Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: e8ejhVszgTvOk+nuugCt/QjQWnZzTifv8Ezqhm6wRkA=
Subject key identifier: 65:45:BD:FC:2A:BB:9C:49:C0:F4:49:05:BB:F1:37:51:50:7B:13:DA
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 0198898E4D8768B4D85CCF8C0AA2158054AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 0F12
Signing time: Fri 08 Aug 2025 12:01:01 +0000
Manifest this update: Fri 08 Aug 2025 12:01:01 +0000
Manifest next update: Sat 09 Aug 2025 12:01:01 +0000
Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: BxBJG8bFZ49LLGbmiS7FAnrbp18A4ngtMQbEh5c7jE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:4d:87:68:b4:d8:5c:cf:8c:0a:a2:15:80:54:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Aug 8 12:01:01 2025 GMT
Not After : Aug 9 12:01:01 2025 GMT
Subject: CN=6545bdfc2abb9c49c0f44905bbf13751507b13da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:3b:64:b2:2c:bb:08:80:97:ea:05:41:cb:
e0:e1:ea:dd:59:b2:8d:93:cf:e7:b8:de:bc:a2:fc:
d9:2e:af:44:04:14:f4:b1:70:07:d8:45:49:3d:51:
0f:bc:f5:93:f3:44:3b:4b:7e:80:5e:03:6d:da:a4:
ab:a9:9a:a8:79:0e:60:8a:f4:85:33:cb:d4:23:24:
43:f4:1b:a0:29:60:67:71:09:42:60:81:1a:35:b7:
4d:82:3b:e9:b3:e7:86:c2:87:72:01:23:b1:a3:56:
c5:da:0e:9a:03:12:e0:89:99:0f:f5:43:ac:06:29:
9d:c0:28:ea:9d:8c:e4:4c:b3:1e:ef:df:a7:3f:e8:
b0:9f:1b:db:d0:cf:e0:32:f5:72:da:99:93:5e:8e:
70:d4:a7:fc:ba:76:21:de:22:05:65:fa:14:5b:b1:
65:12:cf:f5:83:6d:90:71:cb:a4:6b:37:ec:02:94:
93:d2:2b:c2:26:21:3f:1c:52:54:6b:ca:a1:a9:a1:
a3:e6:82:e5:d0:1c:48:05:27:90:ba:c0:84:6d:a6:
b8:55:4f:53:7f:9f:0e:e3:51:56:0b:19:da:5c:da:
ee:1d:f2:b9:b7:79:cb:85:6e:68:81:02:90:cf:43:
50:02:97:b8:6b:16:fc:04:9f:b0:1c:72:e4:f4:a0:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:BD:FC:2A:BB:9C:49:C0:F4:49:05:BB:F1:37:51:50:7B:13:DA
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:36:52:6e:ec:32:85:d2:39:fc:5f:e1:95:e4:57:6b:c0:3e:
a9:95:18:3a:72:ca:04:44:2d:cc:71:5f:e3:2e:87:2b:ba:1e:
49:44:c2:de:13:91:62:56:ff:7a:a2:57:ea:8a:f6:79:2a:3c:
56:b1:aa:89:47:e5:b4:67:18:88:f0:d6:51:98:dc:06:7b:01:
e4:5e:09:87:a0:40:7a:f8:0c:15:50:8c:b3:40:12:c5:d3:12:
a8:1f:20:e6:4f:42:e4:73:5d:7e:26:2d:15:ff:20:40:ac:6c:
c6:fa:d9:aa:50:91:37:a9:b5:9e:ff:e6:0e:0c:3f:4e:56:06:
1b:d8:29:f3:ff:93:c6:3c:08:06:82:2d:05:24:cb:e4:8f:4e:
b1:a6:0a:55:b4:04:50:d7:95:d1:8e:d4:00:19:fe:43:de:b9:
97:73:11:42:f6:f8:9a:ef:58:9e:03:be:68:07:8d:5d:a2:30:
7d:de:78:9a:ea:f8:87:4f:4f:68:8e:cc:fb:ef:97:33:48:6b:
ca:c5:9d:9b:1f:d4:a2:88:b4:79:20:1c:9a:3c:dd:46:2b:1a:
c1:3c:6e:57:e9:50:73:6d:ad:7e:89:74:26:3f:3b:4e:dd:c7:
e9:8f:c3:48:4e:4a:52:18:b8:8e:37:da:8f:1e:1c:e3:98:1d:
fd:26:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:52 2025 by rpki-client