Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: VVAEZYWuwEzeEEN43YNsaVkPsuzYqUaDQzuCgwqj4PM=
Subject key identifier: 83:7B:55:C0:C6:2C:C3:D9:15:B8:DF:37:F5:C6:24:A2:3A:8D:70:FD
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019A22F76E75F6B620B4F0D51CB6440EB553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 51
Signing time: Mon 27 Oct 2025 00:00:32 +0000
Manifest this update: Mon 27 Oct 2025 00:00:32 +0000
Manifest next update: Tue 28 Oct 2025 00:00:32 +0000
Files and hashes: 1: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: VXezR4epRaBG1VXc4eThEq9hYH5qjLK2yVAv4VBDDSg=)
2: k_uwe0_hbp0DrMLcpHMI8wGcruA.roa (hash: qbYK3P/JMzm2gpspT6OG1E1S38E2GDjqMXcyX1H7Szc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:6e:75:f6:b6:20:b4:f0:d5:1c:b6:44:0e:b5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Oct 27 00:00:32 2025 GMT
Not After : Oct 28 00:00:32 2025 GMT
Subject: CN=837b55c0c62cc3d915b8df37f5c624a23a8d70fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:12:89:03:93:68:18:10:8c:2b:4e:35:f1:
bf:9d:55:84:be:a2:89:fb:d2:fe:e8:6c:e9:c6:72:
75:bb:2b:94:73:2d:20:69:ea:d9:f2:c3:c3:ee:e3:
6b:39:53:af:25:66:2e:41:0b:57:ae:6c:af:c0:84:
44:5a:7f:85:d0:cf:71:0d:0e:49:b4:e3:3f:5d:a5:
6b:af:46:66:55:da:dd:e1:35:4e:07:cf:12:39:30:
ce:a2:c5:9a:f2:18:44:a4:41:13:73:eb:4c:da:25:
66:fe:f8:d7:bd:3f:d2:35:b0:8a:dd:a4:b8:b6:6b:
e2:4e:bd:bc:68:f5:f5:e8:8b:b4:5e:91:16:5a:a6:
ed:72:92:6c:36:b2:90:b1:17:55:e8:e7:c8:14:8c:
1b:70:75:25:d8:25:7c:a7:9e:ac:3a:82:01:27:a9:
d1:bb:8b:21:2c:37:27:c3:2c:98:0e:ba:69:f6:9a:
9f:85:9f:28:2b:4f:cd:7e:4d:67:74:63:13:8a:9a:
c5:4c:e9:d1:cd:f2:08:4e:29:ee:a1:ee:30:fb:91:
8e:f4:23:e6:86:7e:e2:ee:cf:e3:9a:a4:e0:72:02:
f8:6a:61:69:58:3b:76:27:80:cb:98:87:7b:d9:2a:
c6:18:d7:49:2d:4f:1d:1c:88:52:a0:95:53:f9:6d:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:55:C0:C6:2C:C3:D9:15:B8:DF:37:F5:C6:24:A2:3A:8D:70:FD
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:3d:7e:58:f7:f6:f3:17:fa:03:57:7d:b6:61:03:fc:70:
dc:df:9e:b7:c6:c2:9b:7e:07:17:bf:f1:9b:72:f9:b4:53:9b:
52:e3:df:e0:03:7c:40:ec:b2:21:f5:38:65:f2:08:77:14:d5:
fa:9b:e5:87:8a:ef:63:5f:60:fd:88:25:73:1f:02:88:62:f5:
33:30:a8:d1:06:ed:87:31:d5:4b:f0:90:1e:e4:3f:42:19:8d:
61:c0:01:65:06:25:8d:94:2d:fb:5d:97:56:15:f2:56:60:81:
8b:db:e7:3c:78:ac:b2:6b:c5:e5:bc:63:fc:c6:9e:38:0a:c5:
3e:9e:2a:3e:c9:32:e6:23:85:16:04:db:9f:8c:b7:81:da:48:
9e:a9:22:23:98:b4:47:cc:4e:01:68:55:2b:aa:24:84:1e:82:
bf:a8:05:8c:04:57:d5:e6:76:e4:82:87:e7:50:bb:bd:4b:ae:
0b:19:5d:bc:e3:5d:7e:b6:e9:59:9d:5b:c8:b7:d6:61:ec:22:
fe:13:fe:20:92:a3:0d:b9:fb:96:93:97:ab:80:9b:3a:f9:26:
d9:37:a3:f1:a0:f0:3f:63:6d:39:8d:c8:d0:58:3d:30:0e:4d:
b2:56:6c:1e:50:24:0d:65:ce:4b:ef:a6:44:c1:9c:bd:bf:8c:
8d:31:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:15:05 2025 by rpki-client