Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: 5gPonv1W7NTQwWTzoPexnDR3F5sbmMWIKPx/LHLju40=
Subject key identifier: 2A:C4:00:43:A7:08:2E:DF:59:F9:DF:F1:EC:96:51:5D:27:E9:B0:C3
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019921E7DBA391A63BCEB5EC03608D3C680E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 02:01:07 +0000
Manifest this update: Sun 07 Sep 2025 02:01:07 +0000
Manifest next update: Mon 08 Sep 2025 02:01:07 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: xF4F2MCo2lhJqw/UOI2AGYtHMnA/lIWv/I8cP5BCTNk=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:db:a3:91:a6:3b:ce:b5:ec:03:60:8d:3c:68:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Sep 7 02:01:07 2025 GMT
Not After : Sep 8 02:01:07 2025 GMT
Subject: CN=2ac40043a7082edf59f9dff1ec96515d27e9b0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:42:d2:1c:90:cb:30:e9:ae:4f:f2:3c:77:
d9:5b:33:23:0d:b6:51:7a:62:13:9f:14:3f:19:de:
b3:50:2e:c6:0a:42:7b:77:63:ee:7d:f7:ec:8c:ad:
a3:0a:06:bd:cc:e8:b8:29:13:05:8f:dc:49:40:42:
4a:94:34:67:c4:52:fe:df:35:7e:b4:38:1d:5f:e7:
06:82:3c:ab:ad:fe:21:cb:62:42:b7:90:f4:84:3a:
ae:cf:16:75:56:94:3e:39:46:5b:9a:94:1e:87:f9:
9c:6e:70:2d:64:a7:80:ab:b2:63:67:f9:e2:21:4c:
d3:e8:9e:03:aa:af:c2:d2:0f:76:1f:48:b3:11:85:
c7:2f:b6:de:fa:c1:33:0e:6b:33:d8:a4:d5:1f:ba:
a4:e7:53:30:eb:92:7e:1b:fb:61:77:41:a3:fe:e7:
28:54:e3:0c:b7:3f:31:f8:58:49:de:e7:92:de:b1:
4c:d4:20:31:e5:3f:e0:5a:ac:56:a9:bf:72:74:2c:
e2:34:e7:18:60:c3:a9:26:15:5b:aa:f3:8e:36:1c:
45:bd:38:77:c9:a7:0b:98:92:d0:d3:dd:4f:68:7d:
92:dc:88:07:63:ca:f5:54:09:1e:63:25:5a:21:d4:
b7:58:0e:39:45:51:14:03:06:a6:41:98:dd:7c:46:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C4:00:43:A7:08:2E:DF:59:F9:DF:F1:EC:96:51:5D:27:E9:B0:C3
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:57:66:2e:18:58:73:42:60:74:eb:cf:a6:11:57:3c:a2:
47:e8:2e:72:d8:cd:05:00:1c:cf:08:01:1e:c5:4e:63:c1:6f:
54:69:2f:65:49:c2:be:15:49:3b:7e:09:09:77:8e:5f:2a:38:
21:52:2e:3c:32:35:3e:42:05:fa:f2:72:15:79:78:89:9b:85:
6f:a5:af:c2:c5:0a:5f:3f:01:ae:57:3d:81:cd:62:b3:b5:31:
57:7a:1b:68:61:a9:58:19:2c:81:2d:b5:57:5f:ed:17:68:98:
31:74:1d:f1:35:4a:b3:32:e8:f3:1a:be:75:ed:80:5d:2e:c9:
1f:90:fc:a6:4c:c3:fe:38:38:00:7a:ea:d0:b7:d4:e0:9d:d9:
4d:e5:e6:61:7f:73:11:53:0c:9c:e2:2d:42:8a:93:ec:97:ac:
03:13:c1:68:c2:f7:38:f6:12:28:1b:62:c6:40:53:f3:49:99:
ac:ef:22:a1:74:76:78:2d:3d:d7:38:81:cb:ec:12:76:64:ac:
2d:11:de:f8:93:0e:d8:bf:06:70:74:6a:ed:14:0d:af:db:11:
6a:a1:27:60:83:29:08:05:3b:06:00:d0:d3:ac:3d:a1:87:bd:
9c:5e:d9:70:ee:2e:97:d2:9e:89:02:eb:8e:c5:90:0c:ac:c6:
b4:1b:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:00 2025 by rpki-client