Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: OvojI/D7bBy+DAwty5d/gbwZA2UD4fu4OIxiULgOiE0=
Subject key identifier: 3A:13:71:D7:7B:5E:E8:38:EE:53:69:AF:9F:64:78:54:7D:BC:90:D6
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 019897804FB959995B1F20E1C8CB23605203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 1033
Signing time: Mon 11 Aug 2025 05:00:25 +0000
Manifest this update: Mon 11 Aug 2025 05:00:25 +0000
Manifest next update: Tue 12 Aug 2025 05:00:25 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: b4uVHLN5Ng4NgQVUI21ucZNMscRRtrMWljSsB7mPCcs=)
2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:4f:b9:59:99:5b:1f:20:e1:c8:cb:23:60:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Aug 11 05:00:25 2025 GMT
Not After : Aug 12 05:00:25 2025 GMT
Subject: CN=3a1371d77b5ee838ee5369af9f6478547dbc90d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:fd:27:9d:64:ef:a5:64:84:61:54:f4:b2:
0c:9b:58:0c:ad:e5:1b:49:b4:92:a0:39:a8:ed:12:
a9:27:bd:9c:63:16:83:dd:0b:86:d9:f2:c2:ce:f0:
cc:c1:43:d6:c8:66:51:e8:9a:94:ea:da:7c:ef:3f:
8d:ef:b4:03:99:93:55:07:26:df:6d:99:4d:3b:5c:
c2:06:e4:17:1c:20:8f:96:36:9d:a4:7e:b7:20:8a:
c3:1d:37:17:ad:4b:72:7b:10:d3:eb:5a:02:b8:7f:
b9:b8:ab:bc:ae:eb:ac:53:6a:82:a5:ae:16:ff:af:
c8:fb:83:64:67:96:b8:d6:b4:a3:a6:33:e6:81:e7:
fd:08:05:61:a7:25:24:df:ee:a0:d3:7a:5e:56:68:
a1:52:03:ad:ec:b9:16:e9:6c:16:4a:1d:ce:50:a8:
59:a7:65:2e:37:6c:99:1d:8d:87:4f:37:cf:1a:cf:
24:9d:28:5b:8b:2d:77:04:66:6c:4c:7c:7d:d6:d0:
71:1e:a1:03:59:ec:e7:3d:33:d6:21:ba:eb:cf:58:
a9:31:45:ca:c1:a6:58:6e:aa:7b:6e:d9:19:d0:e9:
f5:1f:29:a4:4c:02:97:58:b9:6b:ee:89:cf:28:cc:
4d:b8:3d:78:a1:e3:a2:f6:92:2c:67:cf:23:ec:6b:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:13:71:D7:7B:5E:E8:38:EE:53:69:AF:9F:64:78:54:7D:BC:90:D6
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5d:7f:e5:f8:9c:5e:db:38:5f:68:b0:c1:7f:03:31:f4:2f:
10:6f:88:4e:96:eb:eb:56:a5:3e:20:12:b0:3e:ec:0f:e3:0d:
cd:3e:8d:bc:c4:f2:e5:f1:18:1f:41:33:b1:de:cd:68:c0:05:
69:09:37:49:ef:86:1b:97:06:12:d4:39:5f:86:96:13:d2:53:
9d:0c:23:ee:38:6b:15:3b:c9:84:1c:3a:02:ae:4c:f8:32:80:
b9:b1:cc:d1:2d:36:11:c1:6b:38:b7:19:2a:b0:d3:da:ca:60:
1d:84:4a:f6:8a:36:04:e3:0a:17:07:7d:b7:52:50:d3:2a:bd:
3c:a0:74:0b:83:33:34:39:16:cc:18:bc:e7:77:72:c6:a6:0b:
b9:22:9d:4d:6e:60:89:e6:a2:1e:75:c4:3f:6e:fb:82:09:b7:
0b:ef:74:54:80:90:6b:3e:18:72:bf:41:ac:b2:66:35:66:d4:
39:ff:56:6f:5c:5f:fb:7a:29:ac:4d:c5:f3:dd:d2:2d:3a:16:
a3:89:74:81:f9:f4:8e:d1:ec:f2:42:3a:81:e1:fe:eb:72:82:
4d:19:13:5e:d1:cf:d7:63:37:d1:8c:b8:71:82:53:49:9e:c7:
9c:8e:d3:7e:18:f4:24:c6:85:d2:89:e2:b5:ec:e0:1f:f9:00:
43:20:0c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:48:01 2025 by rpki-client