Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: gFKDCw5cdr2UehO4RQLfOwV1GhO91E/t8Fub0VH82aU=
Subject key identifier: F9:8E:6F:B9:88:CA:C3:EB:D7:08:C7:1F:22:46:46:FC:84:83:A1:44
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 019A2A0BF148E8DC93E8D4A13FE9B9FD3D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 09:00:16 +0000
Manifest this update: Tue 28 Oct 2025 09:00:16 +0000
Manifest next update: Wed 29 Oct 2025 09:00:16 +0000
Files and hashes: 1: G4p3T3vKIJwpoVG087GbMaXF5PU.roa (hash: S1k3o+lhMdQMdnd1dbHX7NQg9XvE842LHxXNFh07jnY=)
2: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: xMUl5vg0cU87TXeLJSziJx5Y4Xkv/5c+nsC/uP4N9so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:0b:f1:48:e8:dc:93:e8:d4:a1:3f:e9:b9:fd:3d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Oct 28 09:00:16 2025 GMT
Not After : Oct 29 09:00:16 2025 GMT
Subject: CN=f98e6fb988cac3ebd708c71f224646fc8483a144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:7d:ca:5c:ea:31:5a:27:37:42:54:67:be:
99:4a:d6:f9:84:12:dd:11:86:24:af:25:07:45:40:
09:cf:00:99:28:e9:d4:61:f0:9d:5a:bd:7a:01:84:
51:28:7e:96:69:65:d4:e1:4d:76:13:6d:6c:21:c2:
27:bf:46:09:37:63:e9:6c:53:30:9f:65:d5:fa:62:
02:45:b5:0e:15:6c:fd:54:b9:bd:ba:d7:76:ed:df:
f7:92:bf:ff:c4:e0:ee:dc:fe:6d:b2:86:b0:19:66:
94:09:ba:46:12:3c:0f:42:83:a9:42:32:d2:f4:46:
d0:1f:63:dc:e9:57:af:7f:55:13:56:9a:ae:f5:40:
16:f6:eb:6a:f5:66:2e:c3:71:3d:bc:e7:e0:03:e4:
8d:6a:d1:fe:2c:53:b1:42:f1:89:e8:90:4a:23:18:
60:f6:21:73:5f:e6:03:e9:be:55:6b:70:a8:86:5d:
aa:45:14:af:fc:2b:14:29:26:78:6e:c0:45:87:f2:
0b:33:73:2c:bf:92:9e:7d:cf:30:35:a2:4a:2f:fe:
a6:96:7e:91:d7:0f:23:5a:c9:89:09:8e:95:b0:5c:
a3:2d:ff:b6:2c:8e:53:c3:f1:21:be:19:7e:a3:7f:
8d:29:74:0d:6f:1d:f6:5b:d7:5f:7b:03:2b:35:86:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:6F:B9:88:CA:C3:EB:D7:08:C7:1F:22:46:46:FC:84:83:A1:44
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:71:78:cd:0f:d5:67:97:a0:29:83:fa:bc:7b:8f:44:e0:3c:
18:e1:4a:71:1c:ee:5e:f2:93:f9:61:3b:64:52:d5:2f:1e:e4:
b3:d1:af:8d:3a:82:38:e6:d4:2f:93:90:55:d8:06:16:00:14:
8a:d8:13:e4:cc:a1:e0:da:52:c0:48:c9:b0:7d:40:36:89:ac:
81:a5:ca:1c:bf:63:00:c2:41:aa:d5:f9:77:74:c0:8d:c5:c3:
59:f3:6a:50:64:e0:d0:c3:8e:04:68:cd:c6:84:6e:ee:b0:3b:
18:94:a4:c4:e1:1c:ef:5e:66:38:0a:ab:11:07:51:8d:80:9e:
99:17:2e:bc:79:57:22:56:37:2b:75:28:1b:10:24:14:1c:59:
fb:90:09:7d:75:25:04:2c:95:8b:d6:ed:71:43:8e:85:c2:d6:
58:2f:bc:38:7b:24:75:f1:78:fa:7a:6c:9e:12:e7:21:14:ed:
ad:0e:19:b4:8c:bb:9b:33:48:99:9b:37:2c:ad:df:8c:4e:8d:
1c:5b:93:2e:94:a5:d6:f2:9a:c5:e1:a9:08:03:88:27:07:7c:
79:b0:11:10:bc:2d:87:4d:cb:b3:59:30:98:b8:06:07:b2:0d:
31:5d:63:2c:57:ec:4c:4b:21:31:83:5a:e0:27:b5:e9:05:2b:
10:6c:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:24:28 2025 by rpki-client