Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: i0MVZvM3nYL9qZUsYZcDjE8L2i5anAHXKwQSOQx0K/s=
Subject key identifier: F6:1F:D7:7E:98:71:02:A3:1A:BC:94:A7:48:0A:79:19:A1:8A:03:53
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 0199FE0FEE7CFE067D8432461C59889FAE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 0FD3
Signing time: Sun 19 Oct 2025 20:01:20 +0000
Manifest this update: Sun 19 Oct 2025 20:01:20 +0000
Manifest next update: Mon 20 Oct 2025 20:01:20 +0000
Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: chS+l4nLxeM7qOYIeLQRpg00NfMO9ipEF4yiWnDPWvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:ee:7c:fe:06:7d:84:32:46:1c:59:88:9f:ae:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Oct 19 20:01:20 2025 GMT
Not After : Oct 20 20:01:20 2025 GMT
Subject: CN=f61fd77e987102a31abc94a7480a7919a18a0353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:eb:2e:38:db:17:00:92:d0:e4:c2:ae:6c:
37:e0:0e:5e:bd:ba:2d:c1:b7:ad:db:63:19:17:ad:
b3:07:f6:7c:53:83:58:1b:e2:65:0e:7e:c9:a7:35:
4d:f0:a1:4c:55:51:93:ab:8d:87:37:41:16:82:93:
07:4d:84:16:ea:7a:e9:5b:b7:17:38:95:9e:54:74:
ff:34:b1:19:32:3e:ef:64:32:cf:d8:e6:54:ea:e8:
d1:4b:d3:34:ac:00:6b:4c:b8:3c:29:fc:61:a5:df:
c1:fd:cf:4a:16:e8:8b:b6:c5:54:61:cc:cc:e7:dc:
c2:80:f7:fd:c3:a7:20:93:ca:4d:d3:75:4d:02:61:
9b:6b:3e:de:6f:d6:fe:8d:b6:bd:42:b7:75:d4:a8:
c6:0a:4b:70:72:2a:53:5a:b3:96:fa:ab:1d:fe:b6:
08:78:77:d5:2c:ef:0a:bd:20:9b:5d:f2:8d:02:03:
c3:06:94:2e:1b:12:5a:fc:74:b5:4f:36:b5:8f:e6:
e5:72:76:72:e4:3e:e2:8c:b1:fe:a7:26:ec:c1:04:
99:e1:36:f9:54:26:22:bc:c9:af:38:2d:37:10:46:
a9:00:51:60:7b:2c:5e:34:eb:45:2a:92:dd:3a:18:
a6:a3:a9:2f:49:98:ca:b0:03:04:ff:19:cb:d9:c5:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1F:D7:7E:98:71:02:A3:1A:BC:94:A7:48:0A:79:19:A1:8A:03:53
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2a:ba:5d:5f:08:7e:f8:2a:18:d4:bc:b3:ef:3b:30:03:60:
f8:46:92:80:7b:ef:f4:18:ee:31:b8:d1:d1:30:3a:10:4b:17:
44:c9:e3:ea:e1:05:20:b9:09:27:65:76:6c:ba:71:82:22:34:
a6:a0:8e:d0:14:ac:64:ae:ac:ef:e2:c5:61:8d:93:50:3d:80:
a8:c6:3c:5c:e9:3a:59:86:4c:d7:04:72:ce:4d:41:e2:5f:61:
f8:df:dc:35:94:e2:f9:c9:db:12:54:5f:72:c7:42:8b:c3:de:
96:46:3e:d2:12:27:2b:d9:88:21:12:2f:69:e9:fe:c5:ad:b8:
fa:50:d7:03:f1:d5:3f:95:93:c8:8f:75:64:c8:5b:f5:36:76:
fe:03:e3:9f:61:e0:fa:ae:c3:b4:f8:f6:96:e0:2c:00:a8:6e:
3d:95:4a:6d:d3:dd:69:92:b7:f9:4f:0f:d8:48:f4:f6:0a:11:
3e:53:7f:f9:f4:87:6d:92:67:81:df:e3:1f:27:c7:56:f3:ab:
9a:ee:9b:41:90:08:37:9b:74:be:4b:a0:38:96:db:50:b8:d2:
55:ce:d5:ae:47:ae:3d:e4:d1:81:51:60:e5:49:a4:e2:2e:1f:
0c:39:f7:b9:87:75:96:f6:2f:fc:e8:63:5d:7d:df:26:da:cd:
69:9c:df:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D+58/gZ9hDJGHFmIn65zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODFmZjMxNGZjOGFhZTM5NzU0MDdiMGEwYzE3ZjJmZGUz
NGRjMjYwHhcNMjUxMDE5MjAwMTIwWhcNMjUxMDIwMjAwMTIwWjAzMTEwLwYDVQQD
EyhmNjFmZDc3ZTk4NzEwMmEzMWFiYzk0YTc0ODBhNzkxOWExOGEwMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue7rLjjbFwCS0OTCrmw34A5evbot
wbet22MZF62zB/Z8U4NYG+JlDn7JpzVN8KFMVVGTq42HN0EWgpMHTYQW6nrpW7cX
OJWeVHT/NLEZMj7vZDLP2OZU6ujRS9M0rABrTLg8Kfxhpd/B/c9KFuiLtsVUYczM
59zCgPf9w6cgk8pN03VNAmGbaz7eb9b+jba9Qrd11KjGCktwcipTWrOW+qsd/rYI
eHfVLO8KvSCbXfKNAgPDBpQuGxJa/HS1Tza1j+blcnZy5D7ijLH+pybswQSZ4Tb5
VCYivMmvOC03EEapAFFgeyxeNOtFKpLdOhimo6kvSZjKsAME/xnL2cXyswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYf136YcQKjGryUp0gKeRmhigNTMB8GA1UdIwQY
MBaAFLKB/zFPyKrjl1QHsKDBfy/eNNwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTIt
ZmE5MTE0YTgyYWM5LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTItZmE5MTE0YTgyYWM5
LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyq6XV8I
fvgqGNS8s+87MANg+EaSgHvv9BjuMbjR0TA6EEsXRMnj6uEFILkJJ2V2bLpxgiI0
pqCO0BSsZK6s7+LFYY2TUD2AqMY8XOk6WYZM1wRyzk1B4l9h+N/cNZTi+cnbElRf
csdCi8PelkY+0hInK9mIIRIvaen+xa24+lDXA/HVP5WTyI91ZMhb9TZ2/gPjn2Hg
+q7DtPj2luAsAKhuPZVKbdPdaZK3+U8P2Ej09goRPlN/+fSHbZJngd/jHyfHVvOr
mu6bQZAIN5t0vkugOJbbULjSVc7VrkeuPeTRgVFg5Umk4i4fDDn3uYd1lvYv/Ohj
XX3fJtrNaZzfSQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:10 2025 by rpki-client