Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: UZ+C4hjlfV5g9v//QxuywaKveDgI3SM+HdlPLeEB2fE=
Subject key identifier: 4B:11:83:10:0B:2C:4E:56:63:49:43:4C:53:8D:69:2E:F4:BC:3C:DF
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 01988E0FD7116471601698FB2BC7A380118E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 09:00:59 +0000
Manifest this update: Sat 09 Aug 2025 09:00:59 +0000
Manifest next update: Sun 10 Aug 2025 09:00:59 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: JdGoZI+SWZR6mDLKUSlRHL2RynJLZpgByQNFbgdZJfE=)
2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:d7:11:64:71:60:16:98:fb:2b:c7:a3:80:11:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Aug 9 09:00:59 2025 GMT
Not After : Aug 10 09:00:59 2025 GMT
Subject: CN=4b1183100b2c4e566349434c538d692ef4bc3cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:96:46:6d:86:6a:e3:fe:6e:2b:14:b7:d3:
c5:b8:ab:83:1d:de:05:b8:34:08:c2:85:20:86:79:
fa:b9:ee:c2:96:4d:b1:b0:78:3e:74:14:7b:ec:b9:
e6:57:54:33:6b:a3:eb:d2:ca:68:51:65:fd:49:50:
c0:a7:af:17:1e:5e:17:2e:5f:d1:77:77:a3:18:cd:
03:84:1c:68:f1:10:f7:54:8d:6a:5c:3e:92:69:2e:
05:39:f5:6d:4a:6f:55:4b:cc:b9:d0:2e:5f:4c:f8:
d9:0e:b7:8e:ef:fc:b0:95:05:60:72:d2:dc:6e:da:
46:f8:67:56:e8:70:31:3b:dd:6f:f5:a0:4b:3a:0e:
74:47:ec:9a:06:05:72:95:59:67:07:8d:fa:9e:d8:
8d:c3:41:2a:c2:a6:9a:84:43:26:57:a6:19:8c:58:
9e:35:9c:e6:fa:9a:5f:06:03:63:63:9e:61:f8:f1:
17:f1:2e:96:dc:25:df:bb:7a:7c:64:bd:fd:95:5f:
89:b4:02:14:1a:1c:59:c2:2f:07:15:70:e4:48:c2:
24:20:1f:b8:33:8c:55:a2:6d:3a:90:16:b0:f1:01:
a4:2f:ba:54:b9:91:82:57:14:b0:f4:e5:c6:d6:94:
84:0f:1c:00:ca:07:b8:7b:ec:1b:bd:85:c1:3e:03:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:11:83:10:0B:2C:4E:56:63:49:43:4C:53:8D:69:2E:F4:BC:3C:DF
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cd:e7:9c:30:b5:d1:30:11:ea:fb:c4:2f:f4:dd:43:78:24:
fa:8f:fa:85:f2:10:7c:69:ac:1a:be:42:f8:dc:52:1b:6d:01:
27:0b:f5:98:c7:57:58:06:4d:be:54:38:48:6b:97:aa:1d:c1:
16:0a:a8:27:e3:26:39:25:c3:93:1a:79:5c:16:93:f5:75:8a:
6c:9c:0e:a5:bf:55:cb:33:e4:fd:80:02:07:98:45:ef:77:d0:
f2:d5:e5:b6:d0:2d:3f:5f:2c:89:81:9f:2c:f1:13:80:e8:4a:
4b:8b:e6:50:4e:31:de:94:a7:ff:d2:a9:8e:6f:f5:ef:4e:fa:
df:9f:ae:8b:c2:47:be:37:31:b2:bd:ce:7b:b9:8d:49:f3:fa:
3e:3c:72:e3:9a:f6:5e:60:cf:79:c8:c7:d7:04:ee:38:09:31:
91:6e:87:d1:55:b1:12:7e:5e:b5:a1:d3:cb:ad:bb:79:ca:95:
a0:ed:9b:61:cf:05:91:b2:81:2b:d5:d0:f0:b3:0e:63:58:ca:
5b:33:28:37:8a:a2:16:54:f0:6f:30:f6:e8:23:43:80:5a:52:
48:01:d6:5f:49:81:da:fe:c3:cc:03:22:32:56:17:d3:3e:5e:
95:7f:b9:37:1d:f4:d0:21:2d:c8:3e:d7:d7:6e:e8:72:41:26:
d5:13:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:08 2025 by rpki-client