Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: 6zjaT0+AmBPEvlux/OcuzmaUJxy4Ek+2vkIGyyBfCOs=
Subject key identifier: F2:89:F1:3F:E2:5B:81:82:99:14:67:B7:21:69:D4:CC:ED:B9:FE:9B
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 0198D4E052D4D32644550974E554BC064DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 0F39
Signing time: Sat 23 Aug 2025 03:02:07 +0000
Manifest this update: Sat 23 Aug 2025 03:02:07 +0000
Manifest next update: Sun 24 Aug 2025 03:02:07 +0000
Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: kQMdB/GwAwD5JWNS0uJOb6jG4i7DBCLywn5Mfu3Gduo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:52:d4:d3:26:44:55:09:74:e5:54:bc:06:4d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Aug 23 03:02:07 2025 GMT
Not After : Aug 24 03:02:07 2025 GMT
Subject: CN=f289f13fe25b8182991467b72169d4ccedb9fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:1a:72:99:7c:fb:ce:9d:19:a1:2f:f7:9d:
82:88:6d:10:18:fb:c7:ed:1e:c9:aa:8e:5b:2a:bf:
89:f1:03:1c:18:7c:20:29:73:66:a7:df:78:9d:b1:
a8:78:f5:e2:b8:20:2b:40:ac:99:b1:6d:d4:e5:c2:
26:8a:a6:d3:2b:a5:fd:33:2f:e8:c5:36:a9:38:1a:
00:ae:e5:b3:de:3d:53:ab:44:5d:26:78:a4:94:86:
a3:ae:cf:ee:b7:b3:3b:31:5b:4b:ad:ba:02:62:4f:
c2:14:79:02:af:05:99:0b:cb:35:e5:19:ba:72:8c:
31:2c:a3:cc:d6:0c:9b:c5:59:24:4d:9c:09:af:fe:
57:4c:03:7a:8b:c3:68:4c:f7:9b:e1:35:1d:8b:98:
3d:ea:42:1b:02:35:08:2d:02:68:69:78:3a:64:a4:
32:02:be:49:f8:39:53:44:c3:77:95:78:72:45:23:
5f:13:e6:e9:b8:63:c8:1c:1e:a8:25:e4:2d:b1:50:
cd:07:31:0c:fa:9f:f5:67:eb:e5:43:a7:bb:c5:ce:
ec:dc:3d:4f:c6:c1:68:06:fc:7c:29:8b:37:64:d8:
7b:30:8d:c2:7c:a3:d2:1b:d7:d1:d0:fb:bd:54:8c:
d4:84:ff:3a:09:43:04:41:db:14:01:bf:18:93:27:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:89:F1:3F:E2:5B:81:82:99:14:67:B7:21:69:D4:CC:ED:B9:FE:9B
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:03:83:3d:1b:20:9c:8b:fe:24:f7:98:68:92:83:31:7f:7e:
7c:06:0b:09:fe:c2:3c:d2:ca:3b:27:1a:6b:e8:41:a8:51:44:
b5:13:51:8f:8e:dd:cb:ae:47:50:65:53:a4:ff:34:d9:79:69:
ea:68:b8:f7:07:06:d1:28:d9:89:ca:cc:5f:6d:d5:73:39:66:
a8:4c:e2:90:54:6a:7c:76:b5:c3:dd:f6:5a:a0:4b:dd:2d:69:
3c:99:d9:30:3b:7a:59:e0:8b:1b:85:b2:51:7c:fc:2f:d2:ce:
f7:82:13:b0:82:0a:bf:be:89:1c:d4:60:f3:f9:8b:78:a2:b4:
93:e8:63:92:e0:70:67:09:c0:35:ca:9a:16:97:8b:5c:96:91:
9d:b3:61:3e:29:e5:c6:8d:b0:5c:71:af:e5:63:c6:2e:dc:37:
a4:fe:36:fd:d1:4c:9b:52:ec:66:91:78:0b:76:51:4e:17:82:
24:7f:e3:4a:1e:79:59:ea:e6:2a:aa:01:a5:74:24:d2:25:9a:
c2:d1:21:28:7c:74:c1:90:6d:93:6d:9b:83:f3:85:08:fe:09:
58:ce:30:2c:f6:50:98:9a:7d:cc:8f:54:81:91:48:53:fa:be:
23:4e:49:cc:d7:b0:97:f0:2d:b4:1f:9b:8b:30:a9:74:dd:a7:
8b:69:96:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:01 2025 by rpki-client