
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
File: Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft (raw, json)
Hash identifier: mAJhIdJigrSaROiaTyCFipb6iVo3MQ+Zc92LC9EBnxM=
Subject key identifier: 8A:46:51:E2:67:AB:AB:DC:03:26:21:B2:D0:20:3B:51:D3:D5:79:44
Authority key identifier: 4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61
Certificate issuer: /CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
Certificate serial: 019A71EE8AA3AFA8B42FC16CC17536F7AE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
Manifest number: 024F
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl (hash: u88pyJ21KV18tLE9kvvrrPrSWJ0aGQd7Y2K4XY4kT/Q=)
2: jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa (hash: CgAcBMHOHIF/zsicGTopucDznqKVIIzdoQQgNx76Mfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8a:a3:af:a8:b4:2f:c1:6c:c1:75:36:f7:ae:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=8a4651e267ababdc032621b2d0203b51d3d57944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:bf:2f:b3:80:be:1b:ac:2e:eb:06:46:cb:
9a:f6:e2:ac:ea:d7:eb:ee:ed:d4:6d:a3:f9:7b:f1:
7f:4c:1d:21:ac:17:c5:ce:0b:85:9d:7e:9c:96:d3:
b6:e5:a4:30:14:c2:54:d7:c4:66:43:e5:3d:e3:73:
a5:05:91:2a:07:1e:ca:71:84:07:a3:ea:e3:b6:c6:
53:7d:ed:93:92:ae:c4:ea:50:48:9c:ab:92:f0:d2:
5d:a2:9c:42:8e:0c:5d:09:e6:49:9d:f5:11:f3:4e:
00:b8:0f:91:8b:9c:3b:18:00:9c:7e:20:4e:67:39:
0a:e8:c8:13:e2:6e:13:e0:e1:21:99:d2:cf:b0:9f:
a6:1c:06:f7:6f:4b:7d:7e:66:95:0f:2a:1b:70:73:
be:e2:6b:fa:e2:e2:42:87:34:fc:ae:bc:b1:c2:04:
91:0d:b3:a0:e1:74:54:25:41:f5:ee:5e:01:29:ef:
95:2f:d0:04:6b:a2:fa:99:eb:1a:f1:8b:ba:f8:ea:
a2:a3:4c:a4:8b:b1:80:ed:8d:8f:49:73:0f:54:3c:
05:5e:0e:23:ef:68:0f:c4:76:1b:c1:00:a6:d2:ad:
1b:64:62:a4:5e:a1:7e:1e:74:3d:8f:b5:ff:e6:a8:
e7:13:ed:c5:7e:97:f7:5f:aa:4b:64:9e:ac:d1:4d:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:46:51:E2:67:AB:AB:DC:03:26:21:B2:D0:20:3B:51:D3:D5:79:44
X509v3 Authority Key Identifier:
keyid:4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a5:07:d4:ef:31:6f:82:2d:79:92:e6:a6:b9:bd:9c:14:1a:
8b:dc:59:47:5c:8c:78:07:96:84:1b:c8:76:e9:48:f4:3c:ab:
1c:22:96:9a:fe:aa:bf:88:2d:90:dc:d7:a8:53:e2:3a:c3:4c:
8d:94:95:c0:73:30:cf:f7:4d:c8:e2:49:0e:ff:c9:00:06:23:
62:cb:0d:19:b4:67:64:6a:3d:87:68:05:66:c8:ed:65:5c:a2:
71:7f:13:e6:aa:d7:f7:95:dd:13:3f:c2:06:42:bc:d4:ed:df:
71:35:a1:23:ad:06:44:6f:a0:a9:6d:b1:c7:0f:f9:5b:20:56:
61:2e:21:db:4d:1f:64:29:9b:b4:36:bd:30:98:95:c7:a3:2a:
fb:bf:85:93:84:5b:b0:47:66:7d:f5:f8:fa:df:58:8f:44:01:
95:cf:e8:fe:34:5c:28:37:a9:68:d2:94:40:fd:a0:b6:7d:aa:
1c:ab:88:00:47:ae:ff:98:cf:01:2c:7a:69:58:50:8c:05:e0:
64:f0:5d:7a:74:66:5e:13:76:be:20:e9:bb:93:45:03:56:d7:
19:aa:08:01:b0:0c:8d:2b:c1:a5:b6:18:e5:53:57:66:11:37:
ab:b4:c8:bf:b5:0e:fb:23:74:ce:40:7b:f8:b7:b4:35:9e:47:
99:40:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:05 2025 by rpki-client