Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: bbSMABuul8lM3+ZqX8xMGYsBSZzotqtKynDJ5xkIyiY=
Subject key identifier: 5D:A2:80:69:E7:DE:DB:CB:C4:2B:97:17:B2:AA:C9:20:30:2A:E4:8D
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 019A5307C8E222D3FBB5EFA3319ECEE3257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 171C
Signing time: Wed 05 Nov 2025 08:00:10 +0000
Manifest this update: Wed 05 Nov 2025 08:00:10 +0000
Manifest next update: Thu 06 Nov 2025 08:00:10 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: K5cTNKxtmvkaC5Mshsrrd+O4teSWugIiPm0Rb1yWkso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:c8:e2:22:d3:fb:b5:ef:a3:31:9e:ce:e3:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Nov 5 08:00:10 2025 GMT
Not After : Nov 6 08:00:10 2025 GMT
Subject: CN=5da28069e7dedbcbc42b9717b2aac920302ae48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:82:89:88:47:d7:ee:40:f5:55:5f:1c:2d:
d7:97:5c:3a:12:9a:bc:cc:55:ee:27:c7:c6:4c:b0:
da:c4:a0:ff:91:34:ea:52:4a:84:f5:86:36:e6:99:
1e:7c:39:de:a7:7b:07:aa:be:72:a3:87:5d:3b:a3:
7c:ad:a8:9a:85:9e:a8:9b:54:ab:1a:21:ce:88:29:
93:3f:e1:df:52:6f:1b:4d:63:86:93:56:ca:8c:11:
6a:ac:04:c6:cd:00:7d:12:16:ed:2b:84:d2:37:c8:
d4:4d:23:73:86:9c:2f:1e:79:f0:87:e3:1b:24:84:
81:f7:3b:46:c6:fb:76:ab:84:14:d7:06:5c:59:16:
72:55:d3:36:01:af:94:0a:0c:d2:bc:cc:d6:d7:e2:
d4:b4:f3:d1:f8:47:6d:4f:1f:39:00:c5:65:af:b3:
22:40:c0:e1:a5:32:bc:ea:62:03:b0:8b:e5:16:6a:
c5:7c:52:8e:7a:8e:91:d0:af:bf:0c:cd:83:1c:28:
ed:9b:03:6f:87:fc:0b:82:af:1a:07:eb:e1:ea:d7:
87:85:2c:c9:28:bb:a5:fc:27:54:c3:0d:52:d9:3b:
bd:47:09:88:60:bc:d4:85:4d:90:0f:cb:af:2f:15:
53:bf:cc:b1:ce:4e:bf:69:a6:94:0c:cc:01:ae:2e:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:80:69:E7:DE:DB:CB:C4:2B:97:17:B2:AA:C9:20:30:2A:E4:8D
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2e:ad:58:02:29:08:7f:db:25:01:2c:fc:3d:06:2d:87:c0:
cf:b9:48:b8:22:c3:b8:c8:bd:1f:d9:a5:51:16:ff:86:c5:ee:
40:9b:84:97:8c:1e:97:b3:c4:fc:17:07:81:e4:0f:47:ba:fb:
ab:bf:3c:ff:b4:98:20:75:ad:23:de:29:36:9a:87:28:a4:10:
fa:a8:71:f8:97:a6:64:5f:2e:8b:a3:07:4e:7c:5e:23:64:af:
f6:ec:c6:40:c0:9f:62:e6:12:5d:e0:1f:51:0e:e8:44:6a:2f:
47:15:06:dd:1f:3e:82:7c:1e:d7:64:76:e3:93:e8:b6:38:5b:
52:85:2e:c8:41:7a:93:c9:5c:06:cf:65:97:0e:ab:13:bc:7f:
ef:eb:1a:37:c7:77:0c:5a:55:69:7a:fa:02:e4:12:8f:44:36:
a1:b8:5c:3c:ab:7c:11:91:5d:15:a9:38:9d:af:f5:84:53:21:
fa:b9:16:2e:73:bf:35:a0:3b:c1:25:eb:e2:76:03:19:f1:e6:
8a:57:ba:81:16:b2:76:32:07:a5:fe:a4:0c:87:7d:a0:cc:9d:
d8:0a:7e:d8:44:8c:cf:fb:71:31:d9:09:66:16:d4:23:9c:eb:
a8:0f:e1:8a:63:40:00:7b:ae:a6:03:3e:11:b5:dc:84:d4:9d:
8a:f9:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:33:54 2025 by rpki-client