Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: q0WQEhAxLxs+YnREjqHHn+7NmZgnp0I9dZo4da7ibgs=
Subject key identifier: 16:13:67:40:A6:D1:93:41:B7:82:62:5C:C1:62:08:65:C4:6D:FD:61
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019858D97BE94E2FCB9233987B00A154E8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 139A
Signing time: Wed 30 Jul 2025 01:01:44 +0000
Manifest this update: Wed 30 Jul 2025 01:01:44 +0000
Manifest next update: Thu 31 Jul 2025 01:01:44 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: 2J2T7HB8UJWmCvih7r6Kfu6R9a9yIMOTLTMwwBHmPLE=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d9:7b:e9:4e:2f:cb:92:33:98:7b:00:a1:54:e8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jul 30 01:01:44 2025 GMT
Not After : Jul 31 01:01:44 2025 GMT
Subject: CN=16136740a6d19341b782625cc1620865c46dfd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:3a:66:c6:3e:5a:0e:6e:2a:5f:b7:77:88:
de:86:04:2f:71:30:95:26:b2:dc:f0:f7:85:02:b9:
0f:41:b1:61:6c:78:58:fc:89:1b:4b:89:e9:af:8d:
29:0f:f9:64:ff:db:88:4e:a3:7a:29:1d:10:af:fb:
e8:3d:d8:5b:7d:94:52:61:d6:dd:27:0b:f4:3d:b8:
f0:a2:8b:c0:59:86:ad:d4:85:aa:1a:bf:a5:13:9c:
d5:07:8e:ae:10:e0:22:8e:5e:ab:0d:8b:e0:de:4a:
b8:e7:df:da:f2:ae:c7:fa:af:e1:d7:3f:43:48:de:
81:22:8e:8e:64:76:0e:b8:ed:97:ba:5f:61:f2:5c:
7f:32:d6:d3:c4:ef:0d:44:13:4d:9f:a4:96:a6:35:
26:f2:02:74:6c:6a:2b:e4:97:8d:7c:1d:79:8f:d8:
bf:0f:5a:85:4e:10:35:a7:18:45:46:26:b1:67:80:
82:3d:a7:99:db:17:37:3b:f2:70:ad:09:dd:04:02:
c3:28:80:28:e2:b4:62:c2:15:2f:06:7b:05:30:14:
77:07:8b:a9:0c:d0:74:78:88:30:5d:5b:f2:9e:f6:
95:68:2f:0b:b3:5b:3c:9b:40:03:67:7f:d7:c6:5d:
5c:1e:0e:08:20:cc:4c:7b:7b:7e:0e:e5:8c:1a:6e:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:13:67:40:A6:D1:93:41:B7:82:62:5C:C1:62:08:65:C4:6D:FD:61
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:3e:7d:07:63:4b:bd:19:fb:cd:2d:ec:08:5c:40:99:b8:
3f:f4:b1:f8:92:51:73:36:5b:4f:75:c0:31:09:32:de:f3:88:
71:a3:02:0d:70:77:44:6c:df:bb:fb:5b:c5:15:99:66:59:df:
67:20:15:f3:29:db:2b:44:5e:cd:57:ad:8e:09:d7:9a:54:04:
af:30:6d:a6:7c:86:24:dd:e0:e6:22:84:da:a8:dd:fd:91:ac:
47:68:02:93:7f:42:88:e3:aa:83:93:2e:a6:d1:89:1b:96:1b:
26:a9:ea:fb:0a:da:83:a1:be:33:dc:f9:87:8e:78:21:fb:96:
1c:6b:84:1f:06:75:83:75:c1:67:d1:c5:b7:03:a1:fd:89:05:
52:e5:40:3d:f6:58:a6:82:11:21:29:cf:52:e2:23:42:70:19:
76:5c:e8:72:c7:21:eb:c5:0c:89:b5:07:23:3f:78:84:5b:58:
62:c3:32:df:38:cf:fa:2b:34:5d:84:76:77:7c:0f:61:04:07:
7a:3c:68:44:78:29:b0:d7:48:9e:ad:50:e5:32:07:12:29:d1:
d5:07:dd:56:aa:c7:f0:79:72:cb:d1:07:64:bb:d4:1a:61:95:
e3:20:a2:c1:bd:50:b4:3f:55:c8:00:fa:cb:d9:00:bf:35:7a:
e2:5e:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:27:44 2025 by rpki-client