Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: e+Vg4BQHmfxJZx5fzwKCNVOYSc/iNbjjOPhoAIvkbN4=
Subject key identifier: 6F:C5:89:71:02:9F:D7:02:B7:82:9E:81:74:93:E3:6E:69:FA:E0:B9
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 019A71EE7A5E15102D3368AE5238DC6F5E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 172C
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: M8a/GiNp/Kj1hGG7bHNlMwKgPjCO+qobC1ivevcLwCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7a:5e:15:10:2d:33:68:ae:52:38:dc:6f:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=6fc58971029fd702b7829e817493e36e69fae0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:4f:31:ea:28:66:a0:1f:33:b4:a9:ea:17:
27:36:cd:58:9e:fa:0a:00:72:9e:ac:8d:c5:c0:a0:
0a:9f:d0:00:b2:d9:55:08:80:76:02:36:0a:05:41:
0f:d0:3a:98:87:96:4d:03:8c:f6:c1:a6:62:b9:51:
ea:7f:9c:20:74:ed:87:9b:06:64:9c:38:14:eb:3b:
9b:1b:50:74:30:27:72:2c:0c:47:d2:3d:ca:97:68:
01:10:f2:a0:53:eb:2d:35:de:f8:18:44:7e:bf:c6:
08:bc:0a:b0:39:6f:34:bd:db:0b:f8:8a:b0:b0:42:
ad:2a:03:ab:6c:42:0b:61:ae:bd:cf:96:ba:28:9f:
27:54:94:05:a2:db:bd:4a:09:14:1d:d3:a9:15:dc:
84:50:75:a9:5f:3f:4d:3a:f6:fd:27:af:a2:3d:55:
f4:3a:af:b8:9c:14:38:d5:7b:60:01:0d:1d:5c:43:
8e:db:ee:8f:1d:c1:3a:7d:0f:d3:27:e8:2d:2d:54:
75:0f:97:35:c9:5d:00:3e:e8:6b:25:75:a6:5e:aa:
89:04:4b:19:2a:e6:43:ba:81:97:3a:02:b6:fd:a8:
7d:72:42:2e:c5:d0:41:1a:fe:85:16:74:20:f8:a2:
6b:f4:a3:a0:93:55:3a:4d:3a:e8:ff:f2:91:3e:f5:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:89:71:02:9F:D7:02:B7:82:9E:81:74:93:E3:6E:69:FA:E0:B9
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:80:87:15:0d:68:a7:65:8d:f2:dd:7f:d8:b5:b2:f3:e0:d1:
83:6a:cd:39:a5:c3:f8:cb:4e:1f:76:3b:9c:09:21:e5:89:c2:
f4:aa:73:94:98:75:de:68:9a:fb:85:90:a7:ce:6d:e6:f0:4c:
f7:5e:dc:64:b1:46:bb:cf:7d:a5:15:3f:94:64:a1:92:28:4f:
7e:47:d5:60:04:63:4c:37:f3:61:bc:19:32:1a:20:bb:5e:36:
da:f5:c2:90:49:d7:72:e8:b9:7b:3a:1f:b6:64:3a:49:bd:f3:
f0:3c:99:7f:94:91:1f:7e:7f:83:1e:ad:27:aa:32:2e:c1:bb:
24:65:92:67:c4:5e:1a:be:a9:eb:54:6f:d8:9b:b6:b3:cf:8c:
e7:d6:cc:44:65:bb:ce:a5:79:3e:74:5e:c5:60:38:9a:2d:0e:
9c:25:9f:5d:14:4e:2b:9d:6e:59:cf:cc:5c:5d:da:a5:09:4b:
aa:49:30:14:ad:86:58:93:dd:2b:ac:96:21:4c:d2:52:22:22:
2f:63:a5:9b:79:74:48:dd:0b:5b:32:10:de:49:ef:86:8d:31:
ac:7e:60:d9:6c:f8:40:e7:4b:9c:6b:1b:b4:f4:78:58:d9:22:
be:40:82:92:58:bf:b4:05:d0:d9:fe:0a:9a:e0:37:8f:ce:44:
76:ab:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:39 2025 by rpki-client