Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: IjiuDTXdvXzKyXxkUeVnUqE+lg+MOh2r+pRs2aN8QAI=
Subject key identifier: A5:8D:FA:78:C6:67:52:88:9A:2B:6F:6C:37:01:A0:43:27:CB:C2:7A
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 0196846C5F5BA1858F44EF7B54799105D923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 1413
Signing time: Wed 30 Apr 2025 02:00:16 +0000
Manifest this update: Wed 30 Apr 2025 02:00:16 +0000
Manifest next update: Thu 01 May 2025 02:00:16 +0000
Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: AQqyUU+Fu6U/Tb5slsLFpKdeGAILIdnzv1AnX2jtom4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:5f:5b:a1:85:8f:44:ef:7b:54:79:91:05:d9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Apr 30 02:00:16 2025 GMT
Not After : May 1 02:00:16 2025 GMT
Subject: CN=a58dfa78c66752889a2b6f6c3701a04327cbc27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:17:46:18:dc:3f:dd:4c:a8:c4:49:e2:12:
b8:e1:7b:b3:fb:eb:da:b2:d6:88:26:e8:3f:88:e1:
d4:0d:08:ff:ac:d9:04:05:7a:14:79:ba:58:a3:fb:
1b:cf:28:b3:0f:35:af:bb:f5:52:ca:12:0d:df:94:
e4:a9:e0:6e:50:53:f5:d7:78:6f:a1:0c:a2:42:94:
72:d9:3c:42:45:22:12:f0:f1:b9:98:ad:e6:0d:3f:
ad:30:b5:61:4b:2a:2b:a0:09:74:4d:02:95:98:b8:
ce:4f:c4:fe:e2:8c:3e:f0:8a:5d:8e:99:f3:90:7d:
34:cf:5c:71:69:37:33:8a:22:0a:8e:d1:95:80:df:
21:c3:1e:c3:84:d7:c1:10:4d:57:7e:e2:b5:3f:ab:
be:93:66:0e:e9:b2:da:0a:8f:bc:90:f2:0a:43:bc:
85:2a:de:2f:bc:b9:56:36:23:93:3d:53:c9:ea:32:
e1:79:3d:7c:7a:21:3d:43:98:79:ca:7c:cc:78:2c:
a1:23:23:40:64:ec:1c:1d:0b:a8:6f:f1:18:99:5b:
d9:ba:4c:d6:5d:69:30:67:b9:c3:79:7e:db:e1:a9:
4e:21:ad:2f:58:74:a6:5c:44:dd:7c:1d:22:56:2e:
88:aa:08:6c:ba:5f:5b:53:50:b3:8f:06:34:2f:4a:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:FA:78:C6:67:52:88:9A:2B:6F:6C:37:01:A0:43:27:CB:C2:7A
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:07:db:86:3c:fd:35:f4:6f:5c:42:53:6b:4e:8f:23:55:ae:
73:86:6a:57:eb:49:04:0a:fe:9a:db:94:cd:4b:86:1c:9e:b0:
75:3b:74:b1:bf:02:9a:b6:dc:ba:ad:74:e8:2a:39:11:6d:0f:
98:38:0f:0e:f1:cb:97:3e:57:dc:2b:48:62:2b:ad:14:47:d1:
ad:05:7d:8c:f1:d5:58:0f:55:6e:70:1a:b5:da:fd:80:71:a7:
7f:f9:c7:39:e3:7b:3c:be:35:67:f9:87:92:d7:7a:f4:6b:be:
89:ef:31:a0:62:e3:dc:8a:5c:0c:04:27:68:db:85:73:a1:16:
b8:44:d4:ce:07:c5:41:bb:53:64:a8:59:15:f3:38:9d:f4:9c:
78:1d:28:15:35:a2:ca:b9:49:fb:84:3b:59:99:ce:4e:82:75:
93:c6:43:da:7e:f5:c2:36:32:fe:d2:ab:bd:a1:93:43:bf:53:
07:fa:d4:97:17:0d:de:14:03:38:c8:34:15:1e:46:39:1a:56:
1b:73:5b:7f:f1:32:d3:ad:04:70:04:ca:c8:47:22:05:98:53:
52:10:fc:a0:15:48:bb:59:ab:9f:38:91:0a:91:ca:db:94:d9:
30:71:4d:bf:76:77:a1:c4:9a:f0:ac:11:98:1a:72:47:2a:6d:
e9:98:a8:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbF9boYWPRO97VHmRBdkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE4MDVmODQ3ZTAwYWZkNjMxNzllNGMyNTJhMzY3ZTk0
NWIyNmEwHhcNMjUwNDMwMDIwMDE2WhcNMjUwNTAxMDIwMDE2WjAzMTEwLwYDVQQD
EyhhNThkZmE3OGM2Njc1Mjg4OWEyYjZmNmMzNzAxYTA0MzI3Y2JjMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NIXRhjcP91MqMRJ4hK44Xuz++va
staIJug/iOHUDQj/rNkEBXoUebpYo/sbzyizDzWvu/VSyhIN35TkqeBuUFP113hv
oQyiQpRy2TxCRSIS8PG5mK3mDT+tMLVhSyoroAl0TQKVmLjOT8T+4ow+8Ipdjpnz
kH00z1xxaTcziiIKjtGVgN8hwx7DhNfBEE1XfuK1P6u+k2YO6bLaCo+8kPIKQ7yF
Kt4vvLlWNiOTPVPJ6jLheT18eiE9Q5h5ynzMeCyhIyNAZOwcHQuob/EYmVvZukzW
XWkwZ7nDeX7b4alOIa0vWHSmXETdfB0iVi6Iqghsul9bU1CzjwY0L0pAtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWN+njGZ1KImitvbDcBoEMny8J6MB8GA1UdIwQY
MBaAFPThgF+EfgCv1jF55MJSo2fpRbJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjIt
OTQwYzhhMGZjNzcwLzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjItOTQwYzhhMGZjNzcw
LzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgfbhjz9
NfRvXEJTa06PI1Wuc4ZqV+tJBAr+mtuUzUuGHJ6wdTt0sb8Cmrbcuq106Co5EW0P
mDgPDvHLlz5X3CtIYiutFEfRrQV9jPHVWA9VbnAatdr9gHGnf/nHOeN7PL41Z/mH
ktd69Gu+ie8xoGLj3IpcDAQnaNuFc6EWuETUzgfFQbtTZKhZFfM4nfSceB0oFTWi
yrlJ+4Q7WZnOToJ1k8ZD2n71wjYy/tKrvaGTQ79TB/rUlxcN3hQDOMg0FR5GORpW
G3Nbf/Ey060EcATKyEciBZhTUhD8oBVIu1mrnziRCpHK25TZMHFNv3Z3ocSa8KwR
mBpyRypt6ZiogQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:36:10 2025 by rpki-client