Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: fz8UAQ8cOFofQEFB+u6mwEYX2pZfx1Ff/Q6rhYhRQ4s=
Subject key identifier: 7A:22:0E:07:1D:66:32:50:CB:C7:C1:60:64:40:15:FB:C7:2D:09:BA
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 0198A083FBF438B676A87B89DFA2533C786C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 23:01:00 +0000
Manifest this update: Tue 12 Aug 2025 23:01:00 +0000
Manifest next update: Wed 13 Aug 2025 23:01:00 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: 1of2p2X672Qmykq1X0fETBavmJmnOIaaWR5+u7Dz8Uo=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:fb:f4:38:b6:76:a8:7b:89:df:a2:53:3c:78:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Aug 12 23:01:00 2025 GMT
Not After : Aug 13 23:01:00 2025 GMT
Subject: CN=7a220e071d663250cbc7c160644015fbc72d09ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:fa:4e:1d:ec:91:8f:59:28:2c:9f:41:72:
38:ea:dd:60:5f:fd:8f:86:6a:c2:f2:84:74:03:c8:
5b:0f:70:49:10:0c:e3:db:44:a9:90:1e:88:51:01:
8f:4d:6e:cd:62:b8:ed:0a:8d:d0:ac:1e:15:34:2d:
c9:76:b8:61:5a:f1:1e:95:1e:33:82:e7:41:0c:a8:
fc:47:2d:45:5b:e8:c8:6a:3c:63:10:9c:39:e1:ca:
46:89:c5:83:70:4b:03:b2:a7:ce:bb:38:72:72:cd:
4e:af:ec:c0:e1:ef:7e:e6:8a:d0:c8:0b:a4:de:33:
83:bf:83:cf:33:27:43:49:8f:c9:3d:96:2c:f1:69:
8d:51:04:33:16:a2:cf:6f:33:ff:c9:dc:1c:dd:f4:
8c:e3:cd:5f:4e:59:63:3d:76:78:7b:09:4a:02:1d:
90:c7:a1:72:4e:06:09:fc:82:3c:58:fa:df:5b:46:
b3:3c:f3:30:43:dd:79:9f:86:4f:79:21:f6:8b:c6:
ca:c1:2b:24:55:56:a0:71:20:96:e3:07:70:5a:bf:
5e:67:94:27:3b:38:cb:08:9c:47:69:0b:a5:b9:12:
de:6b:7e:eb:a9:f6:ce:a2:4c:fe:d5:17:42:13:9a:
34:3f:9a:7a:1a:71:ee:e5:11:fb:c1:53:73:b2:b7:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:0E:07:1D:66:32:50:CB:C7:C1:60:64:40:15:FB:C7:2D:09:BA
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:41:41:34:74:8e:8b:46:d2:3c:2e:c2:d7:ef:3d:33:1b:d3:
97:8d:6b:1c:95:ca:44:e5:86:82:57:eb:3c:66:55:21:cb:ee:
6c:55:c4:3c:89:75:42:2d:92:50:d3:79:1d:ed:40:98:6a:cb:
c4:fe:58:48:0c:68:07:d2:ec:e3:61:66:ac:70:5c:7b:98:4b:
78:6f:b1:2f:24:6f:6d:ba:44:5f:c0:a8:c6:94:8b:39:ba:4f:
a2:e5:4c:0b:a3:52:ff:7e:e5:d1:6d:a5:a4:e4:70:f8:73:3a:
b2:29:df:4d:ff:85:fa:b2:28:7b:5a:6c:ac:a7:bd:87:65:8c:
b1:19:16:4c:46:82:46:04:e7:61:de:ff:83:54:34:b6:6d:6b:
b9:a9:75:68:1e:09:42:9c:69:cb:1b:09:ad:3f:8c:c4:cd:b4:
a4:90:83:a7:bb:e5:27:dd:e3:21:b1:53:21:04:a5:cd:70:32:
c3:4e:17:7b:33:6c:c3:b1:97:e2:c2:47:a9:d7:aa:b2:33:c5:
a1:89:c5:8c:7b:36:83:eb:10:23:2b:64:6c:35:ad:22:e8:dc:
9a:16:4a:b2:ca:7e:0c:16:b1:66:7c:3c:b3:8e:51:de:74:d1:
fc:35:54:16:e6:14:9d:a6:96:aa:1a:0c:94:b3:b8:1d:d6:df:
cb:20:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:29 2025 by rpki-client