Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: klk3JrE9fsD3QB/4PM15srr0z9CsgwwYzs0eUBmdeic=
Subject key identifier: AF:64:23:5D:C3:18:E0:39:76:C7:E8:BB:5C:ED:FC:4F:F6:44:F8:23
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 0197B77C33F2813E50ABADAC72691A560A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 14B2
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: lIGO1VTskfhqGuQBlFVGoTU+A07z0o/Ibne6HPB0VQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:33:f2:81:3e:50:ab:ad:ac:72:69:1a:56:0a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=af64235dc318e03976c7e8bb5cedfc4ff644f823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:29:28:d3:cc:ac:36:44:86:44:84:40:4f:
af:77:ca:1e:7e:a0:83:d7:76:1f:fc:b3:67:65:0f:
08:1e:a5:68:43:64:ac:e3:a3:29:84:70:c4:92:5b:
7a:e8:25:0d:31:c8:e5:37:9a:dc:f2:b0:c4:d6:40:
1e:cf:c6:d8:1d:77:f0:df:bb:d3:fe:86:18:14:c2:
bc:2f:e9:7d:9c:0d:4b:32:f1:99:ca:ed:98:cd:f3:
45:fd:99:31:ff:86:08:c2:18:e7:ca:ca:05:61:e3:
15:91:2a:79:85:22:29:24:aa:52:41:16:01:be:25:
bc:2f:ff:9f:71:e7:71:84:38:7e:a1:32:f6:c2:b5:
70:fc:ed:de:6a:13:03:a9:fa:1d:e5:f1:bb:ce:f3:
ac:14:5c:50:cf:37:89:9f:9a:45:b2:47:68:fe:66:
1c:a2:0c:3e:1c:eb:56:15:3c:98:ee:19:18:d8:1e:
f0:88:30:8f:93:4b:c4:aa:04:19:d9:ac:9b:1f:6d:
89:bb:db:32:d4:65:40:17:99:5a:2f:23:b8:22:21:
e6:34:ce:5b:18:63:b2:4f:ac:38:fc:b4:75:a5:45:
cb:40:37:c5:ad:3a:99:f1:1d:45:97:da:7c:7e:46:
2b:10:a8:f8:8c:4f:b7:bd:ce:17:db:65:4e:d1:f2:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:23:5D:C3:18:E0:39:76:C7:E8:BB:5C:ED:FC:4F:F6:44:F8:23
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:cf:13:a9:8e:5b:3d:a3:f8:7c:7d:e2:ba:03:6c:76:4c:
57:b2:69:89:e9:c1:81:44:ad:f3:94:2a:8b:f7:54:b5:8f:77:
2d:64:4a:a6:76:e2:9e:a7:0d:e6:8d:1f:f3:85:82:cb:58:5f:
9d:fa:65:e2:89:92:bb:b8:8f:66:a6:44:16:53:de:99:5c:fa:
85:15:04:77:53:bc:6c:82:cb:03:b3:29:a8:ac:6e:4a:48:1f:
0d:91:67:91:f3:c6:50:fc:39:f2:a5:82:64:5a:b1:03:4b:96:
be:2b:d9:cc:47:2c:fb:64:8a:7c:ce:1d:cf:00:2e:c2:0e:4d:
2f:db:44:8f:1b:f6:27:27:4e:76:3f:56:2c:83:20:7e:62:38:
6d:11:52:9f:2f:5d:54:e3:8c:86:76:14:48:eb:f5:18:39:96:
de:26:0f:f2:fc:e3:87:bc:d1:fc:7e:05:6d:37:03:6b:1b:c2:
65:3a:cf:ab:27:f2:2d:64:32:b1:9d:26:fe:ec:a8:43:31:6f:
fc:75:70:6b:d6:a7:2d:67:9c:01:fb:ff:18:59:e9:03:35:d8:
ab:f6:05:1d:a7:93:7b:9f:52:7c:14:29:07:7c:c9:d4:f0:cc:
bb:ec:16:63:d4:7e:e6:36:83:fa:be:d6:2b:76:73:af:41:96:
d2:d5:af:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDPygT5Qq62scmkaVgqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE4MDVmODQ3ZTAwYWZkNjMxNzllNGMyNTJhMzY3ZTk0
NWIyNmEwHhcNMjUwNjI4MTcwMDU5WhcNMjUwNjI5MTcwMDU5WjAzMTEwLwYDVQQD
EyhhZjY0MjM1ZGMzMThlMDM5NzZjN2U4YmI1Y2VkZmM0ZmY2NDRmODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz0pKNPMrDZEhkSEQE+vd8oefqCD
13Yf/LNnZQ8IHqVoQ2Ss46MphHDEklt66CUNMcjlN5rc8rDE1kAez8bYHXfw37vT
/oYYFMK8L+l9nA1LMvGZyu2YzfNF/Zkx/4YIwhjnysoFYeMVkSp5hSIpJKpSQRYB
viW8L/+fcedxhDh+oTL2wrVw/O3eahMDqfod5fG7zvOsFFxQzzeJn5pFskdo/mYc
ogw+HOtWFTyY7hkY2B7wiDCPk0vEqgQZ2aybH22Ju9sy1GVAF5laLyO4IiHmNM5b
GGOyT6w4/LR1pUXLQDfFrTqZ8R1Fl9p8fkYrEKj4jE+3vc4X22VO0fIZ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9kI13DGOA5dsfou1zt/E/2RPgjMB8GA1UdIwQY
MBaAFPThgF+EfgCv1jF55MJSo2fpRbJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjIt
OTQwYzhhMGZjNzcwLzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjItOTQwYzhhMGZjNzcw
LzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFrPE6mO
Wz2j+Hx94roDbHZMV7JpienBgUSt85Qqi/dUtY93LWRKpnbinqcN5o0f84WCy1hf
nfpl4omSu7iPZqZEFlPemVz6hRUEd1O8bILLA7MpqKxuSkgfDZFnkfPGUPw58qWC
ZFqxA0uWvivZzEcs+2SKfM4dzwAuwg5NL9tEjxv2JydOdj9WLIMgfmI4bRFSny9d
VOOMhnYUSOv1GDmW3iYP8vzjh7zR/H4FbTcDaxvCZTrPqyfyLWQysZ0m/uyoQzFv
/HVwa9anLWecAfv/GFnpAzXYq/YFHaeTe59SfBQpB3zJ1PDMu+wWY9R+5jaD+r7W
K3Zzr0GW0tWvEA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:41 2025 by rpki-client