Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: niA01GvkWAzAsopCDPQNiuavUrwGSmfRpjjS5qumT24=
Subject key identifier: 80:E9:F7:69:95:B2:66:1E:5C:A7:8C:21:E4:0A:9E:D5:C6:F7:A7:DF
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 019A4DE19290314C8E0D34262E91C0281766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 1116
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: nGX0y9H4eGr6Cq6iJkR8hQ6YKQ3n5+lRHSj3LJk8coQ=)
2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:92:90:31:4c:8e:0d:34:26:2e:91:c0:28:17:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=80e9f76995b2661e5ca78c21e40a9ed5c6f7a7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:0c:04:bd:ad:30:f8:7d:61:e5:d3:0b:21:
e7:ee:bd:c9:07:b6:dc:0f:7f:9e:62:25:c9:64:db:
3b:3c:6f:71:36:ef:66:5a:b5:83:85:20:b4:fb:c7:
a2:76:17:89:d5:f5:0d:8e:0c:f1:74:e7:88:a4:f9:
f5:e5:3e:61:5a:66:95:1a:ad:d7:1f:9c:21:0f:c1:
58:48:f0:8e:d9:63:66:33:2d:a0:70:ba:80:65:c7:
49:db:e5:c9:98:4d:8c:37:4b:1b:44:d6:27:ad:2e:
c0:14:67:3c:1a:37:61:57:da:bf:3a:b8:4d:32:6d:
0e:b7:85:8e:19:38:a7:aa:f5:75:7d:0b:00:40:6e:
51:d2:14:d5:80:db:91:82:c5:fd:e9:ab:d5:33:3d:
bd:0a:ef:ca:ec:b5:05:76:97:05:2f:a4:dc:f7:5e:
fd:3b:7d:ac:ff:98:1c:56:0a:d0:84:84:c5:f1:4b:
f3:d7:d6:0f:76:00:dd:08:f9:bf:2c:38:ca:20:4a:
72:bb:0d:25:a3:93:b3:23:5d:82:61:0c:b2:e5:f2:
b4:dd:c0:6b:c3:7e:d5:2d:7d:52:b8:b3:f4:1c:db:
b9:27:56:df:66:76:24:92:d4:89:f1:eb:2e:02:c3:
c0:f1:78:1c:93:69:c6:01:37:39:3d:10:01:58:de:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:F7:69:95:B2:66:1E:5C:A7:8C:21:E4:0A:9E:D5:C6:F7:A7:DF
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ed:9f:32:55:64:3c:db:f3:52:bd:5f:3d:84:33:8e:02:2f:
5d:c3:2d:48:c8:c0:bc:e9:51:48:d7:3d:fe:b7:8d:d1:e3:32:
10:69:1b:53:ef:44:61:db:fe:e2:57:35:59:82:b1:64:b5:46:
38:d0:db:a0:a4:7a:f2:f8:5f:e8:30:de:05:84:45:f9:46:0b:
c0:1b:64:74:78:b7:b8:0b:b2:c8:46:ee:fe:c8:57:c1:0c:82:
dd:29:c7:51:d3:02:ed:d3:43:e5:e0:24:7f:51:d1:06:09:63:
ca:0f:5e:aa:c3:18:6e:95:da:e5:3d:05:03:5b:0f:2f:b7:4b:
47:c1:aa:cc:37:0b:2e:6f:8d:66:98:50:51:1f:92:0e:a9:f0:
88:ea:50:e5:ff:91:01:c8:00:4c:36:d1:6f:d9:ce:63:9b:76:
dd:e5:15:90:a8:dc:f7:92:cf:b2:d9:7d:e4:94:86:7f:3d:24:
04:b2:03:b1:d7:9a:fd:17:b9:9f:8c:33:b4:91:9b:7f:5b:e8:
57:70:6e:4b:5b:2d:92:5e:02:d2:89:47:86:1e:d1:8b:f1:f8:
3e:dc:d3:a1:5f:9d:ce:60:d3:e9:da:51:4e:a3:0c:bd:51:62:
f9:9b:45:69:ba:cb:d6:43:cb:20:f7:22:d7:99:cd:e9:c9:7a:
55:40:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:24 2025 by rpki-client