Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: VrvxjsoQPX4QAzp5rx/44qXtyNhSMrg0y+4bbEfFagI=
Subject key identifier: 8E:9D:C5:33:28:56:B7:A0:0C:CD:38:F4:D2:91:D6:41:F7:3C:B0:20
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 019A7226240940C555D02ECE1CAD09DE30AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=)
2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=)
3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: 3EoDANm3bWIEBRX3iGP0Z6pFqILsgpKJ73IfA/iqXY0=)
4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:24:09:40:c5:55:d0:2e:ce:1c:ad:09:de:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=8e9dc5332856b7a00ccd38f4d291d641f73cb020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:4a:a1:ff:ac:46:65:5e:80:03:47:81:19:
6f:15:a5:60:b7:1c:a9:ac:80:48:3c:58:d8:04:a1:
92:13:44:10:a5:a8:b9:cc:e7:e2:4d:d8:cd:f5:7f:
c8:07:aa:d5:52:09:e2:b3:75:42:a6:f1:b5:45:2f:
00:57:d5:64:8d:f4:a0:f8:bf:f8:d5:9f:2a:0c:4e:
62:52:f4:31:ec:ce:88:47:d1:e9:b1:b8:19:d6:ec:
45:cd:15:ff:c4:1a:b5:89:d7:2d:81:86:fc:6e:a3:
9b:18:20:af:bb:40:61:d0:98:a3:d4:b1:99:a5:2f:
7b:f1:1e:0f:5a:5d:0f:4c:78:64:81:98:0c:94:3d:
0d:b1:4e:b2:49:e6:36:87:22:9e:b0:fd:de:34:33:
fe:15:94:82:d4:aa:99:b2:52:64:12:9e:cb:91:c8:
51:2b:03:41:3b:bb:60:ad:7f:7e:ec:be:85:1b:23:
1e:46:b6:6f:a0:28:1b:4e:50:b9:be:b7:20:df:d8:
8a:af:c2:89:6f:dd:2a:f6:90:ea:ef:14:44:29:69:
a4:da:47:f0:4c:93:de:5c:12:e9:cd:03:a0:84:73:
ed:04:66:0e:70:5f:44:57:b0:c5:c8:03:e2:ee:4f:
77:60:6c:b0:bb:45:70:d8:04:65:fa:de:2c:d9:9b:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:C5:33:28:56:B7:A0:0C:CD:38:F4:D2:91:D6:41:F7:3C:B0:20
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:df:72:79:df:3b:d6:c7:47:3c:87:6f:14:4b:c4:b8:f2:ea:
e2:9f:e3:a2:07:73:5f:5e:be:b0:0b:f1:f8:a5:86:c4:25:db:
75:d3:9f:4b:03:2a:82:b3:3d:58:d1:a4:12:35:be:bb:dd:db:
25:7d:f3:8d:77:a4:7d:3f:84:a2:61:98:b6:5a:80:82:d0:75:
19:4b:f4:da:bf:e5:30:64:b9:0f:15:50:20:e6:77:c0:b1:d9:
e6:07:dd:53:72:81:b4:b7:9a:a2:b5:70:94:83:0d:d6:75:34:
48:2d:c1:26:68:26:65:62:8c:a0:92:88:5e:8e:62:10:ae:e6:
fe:cf:2c:50:a9:0e:92:6b:43:27:39:e9:80:88:9a:07:24:81:
99:3c:ba:98:a7:8d:fc:d6:e7:61:8b:be:e2:b8:ac:6c:a0:3f:
09:4d:a8:8b:77:51:0f:51:9a:11:9d:f4:dd:96:58:c8:7e:43:
67:16:0a:46:bf:25:e6:e2:7b:57:ac:02:cd:4b:62:bc:af:05:
84:a3:1d:11:1d:af:29:d6:32:ae:db:1f:c0:ce:73:5d:64:10:
1d:34:0f:92:f7:b0:0d:6e:43:e3:a6:36:1f:d9:5a:4d:bb:8e:
f0:62:25:ed:76:3f:73:8f:1a:39:7a:98:29:dd:f3:7f:75:7f:
61:ee:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:46 2025 by rpki-client