Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: zhNP/xW2N4VLRZUpSjjji1SMKRyF94nQI1hhT7flPOA=
Subject key identifier: 01:4A:DC:2E:3B:C6:6A:16:84:15:5D:39:80:BF:4F:A4:2E:45:C6:AC
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 01989CA6EA2A245C48ABEFD3F6B0E501F34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 1639
Signing time: Tue 12 Aug 2025 05:00:40 +0000
Manifest this update: Tue 12 Aug 2025 05:00:40 +0000
Manifest next update: Wed 13 Aug 2025 05:00:40 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: +oLl/bg0k5tmhwkMU9SiaarZIV/nlLNd/5cZRjPtVSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a6:ea:2a:24:5c:48:ab:ef:d3:f6:b0:e5:01:f3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Aug 12 05:00:40 2025 GMT
Not After : Aug 13 05:00:40 2025 GMT
Subject: CN=014adc2e3bc66a1684155d3980bf4fa42e45c6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:9f:c5:e1:7c:90:e9:65:51:d6:98:6e:0a:
b8:84:62:88:79:03:c7:2f:8c:00:61:82:f6:ce:51:
41:3b:6c:1b:aa:40:6f:26:a3:10:46:5e:05:a9:80:
e5:2d:6f:6c:64:ad:e8:83:f1:05:12:78:d8:fb:b8:
3e:73:41:db:e9:e1:d1:7a:35:d4:a3:81:ca:f8:08:
87:32:c5:01:30:4c:bc:3e:f9:29:8f:2c:c3:8e:5c:
2c:bb:3f:2a:b9:35:ff:08:7e:54:3d:58:73:d9:a2:
57:d1:12:fc:04:32:7b:9f:b0:ec:79:a5:66:0f:9b:
45:21:2b:d2:6c:7d:c0:01:e9:5f:8c:2c:45:bf:74:
3c:4c:85:4d:a6:c7:ce:c7:67:95:41:ab:f7:35:ff:
f1:80:09:1a:8b:4b:38:42:cb:44:2e:9a:c5:a5:30:
f2:b7:ae:69:0f:07:08:cc:28:46:98:1e:3d:d8:6e:
61:ca:6f:7f:6b:7b:07:fc:73:ce:23:de:cd:88:53:
93:1d:7d:52:49:63:46:c7:7d:bd:81:df:c4:69:67:
26:cb:fd:4a:8b:a0:a0:7b:ec:a6:2f:dd:98:94:2a:
97:fc:f0:5e:55:a4:87:a4:3b:1a:6d:83:99:55:37:
d9:31:eb:63:e5:15:2f:8b:29:44:1e:50:b1:9e:a9:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4A:DC:2E:3B:C6:6A:16:84:15:5D:39:80:BF:4F:A4:2E:45:C6:AC
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:10:0a:35:20:96:bc:76:c0:13:6e:23:18:f8:5e:b6:4b:e4:
4a:e8:19:f6:7e:1a:b2:6d:00:73:c4:9b:0c:38:f4:6a:bb:f2:
8e:76:13:0a:eb:d6:9b:ed:38:53:ad:60:c4:36:4e:02:03:84:
cb:e9:38:0c:36:e2:51:98:65:66:7a:5d:14:11:34:6c:82:2d:
7e:d3:87:37:d8:a9:93:e9:a0:de:4f:95:2d:fc:51:2f:b5:46:
aa:47:98:09:14:06:55:13:0c:f2:d6:0e:fe:98:6c:8e:f3:d8:
6c:00:3b:51:ec:b6:8f:5e:04:f3:e6:7a:13:31:b9:b8:c6:5d:
e3:09:64:0a:05:2c:ec:a2:4c:a0:ca:7c:ac:ff:a4:ff:f3:9d:
83:c0:8c:46:4f:d9:5d:7e:f7:6f:96:77:41:87:a1:4d:93:cf:
0d:c9:00:5a:e5:7d:cc:00:80:33:e9:96:ee:ae:dd:d1:4a:e7:
52:4b:0c:e2:20:b2:28:15:5e:32:14:bf:51:8b:28:f0:b1:ad:
91:8e:dc:8a:14:a3:1f:d6:6a:d2:fb:ad:f7:81:e8:6a:d9:3c:
09:8f:1b:83:b2:1b:41:4c:02:64:81:6b:9c:c0:ec:da:d5:58:
21:ba:95:e0:4c:a4:52:0d:64:80:94:db:3a:9b:8a:ba:fa:67:
f9:71:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:55 2025 by rpki-client