Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: pXoKyzabBsFNZybJIKDoqtwbhUHQnwrrxdT3lMNPWkw=
Subject key identifier: 78:DA:91:D6:D2:A3:C7:AB:2D:4C:15:A1:00:90:16:4B:90:6F:D1:AD
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 0198537AEFBA23541EDE9C6B482AD423AE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 1603
Signing time: Tue 29 Jul 2025 00:00:22 +0000
Manifest this update: Tue 29 Jul 2025 00:00:22 +0000
Manifest next update: Wed 30 Jul 2025 00:00:22 +0000
Files and hashes: 1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=)
2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=)
3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: Thr0torManvPJGnDLussF3YCw6bionu7xAqfJESm2nY=)
4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:ef:ba:23:54:1e:de:9c:6b:48:2a:d4:23:ae:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jul 29 00:00:22 2025 GMT
Not After : Jul 30 00:00:22 2025 GMT
Subject: CN=78da91d6d2a3c7ab2d4c15a10090164b906fd1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:d6:48:5d:cd:7e:95:76:c4:06:a7:f4:0b:
62:45:6a:ac:91:41:dc:77:54:32:4f:dc:11:1a:b3:
91:d9:36:86:db:10:2b:fe:a4:7e:52:de:8a:68:e7:
cc:09:65:fc:c6:0a:c2:95:2c:ef:24:f3:a1:42:0c:
56:3b:54:96:d1:50:8e:bb:05:a0:e2:10:e3:d9:86:
ad:a9:49:cd:a7:eb:a6:cf:42:59:50:77:8b:8c:72:
ae:dd:ea:fd:45:03:c2:f1:85:e4:ad:80:4b:05:5b:
bc:93:7a:fe:d6:b1:4a:1f:ab:e3:e4:6b:ae:dd:08:
4a:18:ff:10:30:d5:86:ec:ce:43:d1:77:14:af:77:
e8:90:4a:c9:05:d8:92:9d:0f:75:2e:e6:50:dc:73:
61:ff:9d:d7:39:10:af:0f:c4:e4:8b:87:ac:73:80:
c2:dc:22:cf:07:1a:1c:be:31:aa:61:57:3f:dc:df:
53:5d:3f:29:3c:14:24:73:d1:89:1e:3f:9c:e4:5b:
81:33:98:ab:1f:c4:53:02:74:3f:1c:27:25:ec:97:
4a:81:08:4b:5a:8b:06:31:3e:e9:ab:1d:f5:9a:81:
e0:dd:43:2a:84:8d:3e:53:ab:98:21:ea:62:e8:8c:
6d:69:40:a0:08:5f:0a:5a:27:db:4f:85:a7:9d:e9:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DA:91:D6:D2:A3:C7:AB:2D:4C:15:A1:00:90:16:4B:90:6F:D1:AD
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ba:6d:fb:40:f3:a5:8e:b8:8d:45:5f:3a:dc:b1:3f:25:17:
1f:37:a2:6c:4e:6c:17:b1:f3:cd:cd:78:c0:16:ae:4d:42:d5:
73:e4:da:6d:82:35:39:53:a8:f1:cd:ee:85:1e:f9:54:58:32:
43:43:56:ba:71:3a:4c:6c:8c:d8:ed:60:dd:6f:8b:5c:d5:5c:
ce:8a:22:b2:dc:68:d4:65:68:5a:92:19:f8:c2:32:4a:2a:b0:
e0:33:2d:6e:d7:9d:d5:c7:a4:77:1d:67:b8:75:99:fb:32:ba:
aa:4a:7e:2a:4c:4c:7f:b4:9e:55:a6:11:a8:5c:e4:4c:4f:fe:
71:a6:38:f6:cb:8b:ae:69:d5:51:07:bf:9d:5c:46:d3:3a:4b:
0a:e2:da:28:8c:50:b8:a2:89:b2:b9:67:fa:b6:33:b1:01:d8:
28:e1:8e:b0:e4:66:be:d8:63:60:9d:05:ae:b9:7e:6b:e8:4d:
b3:c0:e9:73:a0:d6:69:1d:0d:43:ca:4b:6f:56:52:f3:13:bb:
d2:44:2c:5b:38:24:0f:bc:2e:3b:d3:7f:64:d9:46:9a:df:1a:
22:29:a5:0c:ec:02:f8:db:4a:72:05:e5:08:3d:77:f4:43:e8:
a5:75:dc:4b:9a:96:67:67:e0:4c:c8:4a:6c:13:fb:fb:50:48:
d8:70:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:24:24 2025 by rpki-client