Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
File: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft (raw, json)
Hash identifier: 2HVL5QhruNOP7iBtxbWz6LQeYSC+SSYMBqMdXUHlAjE=
Subject key identifier: 86:38:E2:76:4C:69:27:6B:49:12:2A:CB:6F:2F:23:0D:1F:0B:F0:F3
Authority key identifier: B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
Certificate issuer: /CN=b284cdf0507443e16e509d57a229e914f73566a4
Certificate serial: 0198752BDB5EF3AC319AFEC8818B9D74715A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
Manifest number: 14BE
Signing time: Mon 04 Aug 2025 13:01:05 +0000
Manifest this update: Mon 04 Aug 2025 13:01:05 +0000
Manifest next update: Tue 05 Aug 2025 13:01:05 +0000
Files and hashes: 1: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl (hash: 2Lg+DTdQO+jGMI103qVAGk2fityeL+Wud1v1hImtbLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:db:5e:f3:ac:31:9a:fe:c8:81:8b:9d:74:71:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b284cdf0507443e16e509d57a229e914f73566a4
Validity
Not Before: Aug 4 13:01:05 2025 GMT
Not After : Aug 5 13:01:05 2025 GMT
Subject: CN=8638e2764c69276b49122acb6f2f230d1f0bf0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:2e:39:06:7f:bc:47:84:fa:9e:86:e6:9b:
8e:a6:44:cf:60:85:0b:db:d6:05:83:78:d8:85:dc:
e2:c9:f1:38:91:8b:99:06:f1:40:7f:35:9c:58:11:
36:9f:66:30:79:5e:65:b6:4e:83:34:f7:86:07:30:
67:03:5d:b8:2b:09:16:44:6a:c7:b1:90:a5:ba:70:
08:3a:1f:33:0d:03:77:25:56:69:fb:4e:f8:eb:90:
cc:e4:cc:10:e9:66:48:1b:06:62:ca:2f:05:bc:0b:
3f:14:98:71:bc:fc:5f:37:38:74:16:64:6d:1e:65:
d3:95:01:65:67:a9:33:0c:d3:f2:65:26:a6:e1:0b:
23:6b:9a:43:f6:52:30:5f:bc:71:c8:f6:d9:f4:ec:
ac:01:71:4e:2f:0a:56:9b:36:e7:0d:3f:a1:80:41:
af:bb:64:c4:b5:fc:70:4e:0e:af:fd:d3:f0:f3:42:
f9:3c:b3:75:58:32:c3:53:da:08:0e:76:3b:19:3b:
98:75:b6:95:66:68:a9:39:9f:e3:5d:94:1c:30:9e:
26:69:20:30:85:1b:9a:c4:f2:3f:95:d7:62:39:94:
f2:58:36:81:85:ef:1a:f2:cc:16:1e:8c:a6:78:bd:
69:a2:a7:93:c2:93:73:e4:eb:57:b9:c4:ff:91:f6:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:38:E2:76:4C:69:27:6B:49:12:2A:CB:6F:2F:23:0D:1F:0B:F0:F3
X509v3 Authority Key Identifier:
keyid:B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:40:bd:72:b7:8a:6f:cb:60:03:84:cb:83:5f:1e:39:df:55:
fc:be:b8:cd:60:e0:b6:22:37:ca:1d:94:70:54:2e:96:8a:2b:
9a:88:3d:ec:a9:e9:9b:04:ab:42:5f:90:79:9a:29:99:c8:e0:
d6:bb:16:ac:db:ec:b9:d7:2c:f9:87:dc:e5:68:9c:42:ea:a7:
55:67:77:35:19:7a:de:ed:59:cb:84:01:d3:3e:c0:0c:85:9a:
0f:0c:ba:cc:5a:97:b3:87:de:ac:7b:f6:77:4e:9f:10:3e:0f:
d2:dc:10:c7:1e:72:9f:72:41:5c:3a:e6:24:44:52:73:68:f1:
64:0e:0c:42:d3:76:c3:94:f4:69:db:ea:48:7b:a5:b4:a0:8d:
f6:f0:17:53:17:eb:85:d4:93:0a:6b:d7:69:21:41:a7:1f:98:
8f:ee:4c:28:f7:6e:a1:01:bc:f7:79:a9:4b:79:13:b6:fd:ad:
37:16:89:c4:e6:64:c3:47:bd:c4:3a:4d:25:cc:6d:8d:63:c0:
78:d7:7a:2c:2c:2a:78:1d:f7:23:6f:15:fe:6a:87:2e:ba:29:
7c:35:b2:e0:a2:d6:38:e9:e3:6f:3a:aa:c6:e0:6f:91:72:3a:
dc:04:ef:51:97:25:55:11:c1:91:d7:60:9c:87:dc:f3:e9:b7:
5b:4d:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:34 2025 by rpki-client