Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: 3Yp4CJutFgaFw2y+sKjR7V2+v3MDKyNjoR5Wd3NYUHQ=
Subject key identifier: D8:DD:5E:92:E9:1D:52:17:7D:08:4F:A8:27:C4:75:47:31:25:B5:B5
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 019848893304895F63EE85977C4CE4B32171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 21:00:07 +0000
Manifest this update: Sat 26 Jul 2025 21:00:07 +0000
Manifest next update: Sun 27 Jul 2025 21:00:07 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: 2x+0AMrMNFAqtiVzv9lcowlNxM+vy5D4JwdLW9A1b9w=)
2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:33:04:89:5f:63:ee:85:97:7c:4c:e4:b3:21:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Jul 26 21:00:07 2025 GMT
Not After : Jul 27 21:00:07 2025 GMT
Subject: CN=d8dd5e92e91d52177d084fa827c475473125b5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:83:46:74:c2:d0:55:f1:c3:12:ed:a1:4b:
a4:e4:c2:cc:82:73:a1:a7:ba:68:de:c4:15:d8:e1:
34:c5:52:eb:00:b1:77:6e:ef:48:85:fc:91:04:ca:
52:41:8b:a4:3a:64:1e:14:b9:0a:47:81:73:3c:6d:
39:b9:03:c4:fd:ed:35:7f:cc:a6:f0:01:60:28:37:
14:f8:4d:32:8c:4b:7d:9a:26:ab:18:c2:6c:82:62:
bd:89:0d:b6:eb:a8:70:d8:75:96:5a:6b:aa:0b:c4:
23:e6:f2:23:a3:44:31:56:eb:0b:d5:b7:96:c2:54:
ef:7c:aa:6f:8c:82:4e:6a:98:d3:29:6f:52:d6:88:
08:8c:e6:d0:d7:98:0e:b4:bd:85:c0:b2:a9:e5:2b:
e9:03:fd:b7:99:b1:0d:fe:ae:71:15:c2:26:97:a0:
7f:88:a8:aa:23:94:20:35:ef:85:78:9a:c8:d1:4d:
b9:54:96:54:91:73:50:ba:63:c9:4e:ac:bd:75:cd:
16:40:ba:7f:b1:f8:a2:ae:2d:3e:55:ca:09:b9:10:
91:25:0c:13:96:be:24:82:58:9b:08:37:f8:50:e1:
41:3f:85:4c:a0:d1:9b:b2:cc:84:f3:a7:57:98:ef:
74:1e:f6:f9:a4:02:00:7d:1e:dc:03:db:7f:bf:d3:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DD:5E:92:E9:1D:52:17:7D:08:4F:A8:27:C4:75:47:31:25:B5:B5
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:71:6d:7a:b0:4b:13:b0:c7:88:26:1f:9b:c6:62:25:ef:ac:
31:fd:03:4c:84:7f:dc:29:1f:76:90:b3:dd:56:4e:54:c0:ec:
a3:cd:a6:61:13:0c:2e:02:e3:0c:c7:b0:b5:e4:99:a1:1e:c2:
2a:b5:2a:66:c1:c6:47:1f:fc:e4:e7:db:45:5b:fd:a2:20:d9:
b5:09:58:fa:f8:16:c4:03:04:e9:66:91:90:59:93:3a:9b:e4:
3b:09:65:e5:21:c5:6b:bb:7a:69:a6:ac:99:60:52:67:e6:f5:
50:3b:ea:20:61:e7:3f:9f:0f:c3:1e:f8:96:c3:ba:22:5c:80:
ef:db:13:7d:b1:3c:af:05:05:73:58:5b:8f:f9:ec:64:f9:f5:
cd:1b:2b:70:6a:e5:5a:5e:ec:04:56:1b:18:a8:70:ff:89:a0:
2e:02:10:04:b4:45:f0:12:59:51:4d:6e:55:c9:2b:28:b5:6c:
3a:aa:f4:96:75:45:0b:a4:a0:fb:6c:25:fb:b9:cf:0e:ba:a1:
90:77:01:5b:34:2d:4f:b8:e0:aa:3f:af:7e:e0:33:68:cb:76:
e7:b5:4e:22:88:a4:76:5b:70:b6:96:21:83:93:be:91:3d:34:
99:93:ae:fe:41:e3:e0:8d:61:45:67:a1:91:0b:8c:60:68:51:
b1:7f:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:49 2025 by rpki-client