Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: 7D3Wp0sMuezphj+0rw5WMX4YweJ85o3VntBuYAThuu0=
Subject key identifier: 67:C9:BB:1E:6E:10:5E:9D:9D:14:3E:BD:63:A3:09:98:3E:AC:D0:4B
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 019A70A54383D7FE5774197CC896F0B67B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 161B
Signing time: Tue 11 Nov 2025 02:01:10 +0000
Manifest this update: Tue 11 Nov 2025 02:01:10 +0000
Manifest next update: Wed 12 Nov 2025 02:01:10 +0000
Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: awltH6BRIUDzFFQ+basomx4hc3I5kjkf5mrxMHs60cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:43:83:d7:fe:57:74:19:7c:c8:96:f0:b6:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Nov 11 02:01:10 2025 GMT
Not After : Nov 12 02:01:10 2025 GMT
Subject: CN=67c9bb1e6e105e9d9d143ebd63a309983eacd04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:1a:67:4e:5f:bd:8b:94:21:c9:27:61:49:
94:78:a3:2d:af:f4:95:f3:76:5a:b9:b5:f7:3d:00:
ce:14:91:0d:5a:ea:13:a2:10:4d:7f:1b:1b:3c:e5:
2a:8f:9c:9f:df:a6:52:6d:d1:0d:c9:81:67:55:d6:
4c:18:8b:33:90:87:1a:e8:a4:58:4d:c1:6d:c0:d9:
c4:e0:86:49:a3:c6:0c:57:07:24:59:76:25:1a:ed:
a3:82:4e:12:10:5b:5e:d4:6b:2b:22:97:b1:67:b1:
09:b3:0b:cf:7e:ce:b1:5d:04:58:e5:af:6c:38:25:
4b:ec:3a:f1:29:bf:34:6f:da:2b:44:4f:84:bf:9c:
a9:99:d7:86:75:84:31:c4:22:f8:1b:2d:df:dc:13:
32:4f:e6:bd:f9:6a:08:4e:c6:7c:f1:e6:64:0a:f1:
9b:fa:d6:3e:22:e3:f1:4f:f0:66:02:2b:4d:1f:d6:
d5:3b:c7:e4:ca:8b:f0:e5:df:2c:1f:92:d1:a7:cc:
39:e8:3f:97:64:e7:74:83:06:08:7d:85:f4:9e:4d:
46:b1:42:5c:3c:32:b7:0f:29:df:a5:a9:96:36:a8:
b3:bf:b5:ba:24:fa:7c:03:a2:70:0f:b8:87:4d:62:
2e:0f:c8:bc:9a:e7:ae:b2:92:0e:f0:96:c0:e5:02:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C9:BB:1E:6E:10:5E:9D:9D:14:3E:BD:63:A3:09:98:3E:AC:D0:4B
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6e:22:1d:d8:33:a1:c2:5a:bc:b2:bb:cb:99:63:72:44:5a:
c9:48:da:50:cd:d3:c1:c1:ab:95:c7:14:45:20:d7:54:f3:94:
ad:33:3c:47:ae:b7:82:ba:21:b5:8d:85:2f:c0:5b:71:63:53:
bd:cb:48:9d:d5:15:af:16:4b:ac:74:de:d2:db:49:b0:86:29:
14:8f:3f:fe:73:24:30:ba:a0:bd:f1:0f:1d:5a:ba:4f:64:f4:
64:88:d3:6c:af:fa:0a:44:69:63:45:a9:83:8d:b7:0e:aa:d3:
17:89:c5:70:5c:f6:eb:e4:f5:19:6c:4f:de:db:9b:18:bc:d3:
cf:d3:26:06:d2:6d:a5:bd:4d:18:3d:9a:10:27:2e:dd:dd:73:
de:83:9d:a0:ff:60:ba:93:6d:63:ba:46:7f:af:71:62:20:85:
85:79:d4:e9:cb:95:a6:30:16:37:2b:57:8a:90:8d:29:1a:af:
e4:7b:d4:72:3d:b4:34:4a:10:4e:34:4e:66:17:9c:aa:fb:f3:
74:79:d1:8e:fb:fb:91:6c:69:bc:f9:98:82:82:0a:4e:4f:23:
a7:12:41:1d:b5:2e:d4:c1:e4:bb:3a:6a:6d:e3:3d:c7:35:65:
e7:ec:b1:08:0e:6b:32:76:94:1c:79:d0:87:8c:1a:e9:6c:2e:
56:b2:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:45 2025 by rpki-client