Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: fEtcwjRQMZuBoiLxJasibjMof59rT4WTrMXef0AE66A=
Subject key identifier: D4:26:26:A1:42:DF:26:CD:9D:41:49:79:2F:49:6E:C5:6E:13:C0:81
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019A50750A3134CFC857716CEFE1C72BCC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 044D
Signing time: Tue 04 Nov 2025 20:00:38 +0000
Manifest this update: Tue 04 Nov 2025 20:00:38 +0000
Manifest next update: Wed 05 Nov 2025 20:00:38 +0000
Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: ZNY55peKBdPM1wuxd4fAt9jrIWE+OHLaI5+kYSwpZOc=)
2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:0a:31:34:cf:c8:57:71:6c:ef:e1:c7:2b:cc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Nov 4 20:00:38 2025 GMT
Not After : Nov 5 20:00:38 2025 GMT
Subject: CN=d42626a142df26cd9d4149792f496ec56e13c081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:c4:2b:96:14:44:0b:33:76:52:de:d2:2c:
14:9a:db:96:0a:6f:63:bd:08:6b:f7:7c:54:41:c7:
37:6d:10:5d:0a:df:82:ac:89:af:ee:80:25:e7:43:
56:1d:dd:76:30:6e:09:89:36:c7:f5:86:70:59:b1:
12:4a:29:b3:7e:2d:4f:e6:84:25:3d:4f:73:13:9a:
4c:79:e2:80:cd:fa:c8:43:26:2f:95:7b:46:80:e4:
3e:27:b5:b2:f1:a3:d4:30:3b:e1:38:1c:8c:f8:d0:
55:48:65:ad:29:3d:a1:5d:9b:b9:19:c4:29:1a:13:
f8:7a:1c:56:41:ba:99:19:39:c4:03:be:7b:0c:97:
e4:30:3b:1d:5d:80:8d:d6:dc:ed:c4:9c:3c:6f:be:
cb:ab:0d:10:c2:06:cb:02:19:0b:3c:40:65:b4:f0:
c9:27:9c:2e:c5:0d:48:38:0e:fe:f6:c1:64:7e:f9:
43:f3:1e:e6:ff:e8:0e:29:40:7c:ad:02:30:07:53:
d1:bd:03:0d:45:0f:3d:b0:52:bf:fd:1d:96:61:6d:
fb:82:99:df:7f:d3:88:ca:11:f0:9c:ae:b7:78:1b:
7c:21:f9:a4:30:a6:9f:e3:bd:45:20:9e:30:ca:75:
fd:ea:a8:74:e9:11:a5:6a:0c:a6:80:e1:97:f3:36:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:26:26:A1:42:DF:26:CD:9D:41:49:79:2F:49:6E:C5:6E:13:C0:81
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e9:5c:03:75:66:3b:79:9d:d6:23:d2:25:26:99:d1:0c:d8:
75:92:1c:07:b0:27:15:d8:b7:b6:9f:a3:7a:6f:88:73:af:c3:
d7:b8:18:67:29:62:ae:bc:88:80:d9:f1:4c:5b:78:96:6a:c0:
b8:cf:03:82:8b:a1:3f:31:4a:32:35:79:a7:07:85:ab:b6:c5:
f5:14:94:79:72:5a:58:02:47:bf:29:b2:70:08:d7:54:88:1d:
f5:f4:c8:54:c3:a0:fe:00:be:45:87:bc:c4:69:6a:fa:e2:13:
90:ab:0e:f6:0b:dc:15:b5:89:7e:a2:de:80:43:cf:1f:46:c7:
93:f2:8e:89:28:24:85:5c:88:bd:18:a8:f6:fe:d6:e4:a3:81:
19:bc:07:a5:9a:e2:55:18:77:35:44:09:66:ae:18:a2:85:79:
d4:fa:d5:75:df:05:ab:ae:c5:34:5d:7c:e8:16:f3:83:04:b2:
84:e2:9a:45:78:5d:c5:4f:3c:1c:b9:3f:3a:db:cd:fe:8f:6f:
de:97:13:5c:a2:93:5b:ab:83:16:5a:52:d2:15:a5:eb:6e:19:
51:b0:82:9c:a5:cb:e3:a1:57:e6:66:f9:a0:fd:4b:66:73:65:
f5:a5:3e:3e:9a:d3:38:d2:11:ab:54:a2:b8:55:9d:64:fa:35:
17:44:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:29 2025 by rpki-client