Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: MPjcc/u4457qEO8j3TYMzNRo5S9vahqdUjM3nAZ4EEI=
Subject key identifier: FD:A6:2A:F0:DF:81:B8:6F:32:BC:F9:C1:90:4E:F6:10:74:DD:22:AF
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 0198537B9DCEADDDA4230397354602B86F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 00:01:06 +0000
Manifest this update: Tue 29 Jul 2025 00:01:06 +0000
Manifest next update: Wed 30 Jul 2025 00:01:06 +0000
Files and hashes: 1: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: Fa758ILZGtQXr66n30PERTW6ebERAlXg0xqgxbueRWo=)
2: yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa (hash: 1v07ddxL5rWksw0TtZmPMhkBlMfB2KOWe+9tKgMQP40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:9d:ce:ad:dd:a4:23:03:97:35:46:02:b8:6f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Jul 29 00:01:06 2025 GMT
Not After : Jul 30 00:01:06 2025 GMT
Subject: CN=fda62af0df81b86f32bcf9c1904ef61074dd22af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:57:a8:2f:89:db:3e:d1:76:59:8c:05:69:
d8:b9:d5:9b:90:5e:90:e8:54:69:07:de:35:aa:4f:
df:6a:ef:76:aa:18:d2:54:1b:39:ac:ef:0c:48:99:
42:1b:f4:67:7c:9f:37:ff:99:fa:a0:04:bc:9d:70:
6e:ba:cf:29:d5:5d:5f:14:4d:bb:66:c0:94:e6:a1:
04:ce:06:62:dd:e8:cf:2d:77:b0:b7:bb:7f:72:e7:
52:80:9c:42:c5:f7:20:49:ff:b4:30:d1:bb:34:87:
34:d8:7a:ab:e6:33:2b:ee:5d:1e:93:e4:b3:24:cf:
61:a4:ac:20:41:ab:5a:04:3b:63:5c:94:fa:11:bd:
4d:df:e7:9d:8c:96:df:43:30:1f:d6:00:83:50:4e:
bb:5e:35:c9:e6:8c:b4:05:e7:e6:cc:a9:68:ce:b4:
53:56:db:b7:03:fb:17:b6:c9:60:bc:ac:d0:ea:58:
1b:fb:44:8b:d3:2f:7f:67:cd:87:38:08:34:8a:3a:
1f:f1:d7:f1:ef:3e:7c:d9:6b:54:b5:a2:4f:82:99:
d3:19:d7:36:87:21:77:d3:af:9b:ea:9a:b4:90:fe:
c9:80:5a:95:db:85:87:4a:fb:1d:fe:72:93:38:2e:
b4:1b:0f:fe:38:88:24:5a:68:ee:73:1c:5e:1f:1a:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:2A:F0:DF:81:B8:6F:32:BC:F9:C1:90:4E:F6:10:74:DD:22:AF
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:f4:f9:53:c7:a2:8c:87:b2:7b:22:3d:24:2d:c9:8d:6a:
0d:c2:4e:5b:a2:5a:33:f9:aa:e8:d3:8b:a5:5c:1d:b5:b3:bc:
f3:bc:98:51:6a:7b:05:68:77:fe:33:8a:05:2e:9b:5b:59:f3:
fc:e2:10:a4:7c:ac:78:3a:0a:b2:88:ad:8a:e3:38:0f:6e:15:
19:87:e5:73:93:68:eb:c1:00:97:6d:1c:87:00:44:54:4b:32:
2a:5c:db:60:5e:30:c0:7c:b3:0a:c4:1b:01:90:fc:f8:e7:89:
98:b0:8f:29:67:da:eb:0f:e8:f6:90:74:1e:9a:e8:e0:57:28:
5f:72:c4:c4:7a:7d:da:b1:83:b3:11:e5:4c:be:cb:f5:a9:5b:
92:5b:05:83:ab:19:4f:4c:d0:5b:35:45:f1:cb:b4:2f:a3:2c:
37:66:f1:dd:c7:e0:2c:c0:8e:a8:10:8d:93:c6:76:48:f3:2c:
34:30:8b:05:cb:e9:04:ce:c2:ac:82:a1:28:0c:07:4f:52:b0:
37:d3:78:18:a7:9a:7a:fb:60:2e:05:5a:e5:5a:47:62:4a:e2:
d0:38:e8:ad:00:cf:f5:6f:fc:0d:42:90:53:c1:8b:1f:dd:ff:
a3:f3:5f:88:56:e2:05:9d:7e:34:e7:d3:84:05:12:57:9c:7d:
b2:58:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:53:26 2025 by rpki-client