Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: 6JRIdiHOxtdMQBzIbChTKtGPPbIej1oK+r56abezaJo=
Subject key identifier: 19:9B:18:EB:9C:6F:6E:81:B5:41:04:37:DB:2D:20:D1:DF:F8:81:9F
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019A4E18C4DEC82B2B78B135F4D2E428489B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: 8ofea1TR2-dllg5VQcblmlWW_Jw.roa (hash: DDzXIHlSYWS45kNZcp+/HWVN971pVq7eD5ioet4NIZ4=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: Qbv+fOmIMjub8PJb2WOTTo8Dw3Byr2yyXWBRwyMTs7I=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c4:de:c8:2b:2b:78:b1:35:f4:d2:e4:28:48:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=199b18eb9c6f6e81b5410437db2d20d1dff8819f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:50:f0:08:64:88:da:a9:bb:a5:62:9d:22:
ba:50:ec:2d:64:e1:6f:db:fb:aa:7d:85:0f:1d:b2:
ed:c1:eb:2b:22:97:f6:c6:36:6e:bf:56:4d:f4:2f:
06:7c:e1:2d:b6:dc:44:ad:2d:e5:49:37:06:b0:c3:
2e:82:0c:fe:b5:bc:6d:49:f0:67:73:78:32:e5:1e:
3f:fd:cc:09:2f:f1:c2:02:9a:47:8f:be:f2:78:2e:
42:a3:30:a3:f0:25:4d:c8:16:3b:f8:6b:2a:63:a8:
74:dd:49:c1:36:59:5d:eb:5e:69:5c:a2:11:df:52:
06:ed:44:81:66:65:bb:5b:22:d8:7a:71:24:4d:8c:
ee:15:f0:f3:df:a5:a7:65:c4:27:8f:18:b1:6b:44:
b0:45:d3:61:12:f6:40:fe:31:2f:68:b2:6f:21:a3:
54:4f:70:e0:87:72:a9:6b:f0:0e:cb:fe:76:72:31:
14:ff:41:39:0f:45:6c:29:4f:fb:59:91:f7:02:b9:
ef:3e:ec:00:86:9c:86:b3:e8:bd:33:1b:8a:0b:72:
d1:30:a3:2c:02:31:11:2f:c3:74:7d:b7:21:87:d7:
0b:c8:54:bd:45:85:89:90:21:a1:98:0c:1d:7a:28:
dc:1c:44:f9:d0:0e:cb:14:87:7b:36:4f:29:3d:fe:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:18:EB:9C:6F:6E:81:B5:41:04:37:DB:2D:20:D1:DF:F8:81:9F
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:a3:60:0e:d9:b0:78:93:7e:e4:3c:f4:f1:43:06:41:ce:
14:d5:82:2d:8f:0a:3e:b9:fd:36:6b:ff:c4:71:f3:6d:67:1f:
72:d1:94:9e:8a:ac:bb:e6:0e:e6:79:06:4c:81:94:f3:12:dd:
33:07:3d:f8:7a:d6:fc:41:9c:5e:ec:b9:15:a1:7d:34:d1:ce:
a8:b5:e6:46:56:8d:46:b0:be:34:1d:0b:4a:10:c0:49:68:da:
d2:9f:85:7a:40:40:c7:2c:19:99:a5:1e:7f:d2:61:bd:3f:22:
4f:19:a9:94:3f:6c:10:49:18:9a:87:7b:7c:97:bd:99:ce:a0:
7a:61:01:5d:e6:23:cd:a5:7d:42:ec:86:d5:36:ac:12:bf:3a:
0b:74:72:ce:a3:e3:0e:8f:30:98:4d:12:df:44:4b:6b:da:83:
15:59:ad:29:6d:67:8b:64:00:05:b3:ed:86:f1:44:35:17:b8:
a0:ef:19:af:ff:fa:6b:7d:9c:8b:ec:07:3e:10:3c:05:61:f5:
91:48:a4:08:6b:e5:d5:fa:c7:2f:e3:c8:12:5d:f8:29:05:1e:
7f:f7:3f:27:36:20:b9:09:1d:4b:b5:09:05:a3:3c:a2:90:f5:
de:d3:06:2f:60:fe:4e:cf:88:3a:98:98:e1:a2:dd:89:0d:52:
f8:db:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:53 2025 by rpki-client