Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: 6rwefDjHoCGxPkw6mutze4xtX1GuEvAyxXzkpgJ1Vco=
Subject key identifier: 30:78:28:CD:EB:D5:9D:46:74:AA:22:75:80:7B:55:8B:A3:8D:C2:AC
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 0198499C22C20FD6064530D76A5A242EE08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 160E
Signing time: Sun 27 Jul 2025 02:00:25 +0000
Manifest this update: Sun 27 Jul 2025 02:00:25 +0000
Manifest next update: Mon 28 Jul 2025 02:00:25 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: gUS9HHgKhpv9GDxczgZBqwTlxzfN+vPhAN6R9oamNv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:22:c2:0f:d6:06:45:30:d7:6a:5a:24:2e:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Jul 27 02:00:25 2025 GMT
Not After : Jul 28 02:00:25 2025 GMT
Subject: CN=307828cdebd59d4674aa2275807b558ba38dc2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:a1:38:42:ff:a5:d6:d8:dc:84:cf:22:eb:
8d:1f:ce:d7:2c:0b:81:8b:b5:c0:2b:2e:a7:42:aa:
df:36:fe:d6:c2:b0:32:22:3d:83:54:8d:7c:cc:31:
b4:ea:40:cf:e8:79:8b:ea:44:bc:4f:00:42:05:0a:
ad:3d:bd:c7:7d:f2:5f:ed:25:83:76:a3:01:06:96:
bc:a3:fb:bc:7d:fb:6c:6d:76:de:1f:08:ab:c2:03:
87:f5:af:7e:58:9c:8a:f1:ba:b0:91:b9:ae:69:77:
44:11:ed:6b:9e:0c:85:21:de:4a:fc:62:7e:62:1f:
20:4f:f0:d9:4a:af:4c:0e:9a:82:b8:96:4c:c8:b5:
5c:8c:b6:28:eb:95:09:23:23:3a:36:da:fa:bd:b2:
95:45:2a:2b:13:d2:5e:bc:0e:08:26:05:52:08:92:
7e:1c:85:b5:32:19:06:1b:ae:60:22:05:10:ef:40:
3a:78:26:59:72:b7:0f:87:7e:b1:a9:5f:0e:5d:b1:
8b:4e:0a:87:e7:66:b6:eb:80:20:14:0d:9b:c2:60:
5e:35:1b:e9:67:6f:65:85:00:58:51:db:1a:ab:e8:
bb:89:25:2a:86:68:1a:61:af:e6:9d:29:06:17:9c:
5b:83:c5:a8:08:64:14:13:99:f0:26:eb:f7:cc:50:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:78:28:CD:EB:D5:9D:46:74:AA:22:75:80:7B:55:8B:A3:8D:C2:AC
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e6:a9:ac:3b:4d:c3:3e:45:94:b7:b8:1e:d7:8e:63:50:8f:
38:5d:f2:ad:a5:75:97:f0:4f:d9:b8:ab:65:a1:86:77:19:7f:
aa:10:7c:3b:8c:5a:af:26:f0:3a:ce:b2:b0:ef:d1:75:79:c8:
21:4c:37:82:bd:7a:4f:0e:cb:34:40:71:55:e1:3d:f7:2a:6b:
1c:99:8f:2a:4d:18:09:f3:a9:24:c8:ca:59:3b:6b:80:dc:a9:
8c:c0:06:b2:ef:06:88:18:6c:7b:ad:9a:59:0c:2e:22:3d:81:
fb:c8:4b:56:58:7a:66:07:7d:66:0f:f8:94:b1:5e:6e:eb:41:
3d:64:8a:71:59:92:dd:c4:74:7e:14:5d:6a:89:81:32:69:39:
3e:36:bc:98:1b:f6:f8:c4:36:bb:81:a9:d3:fd:7f:9e:26:56:
c5:8f:7c:b0:d1:95:2c:98:53:c5:9c:91:5f:6b:43:74:b9:3a:
98:0a:d4:1b:ef:2d:f7:d0:37:f5:b7:b7:c1:13:d6:6d:0a:d6:
3c:f9:e1:da:1d:5f:ac:77:70:ea:94:41:1a:0a:52:3f:2e:11:
c3:35:88:e7:bd:f3:9d:cd:be:ec:4f:8c:65:4f:4c:bb:60:0a:
40:fb:69:eb:12:29:ce:07:6c:58:b8:1e:54:35:33:25:69:64:
f3:33:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:35 2025 by rpki-client