Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: h4DL2DVY7Un52WQRsnhwCGMEV5/GdsM1D4ethZzbAqA=
Subject key identifier: CE:1A:EB:AE:97:5B:E8:41:E0:4E:00:DA:05:19:BB:B0:72:3A:53:76
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 0198C724CE9BDF4986C1E6EE16EDF9A55889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 0727
Signing time: Wed 20 Aug 2025 11:02:14 +0000
Manifest this update: Wed 20 Aug 2025 11:02:14 +0000
Manifest next update: Thu 21 Aug 2025 11:02:14 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: 5/cSRlwmEJTvI0CaxrV1cPu/nvD6P7yrJKfwT3P3ygc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:ce:9b:df:49:86:c1:e6:ee:16:ed:f9:a5:58:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Aug 20 11:02:14 2025 GMT
Not After : Aug 21 11:02:14 2025 GMT
Subject: CN=ce1aebae975be841e04e00da0519bbb0723a5376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:0a:b1:95:c1:08:59:12:e8:b6:af:4d:c2:
db:d6:41:f9:91:38:8c:da:e9:87:93:11:66:50:dd:
e7:f1:59:35:f1:4a:f0:73:ff:c2:41:ed:80:e8:09:
c3:09:14:5c:ed:a1:80:58:1d:61:35:10:13:7e:f5:
ec:fd:00:cf:84:42:4f:af:ed:d7:81:24:6a:fa:e5:
c7:d3:11:97:c5:cb:60:c1:5f:ae:f9:62:22:de:2e:
6f:28:b1:84:14:0a:27:73:e1:b5:a6:2b:15:24:4e:
46:4a:c7:dc:bf:a4:af:12:7b:20:f5:bf:b1:29:5b:
61:d4:16:d5:59:b4:c8:92:72:12:7f:a8:95:9d:09:
cd:21:c5:66:c9:27:de:7d:d6:3b:ce:bb:d7:a0:5b:
89:bf:00:14:70:ee:9b:dc:0c:56:97:d7:27:82:12:
bb:18:aa:ab:30:09:c8:40:18:23:9b:be:52:ff:54:
4a:68:8b:b8:fb:09:67:0d:e5:aa:87:e3:76:30:20:
5c:69:e0:49:07:f0:66:85:48:9c:b4:2d:5d:d8:84:
9b:ee:b3:8c:2d:44:d7:be:9a:d6:f1:8f:b3:16:4c:
24:b5:91:5b:9f:64:e1:cc:c6:da:94:d7:cf:0b:cf:
11:6d:01:90:79:2e:d1:1a:6c:24:98:c2:a9:ec:cf:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:EB:AE:97:5B:E8:41:E0:4E:00:DA:05:19:BB:B0:72:3A:53:76
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:24:f1:04:84:ce:4f:45:34:8b:4a:53:8a:ad:46:5d:28:7e:
05:da:0b:59:0e:5c:68:89:36:dc:dc:d7:8b:cd:fd:89:11:72:
57:72:8d:8d:da:db:8e:30:a8:6d:4f:42:9a:52:3e:4c:4b:1b:
25:75:e7:c4:a0:e2:3a:44:b3:19:12:63:e4:b3:2a:b6:a8:ed:
3f:03:32:b6:4a:35:95:fe:5b:8a:4b:f9:a4:ae:4d:56:bc:75:
c2:c7:d5:18:c6:44:5f:70:08:5f:9a:60:9d:62:69:f1:24:93:
ea:f6:33:79:12:88:46:b4:9f:12:4a:ed:d2:86:5b:9d:78:48:
4c:c0:f8:32:51:b9:a3:f1:7e:be:f5:8d:5f:6a:17:51:6a:69:
b3:47:9f:fd:31:2d:b4:83:ea:31:7d:32:d0:99:86:51:53:59:
95:89:03:e9:0b:75:62:16:ab:97:4b:07:dc:10:da:f6:79:d4:
6f:5d:0c:85:20:46:47:38:72:e2:a1:0b:ce:af:d9:a5:d3:c3:
33:d5:13:13:f1:35:a1:03:72:2a:b5:d9:8b:27:1f:a3:00:1d:
ee:a9:fc:06:87:78:7f:c8:6c:99:8c:3b:99:0b:05:de:5d:6f:
4c:00:ba:ec:e1:0d:eb:c9:96:d2:0c:a3:05:bc:c2:05:7f:75:
53:40:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:11:21 2025 by rpki-client