
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
File: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft (raw, json)
Hash identifier: HN+RxnTI4ez25JZv7X03KKndjDsgLP2EzXzsMV1qUX0=
Subject key identifier: 07:9B:32:16:3B:B9:74:7F:3A:3C:38:5F:B0:B4:2C:3E:75:EF:DC:FA
Authority key identifier: B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
Certificate issuer: /CN=b284cdf0507443e16e509d57a229e914f73566a4
Certificate serial: 01977264198E8499532B8E6B7D82EA9B9E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
Manifest number: 1438
Signing time: Sun 15 Jun 2025 07:00:52 +0000
Manifest this update: Sun 15 Jun 2025 07:00:52 +0000
Manifest next update: Mon 16 Jun 2025 07:00:52 +0000
Files and hashes: 1: soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl (hash: gx6f6iA4Bhu8fFDckz7vXeXT16MDNnF3gKqxYR/TJaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:19:8e:84:99:53:2b:8e:6b:7d:82:ea:9b:9e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b284cdf0507443e16e509d57a229e914f73566a4
Validity
Not Before: Jun 15 07:00:52 2025 GMT
Not After : Jun 16 07:00:52 2025 GMT
Subject: CN=079b32163bb9747f3a3c385fb0b42c3e75efdcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:d1:16:b8:62:b8:33:3c:3f:15:92:50:86:
36:75:b2:62:3c:10:18:88:94:f0:4e:67:d4:b0:75:
cf:1f:c6:e7:c0:b1:0e:37:b4:24:71:50:e9:aa:92:
66:41:b4:b4:20:e3:94:58:01:80:51:b8:b2:36:c8:
47:95:9e:9d:89:a7:1b:7e:73:f4:09:ba:1a:b8:f0:
e9:a5:e2:dd:cd:2d:2d:fa:48:e9:f2:f7:b7:2f:04:
6c:5a:1b:45:bf:b7:13:a4:7d:fe:21:e1:b6:ae:fb:
88:e6:13:b4:73:c8:72:99:7a:c7:0a:80:3c:4d:1a:
83:76:e9:36:02:27:7f:cb:02:ce:74:1e:b4:f4:50:
43:3b:00:98:b2:51:b7:50:59:36:d4:01:a5:c9:a3:
b1:66:f8:17:71:e2:4c:a0:39:83:b1:bb:06:b5:99:
1a:c0:a8:8b:02:d7:9a:e3:e8:8f:3f:dd:22:d5:95:
6d:52:54:8b:9e:40:57:81:5f:ab:f2:2d:6d:84:e4:
c1:f0:d1:3d:50:db:fc:70:71:42:a2:07:4a:0d:c1:
68:52:74:f6:02:fd:83:09:ac:ee:ae:be:a1:98:e6:
27:b1:2e:8d:f9:0d:a7:95:6b:f8:b9:cf:5e:b6:b9:
a9:86:b1:75:ae:d6:36:42:66:b4:c0:68:d1:dc:f1:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9B:32:16:3B:B9:74:7F:3A:3C:38:5F:B0:B4:2C:3E:75:EF:DC:FA
X509v3 Authority Key Identifier:
keyid:B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7e:59:54:e3:1b:3f:d7:0f:d2:8b:4a:16:8b:b9:9a:62:c0:
0a:b0:41:6a:76:2c:a8:df:42:94:0d:e9:fe:14:94:fb:5c:48:
a9:b2:a2:d3:74:4a:99:32:16:7e:c2:46:33:e5:db:60:39:fc:
8b:c9:e2:ea:ef:dd:10:62:e6:63:a7:83:1e:ef:5e:e2:14:cd:
db:1c:30:64:db:53:0c:ad:6a:3d:44:7c:e1:95:7c:de:28:ae:
63:ce:df:e3:10:91:5e:60:01:3a:2d:b8:d5:88:10:43:a9:79:
d5:6e:57:ff:2d:40:b9:13:86:6b:67:a0:23:9c:ab:ff:d6:96:
2a:3c:17:ce:70:87:57:72:b6:4e:f6:3d:05:94:62:7c:d6:0e:
13:ee:df:bb:c5:a1:e9:66:b2:27:bf:51:45:55:78:00:43:78:
5a:a1:51:93:c5:14:dd:15:79:54:80:e5:ba:11:85:69:61:6d:
3b:73:17:1d:72:8e:14:be:ce:7a:a5:6b:c9:d9:06:1f:68:dc:
65:65:f8:89:ae:66:bb:72:b9:97:7c:bb:fa:eb:33:0e:c1:da:
75:e7:36:c5:73:85:eb:e9:23:c0:86:f1:48:99:e0:f9:69:8f:
2e:8f:27:dc:0b:4c:75:59:2c:30:60:85:4f:07:12:fa:0d:87:
d3:75:56:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:26 2025 by rpki-client