Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: 4d8ilyLM9w/y+mAy7DrquuZ4lQLWYW5Gg/dQ00zfRiY=
Subject key identifier: F8:6D:A2:41:B0:66:1F:DD:5B:92:2D:87:7C:96:26:45:63:D8:B6:47
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 01995266A3F4F8AE48FF0C4BBA5BA56E1279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 1687
Signing time: Tue 16 Sep 2025 12:01:22 +0000
Manifest this update: Tue 16 Sep 2025 12:01:22 +0000
Manifest next update: Wed 17 Sep 2025 12:01:22 +0000
Files and hashes: 1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=)
2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=)
3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: jcYyscX5BFZ9s2VvneS6cJoVsJLS8J0ulcHbEoaQqAw=)
4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:66:a3:f4:f8:ae:48:ff:0c:4b:ba:5b:a5:6e:12:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Sep 16 12:01:22 2025 GMT
Not After : Sep 17 12:01:22 2025 GMT
Subject: CN=f86da241b0661fdd5b922d877c96264563d8b647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:f0:24:cc:6a:8e:0a:23:d4:5e:39:6a:69:
a9:22:ed:ba:31:b2:ea:76:76:af:63:ff:25:dc:3c:
69:2d:84:60:1f:ed:a9:2e:1d:d0:16:be:ef:06:f5:
f8:9d:23:86:20:30:69:63:b2:a6:74:b1:19:90:1e:
f8:62:09:1a:e5:fa:8e:fd:5b:2f:d9:8c:cc:95:0c:
aa:9d:af:4a:a1:ef:a6:8b:00:e5:1d:21:4f:ae:f3:
e7:7a:b0:55:1f:29:0a:69:f6:bc:7f:94:1d:9b:44:
ca:f8:25:d4:16:5a:2a:88:c2:b4:d6:1c:bb:d9:f2:
94:13:15:07:e1:91:45:ff:cc:80:4b:46:03:41:8b:
05:60:ae:c3:a7:84:7f:34:ad:8c:8d:ae:67:81:47:
53:a2:cb:6f:7e:76:99:4f:d9:ff:1f:c2:a1:b3:85:
97:a9:88:3c:5e:59:bf:4f:31:60:7f:bd:63:8f:da:
e1:8b:84:95:ea:43:d5:96:30:4d:d4:0e:7d:8d:2c:
f7:77:d2:10:07:7d:62:85:2e:f9:4b:1f:25:53:da:
f8:37:74:66:e5:b4:02:b5:41:6c:a4:29:ee:ef:bd:
b9:9b:8d:35:e2:1c:f5:93:4f:ea:d8:cc:f5:e7:1f:
a7:33:89:c6:e6:b2:d8:47:e1:4b:e8:06:33:42:2d:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:A2:41:B0:66:1F:DD:5B:92:2D:87:7C:96:26:45:63:D8:B6:47
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:91:7a:76:3f:e5:f0:44:dc:34:39:5d:b1:1b:1b:3e:40:
cb:e1:79:8a:1a:4c:fc:83:16:5b:16:0e:2d:0b:3f:7a:a3:14:
10:5e:3c:47:f5:28:a5:eb:b1:fe:cf:91:c5:f0:62:1b:5c:e8:
cc:81:94:14:11:30:c6:f0:fb:76:dc:37:a8:0f:75:5d:03:7c:
b8:ab:91:24:4b:fe:d4:6b:60:ca:56:be:ed:88:91:94:b5:f7:
3b:34:9a:69:61:15:b6:77:e1:3d:06:89:49:d4:83:23:1b:42:
66:0d:7d:a9:6b:2e:0d:46:02:2b:50:fa:01:cf:ff:e7:28:58:
89:ba:e1:1b:39:0a:77:5a:1c:c7:9d:d2:6f:cd:84:6f:a4:bd:
e4:6c:ea:83:b4:d1:0d:4f:28:09:7d:8a:cb:50:3b:b0:e0:17:
ef:77:f4:2c:75:16:18:69:bd:1c:e2:33:da:eb:32:88:1c:ad:
9f:21:aa:cd:2c:bb:7a:58:94:39:66:7f:cb:8d:78:58:bf:90:
7c:6a:00:b7:d4:cc:b9:e2:54:fa:f8:c4:db:18:61:ea:8d:63:
25:4b:7a:28:12:71:ce:dd:af:48:26:4e:3f:b1:93:b4:e5:e8:
30:03:93:d5:b0:35:39:8c:9a:07:64:87:a7:52:c3:d1:93:03:
78:5a:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:56:18 2025 by rpki-client