Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: b0pYB2TdBxmirc1Go1A9WGndcIwlCNwRTaDscSowFjo=
Subject key identifier: 56:CB:34:DB:85:64:05:0D:A6:2F:99:89:DD:CF:09:6F:11:10:2D:57
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 0197654CE2A6FB7E108EA587EA4A02A7C726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 131C
Signing time: Thu 12 Jun 2025 18:00:26 +0000
Manifest this update: Thu 12 Jun 2025 18:00:26 +0000
Manifest next update: Fri 13 Jun 2025 18:00:26 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: eCsTijYSrYMf+0MdKwjAk3ir0Wv/1gh8fdITrxH45uY=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4c:e2:a6:fb:7e:10:8e:a5:87:ea:4a:02:a7:c7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jun 12 18:00:26 2025 GMT
Not After : Jun 13 18:00:26 2025 GMT
Subject: CN=56cb34db8564050da62f9989ddcf096f11102d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:92:50:40:2c:29:45:1f:d1:ff:de:b9:37:
11:a3:b5:0a:88:43:26:a8:cb:57:0c:a4:2b:2e:6c:
48:0b:55:ec:36:48:06:28:f8:a8:b1:6a:af:49:47:
3b:23:15:65:19:f2:5e:42:1d:8e:54:b2:3b:27:91:
a2:0b:bf:b9:70:58:5e:4a:85:0b:39:79:29:9d:68:
09:93:bd:a1:a8:0d:12:62:11:d0:95:f9:71:09:c8:
39:50:e2:21:33:7d:1e:37:9b:0b:b3:d6:ed:a5:71:
dc:3d:57:40:eb:76:82:fd:42:23:77:c1:85:2f:74:
e5:ca:6d:20:33:95:d9:4f:7a:32:b8:28:b6:c3:54:
28:84:6c:e5:ad:8c:b5:c7:1a:90:e0:74:f0:4d:63:
82:78:b9:47:21:92:96:6e:5d:b1:24:9d:e6:00:81:
65:61:87:ea:31:04:80:53:c0:e0:9d:df:61:ed:c0:
cf:dc:40:74:20:b3:5c:89:6b:f2:dd:69:03:00:14:
b7:11:50:e0:6b:ee:41:6f:cf:11:ed:f6:04:c1:fb:
7f:cf:7b:0f:42:ec:c6:74:07:4e:bc:5c:c6:10:66:
30:96:6b:86:29:8b:e4:b4:d2:6f:01:bb:fb:d1:e3:
b2:59:46:9f:76:64:25:3c:dd:c8:42:e3:fa:1f:17:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:34:DB:85:64:05:0D:A6:2F:99:89:DD:CF:09:6F:11:10:2D:57
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:07:34:a8:f4:d9:52:9e:40:90:70:60:9d:f9:7a:bc:6c:1b:
9b:1d:6d:d2:f6:4b:95:ab:0c:34:2f:e0:14:3f:1c:c7:12:a6:
f1:de:5d:78:ea:81:4b:86:f6:4b:bf:11:9a:94:b4:fc:c9:16:
a2:0d:39:37:cc:b9:fc:79:d6:29:6a:4b:56:26:11:0c:3b:53:
d3:cb:c9:d8:12:37:71:f6:14:ce:0e:ff:61:fa:ef:0c:ce:07:
10:2c:7d:5b:84:fa:9f:29:8b:26:1f:81:22:48:ba:2d:88:30:
97:b7:d1:76:51:8b:c2:62:16:47:8c:aa:f0:88:94:4a:df:73:
fe:2f:4a:67:8c:f9:16:e9:26:82:de:0a:83:4e:62:c9:11:37:
e1:98:b6:c8:c3:21:62:d2:9b:85:3e:2a:91:55:59:49:7b:66:
b4:7a:9d:41:ef:57:7c:2a:51:d5:01:e1:a4:ae:6c:0b:c4:cf:
ab:3f:f4:bd:2a:c4:4a:cf:8a:65:b2:f5:87:c3:84:ab:7c:ee:
17:ac:01:c6:14:c7:6c:1b:d8:ab:0d:9e:a2:4f:e8:12:71:c8:
ed:12:71:20:d0:b7:4e:11:43:3b:2b:4c:93:0a:93:04:ed:45:
e8:66:d7:37:73:7b:22:77:f5:66:e2:75:52:3b:41:f8:f5:d0:
7a:d0:05:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlTOKm+34QjqWH6koCp8cmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz
NzI0OTYwHhcNMjUwNjEyMTgwMDI2WhcNMjUwNjEzMTgwMDI2WjAzMTEwLwYDVQQD
Eyg1NmNiMzRkYjg1NjQwNTBkYTYyZjk5ODlkZGNmMDk2ZjExMTAyZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MeSUEAsKUUf0f/euTcRo7UKiEMm
qMtXDKQrLmxIC1XsNkgGKPiosWqvSUc7IxVlGfJeQh2OVLI7J5GiC7+5cFheSoUL
OXkpnWgJk72hqA0SYhHQlflxCcg5UOIhM30eN5sLs9btpXHcPVdA63aC/UIjd8GF
L3Tlym0gM5XZT3oyuCi2w1QohGzlrYy1xxqQ4HTwTWOCeLlHIZKWbl2xJJ3mAIFl
YYfqMQSAU8Dgnd9h7cDP3EB0ILNciWvy3WkDABS3EVDga+5Bb88R7fYEwft/z3sP
QuzGdAdOvFzGEGYwlmuGKYvktNJvAbv70eOyWUafdmQlPN3IQuP6Hxfm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbLNNuFZAUNpi+Zid3PCW8REC1XMB8GA1UdIwQY
MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt
OThmNzQ1NGJhNmNlLzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl
LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwc0qPTZ
Up5AkHBgnfl6vGwbmx1t0vZLlasMNC/gFD8cxxKm8d5deOqBS4b2S78RmpS0/MkW
og05N8y5/HnWKWpLViYRDDtT08vJ2BI3cfYUzg7/YfrvDM4HECx9W4T6nymLJh+B
Iki6LYgwl7fRdlGLwmIWR4yq8IiUSt9z/i9KZ4z5Fukmgt4Kg05iyRE34Zi2yMMh
YtKbhT4qkVVZSXtmtHqdQe9XfCpR1QHhpK5sC8TPqz/0vSrESs+KZbL1h8OEq3zu
F6wBxhTHbBvYqw2eok/oEnHI7RJxINC3ThFDOytMkwqTBO1F6GbXN3N7Inf1ZuJ1
UjtB+PXQetAFFQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 04:44:05 2025 by rpki-client