Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: rPaiOEUKDBjCO0319UYOJE5OMEcg6w7p9zu2eobCmSo=
Subject key identifier: 18:75:0A:D9:05:C8:31:0C:8C:8E:41:8F:68:12:13:87:60:33:66:9A
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 01987E665527E86B21FB41477BE035861F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 1519
Signing time: Wed 06 Aug 2025 08:01:32 +0000
Manifest this update: Wed 06 Aug 2025 08:01:32 +0000
Manifest next update: Thu 07 Aug 2025 08:01:32 +0000
Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: 0ZaNXobFDhUeIQXnUdoznwaH73aJZIpNgd8gtyUcTU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:55:27:e8:6b:21:fb:41:47:7b:e0:35:86:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Aug 6 08:01:32 2025 GMT
Not After : Aug 7 08:01:32 2025 GMT
Subject: CN=18750ad905c8310c8c8e418f681213876033669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:d1:dd:b0:af:ac:1d:e3:7d:a5:7a:06:74:
2b:05:1c:a6:0b:78:09:e1:5b:73:95:e3:2f:d1:53:
c8:aa:d8:3c:cf:32:b2:b6:53:c8:de:8c:b6:76:0a:
19:17:e8:ae:73:4c:9c:10:49:84:ac:e9:0b:7d:65:
e7:85:19:2a:19:51:93:19:bf:e0:42:fb:22:68:32:
f7:74:1e:12:b6:62:68:e6:25:49:e9:3c:22:e3:af:
7d:94:1b:c6:49:ff:a7:8e:dc:8b:57:74:fe:a1:37:
8a:56:03:23:f6:33:ba:4f:09:39:9d:f6:40:fa:ff:
42:f9:79:8c:2b:85:b3:db:f3:6c:71:f6:5b:6b:d7:
ca:15:d7:6b:15:59:3d:37:80:ad:ad:66:b9:e4:47:
35:f7:ae:d1:b4:32:26:9f:b7:15:d5:61:70:4c:c9:
b9:22:a4:16:a3:d8:ab:59:fe:b9:f0:c9:5b:46:b6:
13:bd:9d:79:d6:97:ea:1d:03:b7:b8:2d:b3:d7:43:
64:59:f5:cf:f5:b3:a8:1a:d3:4b:8d:a3:64:88:c3:
b4:1e:95:fc:e1:c0:b6:62:40:8c:bb:6c:08:90:3e:
58:5b:70:52:9d:0b:bd:4e:fc:6a:70:1c:21:28:a9:
47:05:dd:6a:28:85:90:ce:b0:c9:42:ec:3c:0c:1d:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:75:0A:D9:05:C8:31:0C:8C:8E:41:8F:68:12:13:87:60:33:66:9A
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:62:6f:77:a0:ea:e6:1b:e8:c7:e3:84:fa:25:dc:3b:b7:c3:
88:1f:98:75:a0:6d:35:14:22:43:1a:5a:65:31:24:ed:58:95:
0a:60:64:69:41:8c:87:21:12:15:22:70:1d:6e:e4:8d:b7:82:
ba:2e:d8:da:14:99:26:21:ba:c2:11:60:62:fe:03:7c:6d:14:
18:2e:2d:af:f7:ff:68:70:11:55:bb:f0:4b:b4:6a:f5:37:8d:
30:48:2c:12:73:e9:8c:ab:8e:b5:0a:97:49:8a:da:69:7e:e7:
cb:91:77:fa:1d:99:14:2b:96:78:b8:94:7d:f9:e5:2f:d5:17:
bb:9b:4f:e9:22:5d:ea:c6:63:07:64:53:05:3a:df:cf:84:7a:
50:12:6d:50:91:10:68:75:0b:42:1d:15:80:92:5e:a5:8f:2f:
fb:70:8f:37:87:81:41:ac:b7:83:d4:3a:df:c9:77:0c:94:13:
9d:ce:47:58:f4:80:a1:fe:49:78:d2:61:57:90:f4:05:11:f5:
1e:f9:2d:80:7d:e5:47:16:f5:5b:4f:28:ea:52:bf:d5:eb:50:
d4:d6:94:4a:7b:02:97:ea:ed:ca:c5:3f:3f:20:e4:da:0a:b2:
6c:20:4e:23:0f:9e:8a:db:b9:b1:b4:95:e9:93:c9:15:2d:fe:
7e:e1:46:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+ZlUn6Gsh+0FHe+A1hh9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE4MDVmODQ3ZTAwYWZkNjMxNzllNGMyNTJhMzY3ZTk0
NWIyNmEwHhcNMjUwODA2MDgwMTMyWhcNMjUwODA3MDgwMTMyWjAzMTEwLwYDVQQD
EygxODc1MGFkOTA1YzgzMTBjOGM4ZTQxOGY2ODEyMTM4NzYwMzM2NjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy3R3bCvrB3jfaV6BnQrBRymC3gJ
4VtzleMv0VPIqtg8zzKytlPI3oy2dgoZF+iuc0ycEEmErOkLfWXnhRkqGVGTGb/g
QvsiaDL3dB4StmJo5iVJ6Twi4699lBvGSf+njtyLV3T+oTeKVgMj9jO6Twk5nfZA
+v9C+XmMK4Wz2/NscfZba9fKFddrFVk9N4CtrWa55Ec1967RtDImn7cV1WFwTMm5
IqQWo9irWf658MlbRrYTvZ151pfqHQO3uC2z10NkWfXP9bOoGtNLjaNkiMO0HpX8
4cC2YkCMu2wIkD5YW3BSnQu9TvxqcBwhKKlHBd1qKIWQzrDJQuw8DB1DCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh1CtkFyDEMjI5Bj2gSE4dgM2aaMB8GA1UdIwQY
MBaAFPThgF+EfgCv1jF55MJSo2fpRbJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjIt
OTQwYzhhMGZjNzcwLzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjItOTQwYzhhMGZjNzcw
LzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGJvd6Dq
5hvox+OE+iXcO7fDiB+YdaBtNRQiQxpaZTEk7ViVCmBkaUGMhyESFSJwHW7kjbeC
ui7Y2hSZJiG6whFgYv4DfG0UGC4tr/f/aHARVbvwS7Rq9TeNMEgsEnPpjKuOtQqX
SYraaX7ny5F3+h2ZFCuWeLiUffnlL9UXu5tP6SJd6sZjB2RTBTrfz4R6UBJtUJEQ
aHULQh0VgJJepY8v+3CPN4eBQay3g9Q638l3DJQTnc5HWPSAof5JeNJhV5D0BRH1
HvktgH3lRxb1W08o6lK/1etQ1NaUSnsCl+rtysU/PyDk2gqybCBOIw+eitu5sbSV
6ZPJFS3+fuFGQg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:09:23 2025 by rpki-client