Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: z2xrNK/OX7ZkuxnJG7MFwL8nh3S/Zts01d3jNiir+PU=
Subject key identifier: 95:81:9C:9F:59:C5:1F:AE:08:00:32:BC:C1:4E:C3:10:62:D9:F4:76
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 0196BA7F565B7D86B481E2CEEC8C4E1027FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 142F
Signing time: Sat 10 May 2025 14:00:29 +0000
Manifest this update: Sat 10 May 2025 14:00:29 +0000
Manifest next update: Sun 11 May 2025 14:00:29 +0000
Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: QFCeJcWhxKuxmVKWVw3+dUVUg5Urn4XcHDLCsQTEYXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:56:5b:7d:86:b4:81:e2:ce:ec:8c:4e:10:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: May 10 14:00:29 2025 GMT
Not After : May 11 14:00:29 2025 GMT
Subject: CN=95819c9f59c51fae080032bcc14ec31062d9f476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:34:2a:c4:4d:24:2b:69:41:cd:8a:07:6e:
29:ac:01:25:c4:a2:7b:ff:82:5f:30:6d:e0:1a:3e:
d9:f5:e8:c9:a8:be:9c:34:6a:d1:0b:be:06:26:f7:
41:16:13:a1:39:d1:8e:0b:95:28:0a:fb:cf:bb:f0:
40:08:df:7c:7c:69:8b:e3:90:7e:09:c6:5a:e4:e9:
4c:b3:ab:d5:be:74:80:43:10:21:e0:0b:54:98:4f:
80:d4:21:4e:08:b6:c6:2a:53:2e:9b:27:e7:df:9c:
0e:79:b5:0d:8d:23:20:0f:25:21:d6:86:c1:70:c4:
e3:05:96:e2:f9:4e:0b:16:e0:32:81:28:a6:37:c2:
37:88:76:f7:c3:87:ee:b0:18:a3:db:ae:28:08:b5:
34:64:66:85:b9:9f:a4:9c:f9:71:6f:ce:53:9e:b2:
08:73:79:c1:a5:23:9f:7a:30:79:6b:16:f2:1f:46:
e2:2b:b4:83:b1:e6:da:f7:7f:37:e9:68:5f:31:32:
26:43:fb:da:ce:c8:17:1a:ad:19:93:90:9f:8f:d7:
56:ba:4d:08:b8:61:4f:29:1c:4e:bc:95:fc:15:13:
4c:08:50:17:3d:ce:a9:6c:7b:b4:42:72:3f:86:8f:
23:d2:d2:72:a5:52:da:30:e3:a4:4a:35:30:49:5e:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:9C:9F:59:C5:1F:AE:08:00:32:BC:C1:4E:C3:10:62:D9:F4:76
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:10:5d:68:d8:5e:44:40:2e:eb:5c:a3:d3:01:40:e7:b0:
b5:b3:4a:90:7e:81:ad:75:84:86:e7:73:ca:0d:67:ce:f6:4f:
d5:9b:92:a8:78:5c:e6:66:cd:5a:9a:88:ea:85:7c:e0:c4:02:
d1:aa:fe:6e:41:32:be:47:ad:f9:e7:2f:69:11:7f:f2:4a:88:
3c:aa:f0:90:e7:e9:19:2e:c0:ab:76:5c:86:d5:8f:9f:be:05:
86:38:af:f3:2e:d6:41:b7:59:e9:50:e2:08:f9:00:1e:2e:c7:
aa:36:af:ca:ac:ea:3c:bc:81:82:4d:cd:25:88:98:02:04:1e:
82:f0:a6:f6:7e:28:11:f2:5a:e1:55:e3:a1:55:37:30:da:37:
7f:fe:cb:9f:ac:2a:31:c4:5f:0d:f0:f6:8c:19:60:34:28:cd:
21:b4:dd:2e:69:59:19:0e:4e:5a:37:8c:ac:a9:6f:12:a3:83:
4c:e2:b9:0a:a0:d5:66:07:69:a1:28:da:40:2e:07:42:b0:65:
5a:82:92:14:6c:64:5a:80:1c:4c:0d:b4:12:0f:0c:5a:a6:d1:
39:f3:91:a1:36:05:c5:0a:10:c5:f7:09:24:18:f0:0d:dc:b5:
53:d8:26:11:58:d9:7f:16:f1:29:fe:dd:c5:82:9f:03:96:39:
55:d1:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:01:27 2025 by rpki-client