Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: cGz6bLNUZfbxtFzgaXMjuvfp/tN2sdiEJaikr3rZg+E=
Subject key identifier: 49:99:B5:13:4A:1F:73:9F:92:6A:53:06:00:39:B6:FC:0D:F3:01:2E
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 019A53AD0069334A0BCDA1A38B4AAFACA4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 160C
Signing time: Wed 05 Nov 2025 11:00:37 +0000
Manifest this update: Wed 05 Nov 2025 11:00:37 +0000
Manifest next update: Thu 06 Nov 2025 11:00:37 +0000
Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: TdEZTF8fwAFrODNsqYpZOurtTc4E8RKECqoxTaRzVHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:00:69:33:4a:0b:cd:a1:a3:8b:4a:af:ac:a4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Nov 5 11:00:37 2025 GMT
Not After : Nov 6 11:00:37 2025 GMT
Subject: CN=4999b5134a1f739f926a53060039b6fc0df3012e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:65:af:98:5b:d2:58:e0:48:3a:0e:43:74:
fd:dd:ed:5a:e9:c7:f5:42:ad:46:df:e8:2d:3d:9d:
9b:f5:f1:aa:d8:b1:94:80:ff:5e:5b:cf:6f:d8:38:
c1:be:06:23:0f:95:5f:fc:7e:8b:25:e2:61:e0:ea:
8e:00:b6:a7:84:89:8a:08:4e:b2:2c:c0:3e:10:61:
44:07:5c:d1:35:98:27:0a:62:7b:15:b1:06:2e:96:
da:9d:d4:f2:8f:a0:1d:de:38:2c:45:37:e9:50:8b:
c0:c1:ea:a8:17:18:8d:d3:36:ab:2a:e4:19:72:6a:
f4:95:00:60:91:2d:8f:a4:22:52:e9:18:cd:dd:fd:
8d:38:14:8d:2b:ad:29:37:54:96:be:fd:98:0f:44:
82:93:93:74:d6:11:46:83:10:27:db:57:a9:cb:a7:
49:7d:90:04:db:72:58:d8:fb:04:06:5a:7b:8a:a5:
65:bf:95:19:6d:a0:d6:0e:22:89:0c:19:cc:a5:0f:
b4:b8:5e:a3:f7:1c:24:a5:52:99:f2:61:54:3e:5e:
4a:0a:fb:7e:7d:c4:2d:5d:33:30:13:78:64:2b:4e:
b9:b1:67:e9:f8:ab:11:65:70:c9:ed:5f:cf:b9:26:
07:0d:f6:7d:18:7c:2a:14:51:e8:d1:9a:33:13:d9:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:B5:13:4A:1F:73:9F:92:6A:53:06:00:39:B6:FC:0D:F3:01:2E
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:30:20:f6:bb:42:4b:3d:b3:52:ac:b9:80:b4:47:b7:27:24:
52:f8:85:ea:b5:80:ff:37:1e:8f:89:51:3a:2a:35:35:c2:b3:
b9:a0:95:62:52:1c:4c:b3:d6:8d:d2:c4:ff:3e:64:00:31:6e:
fc:27:43:9b:a2:f4:01:f9:2a:f3:9b:2a:fe:78:60:c4:4e:71:
82:55:33:ed:de:08:78:09:c5:86:66:38:77:04:94:27:b0:28:
2c:9a:ee:e2:74:40:63:95:d0:bb:77:33:51:02:9d:91:8c:a7:
b7:ef:97:a8:a8:d0:07:dd:17:0c:97:af:02:52:ec:93:42:a6:
bd:5d:6f:c0:d5:e0:e4:90:e5:5e:16:61:6f:c5:e2:17:5e:67:
23:f5:13:fa:66:31:6d:0d:48:ee:b1:b6:de:85:a7:7a:4c:85:
45:b8:74:55:23:4a:41:5e:21:8a:9e:fb:f1:c3:04:08:87:95:
d9:95:40:44:61:2b:ff:de:b8:56:93:a9:e9:99:0a:ff:40:da:
5e:00:61:94:ac:f4:11:d0:75:0a:67:7f:82:e4:47:2e:74:12:
1a:fc:b2:9d:eb:b8:6f:02:70:c8:50:dd:bb:16:0a:79:7f:a7:
89:f3:67:30:86:20:17:04:cc:6b:11:bc:65:b1:08:42:e2:9b:
39:02:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:40 2025 by rpki-client