Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: 6a91ZFy3JGUg/+a+pe5NSSZ1a6r9vldelXjrpCSq3Co=
Subject key identifier: 79:01:F6:6C:08:17:26:87:93:83:8B:54:3D:78:AF:B5:29:59:C3:65
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 019A4E189669B4F2BC643690852F767FCDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:25 +0000
Manifest this update: Tue 04 Nov 2025 09:00:25 +0000
Manifest next update: Wed 05 Nov 2025 09:00:25 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: ov6S2p0ITKCF3FZ3ZBBndzl1CFXW4GQ0Pl4L2oO6Uu4=)
2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:96:69:b4:f2:bc:64:36:90:85:2f:76:7f:cd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Nov 4 09:00:25 2025 GMT
Not After : Nov 5 09:00:25 2025 GMT
Subject: CN=7901f66c0817268793838b543d78afb52959c365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:bb:c7:15:68:68:1c:09:dc:46:f7:53:45:
e0:ed:15:1e:cf:5b:2a:b8:e6:55:37:13:68:9c:f9:
c7:68:d4:98:a2:4f:ad:d2:a6:e2:1c:3b:75:02:02:
e5:6a:de:d0:20:64:23:e9:98:e0:0b:c1:ba:3b:2a:
f9:5e:73:58:44:77:3c:e0:35:ee:03:f4:39:2a:e5:
f4:03:75:03:03:2a:06:bc:24:14:bd:e4:6b:bf:d1:
03:f0:b1:78:29:6a:76:45:a2:4f:be:8b:45:3b:be:
6d:1a:f0:95:39:8c:b7:07:e4:40:c4:f1:8f:0b:d8:
af:a0:47:fa:f6:00:a2:cb:a9:c0:3d:41:e5:63:b2:
d8:1a:da:39:35:25:34:0a:ce:b5:e9:26:5a:18:32:
c3:5f:88:79:f0:67:fa:1e:ef:44:16:6d:a8:11:49:
12:6a:f5:5a:78:f8:ef:d2:15:18:a1:e4:30:6d:13:
cb:d8:bc:7c:dc:da:dd:cb:7b:6b:c7:0e:1b:22:88:
72:ce:35:01:ec:8f:c7:b6:28:f7:f7:52:4a:70:14:
5b:84:06:b7:05:ab:7d:21:80:21:3c:23:9c:8f:db:
f2:ca:a9:16:4a:c7:1a:cb:cb:74:83:93:ef:7e:2f:
1d:f2:c8:7b:03:06:3b:c5:61:1d:8e:18:2f:c2:b6:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:F6:6C:08:17:26:87:93:83:8B:54:3D:78:AF:B5:29:59:C3:65
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e4:15:04:6f:9f:e4:65:9f:f6:ee:ec:5a:82:33:6e:89:9a:
d6:4a:a2:bc:bc:e4:b0:f4:05:fd:6c:0a:b0:11:9b:9c:a3:4f:
70:c5:c2:45:48:f8:7b:53:d2:de:d7:12:4e:34:72:c3:07:77:
b6:11:71:0b:c3:96:c7:1a:10:c6:4d:b8:f9:41:66:8c:6e:cd:
4a:00:61:dc:8a:0f:cc:50:b8:7a:32:a7:c7:6a:5e:b3:77:94:
df:7e:c8:ba:0c:53:75:50:aa:0f:e7:79:ff:b1:8d:f9:df:65:
a4:bd:7c:53:ed:62:cf:ce:17:c9:d7:f0:4d:63:de:0f:dd:39:
29:39:33:f7:3a:31:eb:42:be:c7:c8:fb:89:81:43:e8:dc:62:
5a:72:c1:30:12:a6:ba:bd:8e:81:d8:90:c0:3b:d5:3d:3b:7f:
d9:a4:bb:76:ed:9b:94:26:a4:7d:a9:42:4a:b0:36:88:76:89:
85:30:2e:9d:a1:44:21:c5:6d:33:e9:ef:2f:f8:9e:ec:01:96:
c9:e0:a1:e4:57:08:db:cc:01:c3:05:03:dd:a4:af:77:92:d7:
36:78:e6:60:f6:33:0a:33:77:da:30:11:5b:2f:db:cb:5c:8c:
f6:20:00:9d:e0:cf:a5:56:ec:84:93:43:57:13:d9:6a:1b:a3:
61:ad:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:42 2025 by rpki-client