Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: hVLGKcCZzIbCkK1Pc8sw3YyT2WEnM74j41geJFA6Hx8=
Subject key identifier: CE:B5:72:04:D6:97:DB:47:96:6F:13:96:A0:2A:D4:B5:A7:64:70:E9
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019A4EF59E652527D002D141B4BE55CB4FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 149E
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: aj1vsJ0Yv9J11NJhgtItci4EC+O8BdYhP4LWvZqNZuI=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9e:65:25:27:d0:02:d1:41:b4:be:55:cb:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=ceb57204d697db47966f1396a02ad4b5a76470e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:06:a5:b7:f6:45:90:5c:bb:5b:e8:d1:86:
22:97:8f:1d:68:c3:83:ac:9f:32:3c:a4:ad:91:b7:
2c:1c:f3:91:a0:38:3d:bc:67:f4:73:f1:e0:0a:b8:
76:e2:b6:2e:2c:02:38:f4:1c:5f:f5:22:e5:fa:fb:
35:2f:1c:97:cb:4a:af:9f:7c:3e:a1:a9:c8:07:22:
df:15:2e:92:ab:0c:2d:8d:67:51:87:d7:64:83:ad:
db:ac:0f:50:b0:b3:58:1a:48:ac:5f:b3:07:dd:f0:
05:9c:fa:1f:4d:e3:9e:60:b5:b9:28:03:ff:e8:fe:
6f:94:f1:ad:15:c7:71:c5:8b:9e:bd:da:e9:3d:a6:
5a:2e:5f:d2:06:d6:5f:29:47:f6:6e:26:ee:89:c0:
b6:70:5d:c3:47:c3:ee:b9:57:a6:6d:26:f0:2e:92:
e9:f1:29:8c:14:9a:14:96:42:87:f5:47:5e:6e:20:
d5:1f:e9:23:8d:f8:51:37:0d:c1:03:93:a9:37:42:
6c:76:e7:c1:d8:90:55:3e:2c:2a:a7:aa:f1:38:12:
dc:1c:20:4f:a8:da:44:23:5f:b8:44:9e:a7:e2:e9:
94:28:73:2d:b4:c6:1c:1b:b5:fd:78:17:cf:50:74:
46:65:49:cf:45:eb:9d:1b:7f:1f:7b:46:88:04:e8:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B5:72:04:D6:97:DB:47:96:6F:13:96:A0:2A:D4:B5:A7:64:70:E9
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:5d:cd:b1:8f:e3:d0:01:1c:1f:29:85:d7:e8:a8:84:a8:
2f:8c:a3:07:fb:8c:2f:a6:63:c0:6e:f1:e2:94:9e:e7:c4:45:
0d:e5:60:4f:be:f0:a2:fc:5a:bd:e4:c2:bc:b3:8f:bf:62:65:
2c:e5:14:c4:6c:16:63:8e:d6:01:61:62:fb:03:aa:e2:47:d9:
12:fc:da:be:1c:28:3a:00:be:ab:bb:ae:69:6b:fd:28:df:2e:
77:bc:7f:cc:18:d2:2b:f1:fa:7f:a2:96:09:95:b9:35:cd:08:
74:4c:22:88:66:3b:45:f0:41:02:a4:8b:86:f3:00:9b:32:73:
c4:59:7d:95:09:f5:0a:79:b4:0e:fa:2b:ad:4d:96:8d:1d:b8:
0d:af:ec:54:c5:b9:5e:9b:5e:51:08:43:6c:69:51:74:01:45:
3c:e5:d5:96:1c:c3:08:18:c1:86:d3:5a:6b:d6:08:c4:b6:22:
91:09:e1:71:dd:9e:27:be:f9:e1:36:ae:2f:8a:02:cb:dd:09:
67:1a:d9:ab:b2:25:88:a8:da:23:49:5c:f9:10:a0:de:e8:55:
29:7f:c0:fe:58:ef:5f:6d:01:0f:1d:83:6a:71:ae:77:5a:fa:
ed:cb:53:a0:97:b1:85:60:a2:fd:11:61:5f:54:0e:a3:38:1c:
cf:2e:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:39 2025 by rpki-client