Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: kYVInHWPfWxJtQ0SKIyXRLjeRJGLhJdCfCwPRrATsOg=
Subject key identifier: B6:95:11:76:E3:5D:E7:0F:21:B7:96:5A:2C:AF:48:B4:ED:BA:01:E0
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019A72CA53AC6A3097B0137494F94B10A789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: 8ofea1TR2-dllg5VQcblmlWW_Jw.roa (hash: DDzXIHlSYWS45kNZcp+/HWVN971pVq7eD5ioet4NIZ4=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: +zaVFzkgZIMKt8m0k+At+Om8dyqLpkQaVXJiNiUTHBQ=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:53:ac:6a:30:97:b0:13:74:94:f9:4b:10:a7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=b6951176e35de70f21b7965a2caf48b4edba01e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:27:26:42:74:35:16:c3:42:b4:ee:6b:30:
a0:f0:40:b1:67:c1:65:87:a9:0c:2e:8c:61:73:19:
97:bd:3c:f5:a5:45:14:4b:3c:76:87:d6:1c:d8:7b:
f7:48:c0:63:ba:95:1e:70:b6:db:72:de:a9:8a:e2:
99:5d:91:6c:a6:15:16:38:39:20:c0:81:4b:4e:cc:
bb:bc:d4:f2:82:83:de:55:f6:37:14:44:f3:8d:23:
5e:80:dc:f7:1e:fb:ca:74:09:a9:be:b6:ca:b1:c7:
ed:07:09:0d:14:ca:7e:15:5a:a5:b2:4c:d5:de:24:
7f:bf:d8:8c:6b:7d:45:6f:fc:64:48:57:55:ec:94:
95:ac:d1:4d:a5:97:d8:6f:1e:b6:9d:46:1c:74:02:
8d:ef:78:98:4b:13:84:9b:5a:4a:c9:fb:f9:46:b2:
e4:87:23:08:72:33:ee:33:3e:1a:4a:c4:fa:c9:c5:
ab:1f:6c:71:6f:2a:2a:87:6e:dc:ba:5d:94:97:7f:
c7:f7:b1:4b:0d:c4:43:14:9d:f0:aa:b6:eb:29:08:
69:79:df:33:40:1b:6d:20:12:e4:df:56:78:ca:46:
bf:19:7a:58:af:b0:3a:8c:70:19:e0:2c:20:2b:90:
8c:82:a7:59:e7:9f:77:4a:49:73:09:c1:a1:be:d1:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:95:11:76:E3:5D:E7:0F:21:B7:96:5A:2C:AF:48:B4:ED:BA:01:E0
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ba:0a:2a:eb:4e:bc:db:26:3a:a3:47:34:ac:13:47:9b:ed:
40:ec:eb:11:e9:d4:54:c3:d5:f4:47:d5:3d:54:5c:c5:c1:28:
fb:e8:ee:ad:51:f3:89:d2:11:e9:15:06:00:05:c1:b8:f2:eb:
74:ef:02:49:45:c3:68:5f:85:ef:18:44:00:e3:53:b8:a5:24:
a7:14:15:18:69:67:4a:f2:c9:55:e3:48:28:0a:cc:9c:2a:f3:
38:4c:f4:e0:5b:5c:ec:a0:cd:10:d4:d1:50:4c:f2:d9:1f:10:
9f:84:81:bf:bc:e0:4d:c6:5f:78:40:f7:50:b2:b6:2c:bc:a4:
8c:0d:fc:93:5e:89:b6:3d:d6:e7:db:f7:96:98:8c:04:b8:a4:
83:3e:58:36:13:81:c7:d1:d6:26:0c:8e:f9:17:78:15:6b:07:
47:50:d6:0e:b6:5b:cc:81:eb:38:5d:ff:83:f6:7d:8a:3b:07:
f9:24:c9:ac:5a:79:58:eb:97:3c:b4:a9:f4:a7:ae:59:56:8a:
9e:d3:07:b7:f3:dd:c7:3f:0e:56:f0:65:28:ac:8b:7a:d1:ec:
fa:3e:ab:5a:5b:e9:81:e1:14:2e:22:f2:ae:93:69:62:c6:b2:
2b:86:a6:a0:f4:62:84:b0:21:96:dd:da:5a:3f:93:16:c2:ab:
61:69:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:08 2025 by rpki-client