Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: uXDTtZ6BlaWzr4oe3GG1mvsVU0fx56tzi4UlNEHxjNg=
Subject key identifier: A1:B9:F5:3E:B6:20:F2:84:CD:52:B9:C5:8B:7E:36:97:99:4D:E0:65
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 019A71EEA75855C4995A467070070F27BF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 100F
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: boRkO+cv3NKt70uGmrG1RiNGQeKfuTQ9xgpwGfD+b1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a7:58:55:c4:99:5a:46:70:70:07:0f:27:bf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=a1b9f53eb620f284cd52b9c58b7e3697994de065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:3b:fd:05:ef:53:7e:e2:61:3d:22:08:2f:
a4:cc:ab:2a:53:c0:50:97:c0:17:41:ab:fd:1c:97:
5f:67:8f:f5:c3:c1:c6:d4:30:c9:a6:f1:5b:28:a3:
ef:c3:b8:71:0a:be:18:73:5e:ae:90:dd:65:2c:6b:
c4:37:2d:c8:f4:da:8f:d4:91:2c:dc:25:95:bd:b5:
07:71:8e:b1:8c:2b:b3:5f:22:67:73:cc:dc:44:aa:
c5:27:61:4b:ab:7e:2e:fa:9a:1f:e2:78:9b:4c:6d:
58:33:5f:39:f8:b6:98:b8:7a:62:82:94:97:f6:8a:
cb:7c:f8:45:ec:a9:1c:a8:47:ad:ab:9d:0f:5e:26:
b3:da:a9:7e:d8:47:35:e4:9f:be:02:35:78:b9:0f:
8b:a9:53:a5:22:06:8f:11:60:f0:4b:5f:c8:be:f4:
37:df:65:12:e7:5f:2f:b6:b6:0e:9a:52:cf:8c:ab:
17:e3:44:50:9f:b8:62:7a:fa:44:91:a8:a6:cf:ad:
e5:60:b4:86:93:69:df:0c:d5:c5:17:22:e6:d8:e2:
5f:79:90:2d:1b:85:03:99:c9:18:2b:d9:52:b8:84:
c9:72:4f:62:83:51:71:1e:86:1b:38:f2:71:3c:58:
ce:bf:3e:fe:a1:7a:3b:c2:13:76:04:15:36:a4:9b:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:F5:3E:B6:20:F2:84:CD:52:B9:C5:8B:7E:36:97:99:4D:E0:65
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:50:45:c9:8a:f1:4a:d5:70:62:61:a2:6a:ef:23:fc:20:cb:
94:82:3c:72:8c:66:7c:38:bb:78:4f:81:56:6d:80:11:f8:a3:
3c:a0:9d:da:59:82:cc:c9:c3:12:40:8c:33:47:1b:64:14:9f:
9c:f0:79:86:5b:68:42:70:4b:33:a2:82:7b:45:74:9d:a7:6f:
e7:84:3b:f6:0d:c8:42:2f:c9:ef:11:ec:0f:f3:fc:98:53:f1:
31:3e:ca:80:3e:90:ce:ba:0a:23:b5:9a:fc:74:54:2f:67:8d:
a4:06:b5:e9:0b:df:d3:68:4a:11:05:4b:fb:3e:01:83:49:12:
12:27:18:5c:07:81:7f:cc:ab:43:c0:5e:41:ec:e0:fe:bb:e7:
ea:37:b1:f9:36:db:43:c4:80:51:a3:6f:86:d0:9d:55:dc:c5:
70:73:1a:1a:4a:1b:75:77:85:da:38:01:93:f6:e6:e6:de:28:
a0:7f:9b:86:f5:7a:17:7c:dd:61:44:99:b3:80:41:39:3d:bb:
21:f0:65:ba:00:8e:7f:cc:2f:c7:45:82:a6:bf:aa:7b:17:8d:
7f:27:a5:0f:90:d8:5f:0e:ff:e9:67:e0:c9:5e:de:78:71:89:
89:3d:4d:43:5d:23:67:fd:12:6a:22:1f:d0:3e:16:bf:5a:af:
6e:33:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:12 2025 by rpki-client