Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: fQmXqoOKfDk3Zvo/vpjD+acXQ5h52WMvvBXGjF3F5bM=
Subject key identifier: B1:9C:82:EC:58:BB:30:F5:3C:D6:A6:C1:60:46:7F:C8:54:94:91:06
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 019A5307D44F4E6562218ECC60CD0DE99E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 0FFF
Signing time: Wed 05 Nov 2025 08:00:13 +0000
Manifest this update: Wed 05 Nov 2025 08:00:13 +0000
Manifest next update: Thu 06 Nov 2025 08:00:13 +0000
Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: CLwO3XBEIAz2Oy0/GWt1Pncz/O0IN5Ut576NYhuzxyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:d4:4f:4e:65:62:21:8e:cc:60:cd:0d:e9:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Nov 5 08:00:13 2025 GMT
Not After : Nov 6 08:00:13 2025 GMT
Subject: CN=b19c82ec58bb30f53cd6a6c160467fc854949106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:71:43:52:9a:93:22:3a:b3:e1:51:95:0c:
90:d7:bc:04:46:00:f3:32:85:f1:c3:f7:44:43:0b:
d0:54:00:17:94:e8:c5:81:fd:00:d1:6a:91:83:9a:
27:45:98:19:f2:78:46:0a:ea:e7:c0:7d:3f:10:55:
03:21:c2:c3:5f:e3:a9:af:4a:68:fe:96:95:78:f2:
7d:6b:0f:ec:e3:73:96:f4:a5:67:28:93:85:e3:80:
26:ab:b0:e5:df:98:e4:64:3c:1f:34:df:7f:4b:97:
a1:51:2c:1d:ee:06:4c:10:a8:b5:6d:d0:31:15:68:
ed:15:71:7b:06:c1:fb:60:51:fa:ae:ee:e2:e7:e6:
28:6b:05:ce:91:59:ea:8e:8c:08:d2:7e:fa:b9:6e:
c4:df:80:52:cd:be:fb:a7:cf:93:4f:91:22:f9:0a:
63:32:e9:b1:58:44:88:c3:6b:94:19:4f:8e:c3:c0:
65:26:86:40:97:0f:96:d4:1c:9a:fc:25:52:0d:fa:
e5:fb:70:89:0f:8a:af:22:58:d2:58:55:07:a4:b6:
4b:14:7d:95:40:c3:31:8b:88:2c:b4:a9:a9:71:32:
ac:04:2c:89:ff:19:be:95:b6:1d:76:fc:23:1c:ff:
fe:21:db:65:18:33:0b:e3:9b:3b:c1:a6:80:1b:ef:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9C:82:EC:58:BB:30:F5:3C:D6:A6:C1:60:46:7F:C8:54:94:91:06
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:03:03:e4:dd:c4:cf:07:b3:d4:22:40:a9:1e:cb:65:5f:b9:
e7:e9:bc:c4:b2:d7:73:d3:92:ab:9c:cb:f6:de:39:00:4e:51:
bd:2f:23:03:eb:6b:85:c2:f7:a2:51:7a:82:c2:a6:87:cc:1a:
f8:3c:2c:16:5f:59:53:37:76:4b:5d:7c:a5:e0:f8:2c:25:59:
47:d2:f0:63:15:c8:e8:de:68:81:9a:68:f8:fc:9a:e2:ff:1a:
77:ca:de:d7:c7:a1:ac:b0:a9:9f:fa:9a:e7:60:b7:79:73:cd:
e7:76:64:14:25:2a:4f:cb:2a:ed:9a:1f:d5:31:98:36:56:b9:
e2:22:f0:dc:c2:7c:2e:c6:84:25:77:b9:76:25:f2:2b:54:b4:
bf:b5:19:0e:54:3e:a1:a4:16:bc:3b:de:63:53:8b:3a:87:a7:
da:fe:b8:bf:57:6f:2b:ee:ab:b6:4e:a0:6b:f1:20:ec:33:fd:
45:59:3e:1b:85:fa:d0:5a:1e:6b:e6:08:90:c5:e3:3c:58:c9:
6e:fb:e9:af:ff:46:9d:ac:14:8b:07:cb:c7:6d:56:51:b6:03:
ba:48:b4:cf:af:07:2c:82:82:4d:9e:06:33:a1:2c:6a:5d:5c:
33:d1:6d:80:3b:e4:b5:51:10:52:aa:14:c5:f7:ee:7a:bd:0a:
cd:d4:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:54 2025 by rpki-client