4d:b3:75:41:0e:8d:96:67:a9:
e1:a0:f2:69:e7:0d:20:86:f8:43:9b:03:97:80:89:
99:1d:3d:81:d8:20:40:50:49:ea:77:ff:36:fd:20:
ce:fa:7b:85:10:f0:c7:b5:57:be:ce:08:4e:36:dc:
95:74:6d:b6:f3:e2:17:fa:2d:73:89:ae:a0:8e:55:
99:f0:09:3d:ef:74:58:03:b9:c2:8a:ac:9b:0c:81:
64:45:32:40:44:c1:b7:fd:61:eb:9e:ad:d7:bb:aa:
3d:1d:c1:4f:61:ea:56:69:fd:19:e0:13:81:7d:68:
0c:7a:e6:00:e1:b1:37:91:f5:31:e4:d5:56:20:a1:
f1:5b:f5:c3:f9:89:be:aa:27:ea:27:08:6a:b6:b9:
2c:74:49:7c:ea:d9:a7:e5:d5:8b:1e:45:80:0b:0b:
51:97:be:38:a9:e9:be:f9:41:9e:4e:84:fe:f6:7e:
87:fb:b3:97:ae:8d:aa:68:86:4c:d3:64:7f:c0:32:
a5:8a:d0:1a:6b:3f:d5:92:40:54:39:54:7e:7a:c1:
27:e6:43:44:54:26:f0:35:56:03:d6:18:35:2f:f9:
a6:9b:d4:1a:fa:ad:bb:38:7e:02:38:97:9b:ad:f7:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:A9:7D:FE:43:C7:C1:7D:E8:1D:AB:D1:48:64:40:71:84:8F:B2
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2a:67:ba:9a:66:19:96:13:42:57:1b:2d:5e:bf:5e:03:59:
15:73:5f:d6:45:5d:53:59:05:75:bb:68:5c:46:50:00:14:11:
f0:b2:89:dd:51:2d:af:56:d5:de:4e:68:7f:b3:72:c6:62:72:
01:c1:5a:10:7f:58:60:79:b3:3b:4f:11:b1:64:a4:54:a7:df:
98:e3:ac:20:f2:a8:4c:c4:f6:0e:ab:04:60:aa:44:cb:6f:b2:
3e:1d:20:3c:fd:28:b9:46:1a:cb:e3:30:da:d9:83:1c:e6:17:
0e:24:61:7b:2c:38:be:84:15:6d:b1:3e:9b:b5:f8:f8:c2:74:
11:d7:f5:60:d1:76:c7:14:50:8c:0f:5e:91:52:d1:94:62:6b:
82:68:29:42:82:69:1f:fa:1e:4e:99:84:75:18:8f:2f:ec:5e:
49:ea:0e:a1:25:b3:16:b7:a5:08:64:3c:75:c6:75:3a:20:0c:
0d:eb:bd:e4:f1:8d:5e:c9:76:bb:21:8d:bd:27:da:d4:6f:27:
1f:41:44:c4:a2:17:86:38:42:56:6d:05:aa:1a:81:e1:f1:20:
a1:5b:a4:e4:e4:30:2b:b4:55:84:9e:01:15:34:9b:ad:e0:70:
f8:e7:5a:ef:e8:01:fc:01:bd:22:46:47:f2:35:4b:31:b1:9a:
86:03:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:53 2025 by rpki-client