Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: ZOw5QOL/lcGWp09AwMI+c/Ox5NoFCucnZ0uF1hp2hPE=
Subject key identifier: CF:29:39:A6:2C:9D:A8:66:C7:84:BE:1C:BB:69:BD:99:DF:5F:F5:4F
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 019A70DC329E8BEE8472F969A09708DC6F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 03:01:10 +0000
Manifest this update: Tue 11 Nov 2025 03:01:10 +0000
Manifest next update: Wed 12 Nov 2025 03:01:10 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: eeEkgAUwSdOgJ8aqS0vgNw92Cv7nZB0NJDJ4f4zQLQo=)
2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:32:9e:8b:ee:84:72:f9:69:a0:97:08:dc:6f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Nov 11 03:01:10 2025 GMT
Not After : Nov 12 03:01:10 2025 GMT
Subject: CN=cf2939a62c9da866c784be1cbb69bd99df5ff54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:4e:4a:43:f5:60:72:8a:ba:f8:43:44:b6:
e0:95:de:92:f9:1e:72:89:ae:60:03:d3:37:f7:3c:
8f:85:33:9f:2b:d0:4a:69:e2:f0:14:20:8d:93:8a:
33:97:a2:3b:62:af:77:9d:ad:43:6c:19:16:db:6e:
9f:dd:9a:23:18:18:a6:5b:6e:66:03:7a:5f:d8:71:
d1:e5:fd:76:a2:24:72:f0:b0:da:45:9c:bd:08:2f:
2b:ac:d3:33:2e:40:cd:bc:d7:44:6b:0a:af:6a:fa:
19:50:83:e8:6c:1f:50:f7:dc:05:5d:b9:70:ff:7d:
56:65:49:c6:bf:d4:f0:94:12:47:07:4d:0e:77:db:
30:96:8d:13:ac:a6:64:dc:c7:cf:11:09:6b:87:0d:
a9:69:f5:6d:0c:cc:95:09:fc:e4:c3:51:5a:d7:be:
37:b8:99:d4:98:07:99:08:a5:4e:a8:ee:ce:75:7d:
cb:f2:97:29:c0:a4:38:1b:75:ce:8c:8a:9e:05:1a:
f8:9b:fb:87:ec:d0:b9:f6:08:9c:42:d4:95:cb:41:
c4:55:e5:ee:bd:0b:0e:a6:58:af:18:1f:dd:33:f4:
a0:0e:e7:0f:d0:ec:65:95:5b:ec:7f:7c:5d:cd:37:
2f:54:34:dd:07:1b:32:7a:66:43:94:fb:fe:38:b6:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:39:A6:2C:9D:A8:66:C7:84:BE:1C:BB:69:BD:99:DF:5F:F5:4F
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:f8:57:83:81:24:ea:3f:31:29:80:b4:22:02:0e:d6:75:
45:7d:08:4b:10:bd:c9:35:ab:86:e9:b1:46:41:9f:a4:8b:a6:
a4:b4:6c:e8:df:4b:35:7a:2f:da:8d:02:a9:a7:ed:09:d3:e8:
db:c1:eb:ab:c1:f5:f8:42:bd:61:ae:11:3e:cd:58:bb:c5:e2:
05:f6:3b:37:be:54:08:2c:99:2f:4e:f2:8d:45:ad:2d:42:90:
8a:59:70:e6:3b:3e:cf:7c:2a:f6:c0:59:ef:39:6f:79:e4:13:
35:1c:c8:1f:66:77:b9:4a:56:42:6d:39:ab:3a:7a:a5:1e:16:
37:79:ba:97:cf:ae:a3:90:95:ff:da:40:ed:96:e4:e2:6e:02:
b4:a2:66:ab:b9:c1:f9:55:be:51:b0:7f:a2:28:c2:a8:bd:ff:
d4:a2:2b:13:92:07:09:c6:12:67:8f:fa:f2:7c:05:3f:bf:32:
62:b3:b6:5c:94:9b:7f:25:8a:32:bc:f2:30:6b:45:6b:91:5d:
c5:ca:0d:af:4e:87:55:1d:14:6a:b7:8d:50:64:d2:1b:28:e0:
f6:8d:b4:b0:7b:59:d5:66:dc:10:cd:a5:3f:4e:32:0c:37:ce:
48:ff:7c:15:20:59:c2:f2:b3:ae:77:54:8a:83:fc:37:45:fd:
07:a9:1c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:08 2025 by rpki-client