Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: QThjP6H0hGq1zS8xYGtbAr3YybscqG6sO++7VMyMvm0=
Subject key identifier: E8:24:04:E2:2C:16:C5:BE:BF:69:F1:3D:E3:1F:AA:05:B1:EF:14:CC
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019A5262E3207C9B47B3BF5070587015111E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 05:00:03 +0000
Manifest this update: Wed 05 Nov 2025 05:00:03 +0000
Manifest next update: Thu 06 Nov 2025 05:00:03 +0000
Files and hashes: 1: GGuZV4w4l_L1AAB0u4gI9OxObhI.roa (hash: CLNm60QGfX0COSZodNNnpcHnrbcFlA00OSTVLEP9aw4=)
2: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: tyzxq0XveueZM1Z8PtPdB+I7amLRPCG6X6Ic6WLf4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:e3:20:7c:9b:47:b3:bf:50:70:58:70:15:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Nov 5 05:00:03 2025 GMT
Not After : Nov 6 05:00:03 2025 GMT
Subject: CN=e82404e22c16c5bebf69f13de31faa05b1ef14cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:5f:37:dd:e8:66:22:a3:f6:85:69:47:b3:
0e:93:72:a5:a1:a6:08:4a:43:66:98:a6:a2:8a:64:
d9:ec:09:0a:43:b5:0e:dd:41:70:45:70:92:44:e7:
94:c5:b5:c5:4e:ea:f6:c0:a7:ab:6e:09:b5:09:75:
0f:db:61:d8:a9:f0:e6:0a:12:b8:82:7d:c0:de:2c:
41:0b:39:ae:d4:4b:6a:a6:92:f2:5a:70:cf:ea:ce:
2b:58:31:57:a7:cf:45:ca:b2:d9:d7:38:33:04:94:
33:42:4b:41:cb:91:c1:ba:00:9f:94:7f:25:25:48:
c1:0f:00:ef:af:56:96:42:9c:bf:cb:6b:7f:93:b7:
b2:ea:86:12:31:9e:9b:33:85:b4:a6:77:41:0e:4e:
33:63:aa:96:22:4e:95:be:69:d1:32:87:9e:1c:8f:
57:30:6d:9c:d0:06:50:c5:9d:f6:50:03:db:40:84:
f4:0c:a0:8c:3c:1b:5f:31:57:df:9d:7c:ee:9e:0a:
e9:77:c2:ed:16:bf:da:fd:27:9e:19:89:0b:72:d7:
e7:bc:03:00:73:cc:41:d1:91:46:f3:e1:75:28:ab:
c4:2c:72:9d:9b:b9:b5:a3:01:7b:2d:b2:83:93:3b:
ed:00:bb:81:19:53:ec:5d:04:61:c0:0a:18:bf:8e:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:04:E2:2C:16:C5:BE:BF:69:F1:3D:E3:1F:AA:05:B1:EF:14:CC
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:86:4f:02:48:40:2f:08:ec:46:78:4d:c3:a7:79:8a:bb:d3:
24:62:c1:bf:fb:92:16:b6:31:fd:5e:d4:1e:4d:5d:e5:01:97:
c3:de:b4:b7:c0:6c:6e:82:8e:76:e0:6a:34:28:09:c5:a3:c2:
c6:e9:7b:31:fd:de:10:c1:7d:46:50:4d:03:fb:74:1a:64:71:
f1:0d:cb:36:d1:6f:eb:d9:7d:11:ea:9b:93:60:f7:cf:50:86:
08:12:52:60:b7:15:1d:4b:d2:e2:62:c5:15:09:af:4a:b3:9b:
3f:a3:53:8d:7c:8c:e6:23:d6:69:d7:ee:ae:51:af:91:9e:1d:
1e:bc:ef:06:9c:f3:19:e9:f5:f1:86:2b:f5:9d:c1:77:e0:26:
a0:5b:76:ad:38:05:01:38:5c:46:99:1c:10:3d:b8:c1:3c:80:
f8:4d:c0:4b:5d:23:5b:97:fe:3a:89:11:77:ad:6d:85:45:f1:
7e:c8:5b:8c:d9:ed:43:a2:1f:d5:ef:b4:4b:2c:33:8d:44:6f:
84:7f:e7:88:1e:0e:2b:4f:fa:2c:89:58:e1:2e:b9:fb:9a:4a:
1a:4b:21:20:74:7c:b6:2e:81:df:6c:01:36:cd:74:68:d7:d3:
0a:b3:f9:64:7a:58:9f:35:b0:fa:5b:5f:81:1d:55:e4:3d:de:
6f:99:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:20:00 2025 by rpki-client