Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: rwpN3JWhk0RomqrSuoQMCaTmOvegftGt9DbDaiXZRU4=
Subject key identifier: C8:7A:94:2C:D9:07:DB:BF:30:DA:07:32:D3:E4:2D:40:45:AE:C1:5D
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 019A51514A2C72004B057B04A29E55978277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 00:01:13 +0000
Manifest this update: Wed 05 Nov 2025 00:01:13 +0000
Manifest next update: Thu 06 Nov 2025 00:01:13 +0000
Files and hashes: 1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=)
2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=)
3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: psuiIpvtD8Tsz2mR1vL2cITT2Ho7ndwuJhDvOGV8zok=)
4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:4a:2c:72:00:4b:05:7b:04:a2:9e:55:97:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Nov 5 00:01:13 2025 GMT
Not After : Nov 6 00:01:13 2025 GMT
Subject: CN=c87a942cd907dbbf30da0732d3e42d4045aec15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:33:ca:fb:81:8e:55:07:6e:32:07:ff:aa:
18:cb:34:ff:89:17:50:7b:cc:a1:ca:ae:30:46:24:
42:53:1f:ad:4b:c2:58:90:3b:9c:8e:c8:cf:97:f1:
8c:3f:38:ae:72:e3:a3:b2:f3:07:30:78:6e:35:b7:
bb:c6:82:e1:75:09:f3:31:6c:79:d9:73:7c:b4:44:
f5:d8:77:72:aa:b1:7f:32:e2:03:05:22:08:35:5b:
c1:61:c0:cd:93:0c:c0:ae:27:35:1e:ca:e8:20:f6:
d5:de:b3:e8:29:77:19:28:81:77:12:cf:fc:11:37:
be:0e:c2:61:1c:08:5a:ae:6b:db:e8:0d:9d:ae:1e:
36:dc:04:49:dd:d8:bc:8f:7d:bf:ff:14:0d:31:2b:
87:b3:14:4d:ce:fe:d9:c3:80:0b:df:e0:75:32:e9:
6b:11:93:cb:b5:12:09:c5:b0:1a:2e:a6:e7:6a:cc:
b6:6b:d3:5e:6f:fb:cd:56:f3:7e:f6:14:06:9c:4c:
5f:fc:e3:42:11:5a:02:58:0a:bb:1e:d6:f4:39:65:
c0:2a:49:18:f3:60:1e:6f:42:7a:0a:15:0a:e3:31:
e2:db:7e:a0:02:83:23:a6:61:0c:1b:a6:96:fb:8f:
b0:1a:56:77:00:c4:05:75:84:0e:ec:0c:e7:25:19:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:94:2C:D9:07:DB:BF:30:DA:07:32:D3:E4:2D:40:45:AE:C1:5D
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:42:e4:55:3f:15:55:2a:02:4f:15:46:01:d0:c7:42:f7:
44:b2:5a:72:fa:6e:f5:53:91:fc:68:d9:65:9b:f4:67:34:24:
91:fe:8b:fb:03:72:1e:8b:54:2e:a2:c7:64:93:b9:3c:5f:a0:
7d:6b:d3:b8:64:28:17:d7:67:01:dc:07:58:85:0e:5b:ce:e9:
26:17:e1:df:48:75:fc:24:9e:7f:48:e2:f5:75:8d:93:d0:59:
7d:80:75:90:db:98:c0:0b:75:44:0e:be:e4:01:30:2b:16:ad:
b0:cc:66:c1:f5:c3:90:3d:dc:90:25:0e:68:61:15:61:0d:a7:
dc:58:28:80:f2:e6:4d:a2:2d:5f:62:30:dd:d9:be:29:ad:54:
07:f3:38:10:d7:52:cf:f4:7a:fb:60:2c:68:9c:96:45:e5:9c:
98:60:7e:24:70:49:d9:77:85:70:8d:8e:6b:10:e7:4d:cd:f9:
8a:0a:d2:9e:85:ce:20:3d:9a:4f:52:67:45:67:62:63:4e:95:
45:4e:ce:c5:93:fb:87:31:21:c5:59:5b:dd:e6:6f:80:b2:3f:
d2:cf:a7:d1:65:d5:d4:a1:7a:44:37:40:27:d7:b0:ba:1e:6e:
d1:16:7d:c6:00:3b:36:42:54:f9:ab:e7:ed:11:ac:04:03:d3:
66:b9:9e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUUoscgBLBXsEop5Vl4J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhODA5NTkyN2VlNTdjY2VlMjU2YWE0MzlmMTYzNjg2YjU4
YzU3MGMwHhcNMjUxMTA1MDAwMTEzWhcNMjUxMTA2MDAwMTEzWjAzMTEwLwYDVQQD
EyhjODdhOTQyY2Q5MDdkYmJmMzBkYTA3MzJkM2U0MmQ0MDQ1YWVjMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA4zyvuBjlUHbjIH/6oYyzT/iRdQ
e8yhyq4wRiRCUx+tS8JYkDucjsjPl/GMPziucuOjsvMHMHhuNbe7xoLhdQnzMWx5
2XN8tET12HdyqrF/MuIDBSIINVvBYcDNkwzAric1HsroIPbV3rPoKXcZKIF3Es/8
ETe+DsJhHAharmvb6A2drh423ARJ3di8j32//xQNMSuHsxRNzv7Zw4AL3+B1Mulr
EZPLtRIJxbAaLqbnasy2a9Neb/vNVvN+9hQGnExf/ONCEVoCWAq7Htb0OWXAKkkY
82Aeb0J6ChUK4zHi236gAoMjpmEMG6aW+4+wGlZ3AMQFdYQO7AznJRkUtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMh6lCzZB9u/MNoHMtPkLUBFrsFdMB8GA1UdIwQY
MBaAFEqAlZJ+5XzO4laqQ58WNoa1jFcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEt
MGY5ZDQzZDg2NGJiLzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEtMGY5ZDQzZDg2NGJi
LzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuBC5FU/
FVUqAk8VRgHQx0L3RLJacvpu9VOR/GjZZZv0ZzQkkf6L+wNyHotULqLHZJO5PF+g
fWvTuGQoF9dnAdwHWIUOW87pJhfh30h1/CSef0ji9XWNk9BZfYB1kNuYwAt1RA6+
5AEwKxatsMxmwfXDkD3ckCUOaGEVYQ2n3FgogPLmTaItX2Iw3dm+Ka1UB/M4ENdS
z/R6+2AsaJyWReWcmGB+JHBJ2XeFcI2OaxDnTc35igrSnoXOID2aT1JnRWdiY06V
RU7OxZP7hzEhxVlb3eZvgLI/0s+n0WXV1KF6RDdAJ9ewuh5u0RZ9xgA7NkJU+avn
7RGsBAPTZrmeNg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:15 2025 by rpki-client