Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: ZEg4Hu0pIoaORrNlGq9zq8amAuVUWh+UNjfBFYZnC40=
Subject key identifier: 79:36:F3:CD:A1:38:B7:C4:A5:50:FB:98:AD:3E:67:D3:52:81:33:3D
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019A1E3EC9082BE75AE5F9C2DE37A285C327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 02:00:22 +0000
Manifest this update: Sun 26 Oct 2025 02:00:22 +0000
Manifest next update: Mon 27 Oct 2025 02:00:22 +0000
Files and hashes: 1: GGuZV4w4l_L1AAB0u4gI9OxObhI.roa (hash: CLNm60QGfX0COSZodNNnpcHnrbcFlA00OSTVLEP9aw4=)
2: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: CuimJOlf/Zv14id5x8tOU0dAOhxQkbT5H+LPjRcGXT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:c9:08:2b:e7:5a:e5:f9:c2:de:37:a2:85:c3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Oct 26 02:00:22 2025 GMT
Not After : Oct 27 02:00:22 2025 GMT
Subject: CN=7936f3cda138b7c4a550fb98ad3e67d35281333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:64:50:ab:20:bd:d2:fc:df:e7:f0:c1:94:
a2:3d:01:0f:b9:2c:3c:4a:26:35:e1:d4:e4:25:7f:
b5:00:52:0b:41:70:60:94:df:c8:9a:1b:a4:bf:96:
eb:79:05:06:a0:5b:58:86:42:be:98:4e:5f:6c:3f:
64:ba:88:b9:04:2e:67:9b:e6:6f:3d:9a:b1:57:6e:
8d:59:3a:bf:ab:45:0e:93:19:3a:c5:0b:f7:4f:75:
62:da:6b:8e:78:44:bf:ce:b9:18:ed:eb:5e:63:0e:
e5:d2:a8:40:5e:cf:09:09:42:e5:93:48:45:c0:c6:
77:6c:8e:a0:3a:81:74:78:33:74:de:09:70:54:3d:
12:a6:6d:24:9d:7a:18:da:1b:76:fd:2e:da:91:10:
8f:d2:de:c9:36:49:04:1a:63:90:99:e4:92:2f:4c:
f0:67:e5:d4:47:0c:dc:06:cd:40:03:a8:55:ad:19:
33:d5:b0:0b:a5:49:19:35:9e:bc:32:08:e6:e7:41:
18:30:ac:89:92:55:47:ae:01:b4:a3:03:7e:26:c9:
b9:fd:81:db:7f:92:4c:22:b3:18:97:01:8f:59:a9:
0e:c1:8f:06:bb:01:0f:1b:44:cc:d2:bc:0d:52:92:
01:01:a7:21:ab:e1:29:84:2e:c1:e8:4f:63:43:d5:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:F3:CD:A1:38:B7:C4:A5:50:FB:98:AD:3E:67:D3:52:81:33:3D
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:29:f8:bf:72:3e:2d:a5:e7:b5:06:2b:8e:23:6c:a1:9d:ab:
95:1d:97:ea:cc:f0:91:55:03:33:7c:cf:71:07:35:ae:ff:dd:
96:bb:9c:1b:4e:5e:ed:97:59:ea:d2:69:53:d0:56:ff:51:54:
3e:1d:87:6a:d8:56:d2:0b:8e:8d:6b:d8:56:ea:43:95:d7:e8:
a0:73:1f:8c:09:d4:26:3e:77:b8:c3:a2:05:81:df:6f:30:40:
2c:34:e2:12:89:ae:70:e0:f2:d7:12:07:ea:14:78:e0:b6:a7:
76:8e:c8:f2:83:93:83:ca:73:87:7c:3b:76:90:56:f6:0f:fb:
2e:8a:53:5c:64:25:2f:63:8d:04:6e:c3:49:2d:38:bd:9d:96:
35:09:ae:fc:2b:d4:e6:09:45:3d:3f:f7:00:d2:82:e3:a8:01:
a1:4e:f3:dd:d0:be:5c:55:5f:b2:bc:c4:97:b1:31:64:4f:5a:
2e:f5:9b:4c:a7:2c:50:a9:26:d1:36:7a:19:f7:86:34:4d:54:
02:01:cc:59:35:9d:df:13:7d:ed:3c:7b:1e:8a:92:27:6e:f3:
e2:89:a2:d6:dd:14:83:4a:5b:42:1e:24:9d:e7:db:7b:98:9b:
48:12:64:21:93:e4:9f:cc:03:5f:ee:21:85:d4:d2:52:e2:27:
07:b5:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:02:08 2025 by rpki-client