Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: /rXefG2oet4swxq+ueEyAW2E1bDjgvea1eOzLwNUE5w=
Subject key identifier: 25:82:F4:48:98:15:DA:23:B0:82:D7:25:DD:1E:12:0B:2C:39:C4:78
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 0198D73AE64205F2787B050E04BCAA262A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 1054
Signing time: Sat 23 Aug 2025 14:00:18 +0000
Manifest this update: Sat 23 Aug 2025 14:00:18 +0000
Manifest next update: Sun 24 Aug 2025 14:00:18 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: T9cxCrgu8MyakmUmb8w1eEqljdMH7xxGLq1eDHhne88=)
2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e6:42:05:f2:78:7b:05:0e:04:bc:aa:26:2a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Aug 23 14:00:18 2025 GMT
Not After : Aug 24 14:00:18 2025 GMT
Subject: CN=2582f4489815da23b082d725dd1e120b2c39c478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:d7:50:e0:a1:4f:9a:81:bf:2e:6f:45:19:
f4:29:a8:ef:a6:87:aa:39:39:e9:02:f1:9e:5b:92:
20:bc:5a:56:3d:96:34:b7:28:03:9f:56:51:3a:74:
6b:cf:4b:b9:ac:3c:89:5f:1c:71:41:a4:0a:5d:99:
73:27:dc:8d:6d:cd:cc:26:0f:06:9c:f3:a4:f7:74:
0e:69:b0:f8:e8:43:f8:bd:7c:e3:3c:f6:c1:c2:fb:
22:f5:98:15:d3:2b:ea:33:13:14:65:ee:ef:21:fa:
fa:37:9a:6a:0e:2a:fb:72:dd:04:14:73:6e:09:e3:
12:c5:f8:36:09:95:70:6f:bf:f0:13:f2:dd:3a:ec:
99:d1:ec:cd:d6:f4:a5:d9:03:90:f9:b9:6e:7c:56:
27:7e:0f:12:b9:df:7d:ec:5f:0d:8c:6b:4e:18:92:
8f:6a:c6:c3:25:34:9e:11:89:a2:ac:c9:22:98:8c:
c6:84:83:b9:a0:56:95:97:6a:2c:33:e8:f9:5a:49:
8b:71:28:82:99:1d:71:a1:dd:b4:48:53:f3:88:31:
3e:e9:f5:60:62:83:78:83:16:dc:8b:fc:27:81:6a:
89:62:e6:11:4b:48:95:36:8d:1c:00:8d:c4:19:a5:
27:14:33:1c:71:a7:f3:92:0f:3a:92:13:a5:20:cb:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:F4:48:98:15:DA:23:B0:82:D7:25:DD:1E:12:0B:2C:39:C4:78
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6e:30:bd:ab:ec:b8:7c:99:61:98:c3:80:26:ac:89:a2:49:
b4:91:17:99:3e:5d:24:e0:1a:ea:25:fa:da:f4:38:d4:52:b6:
a3:1d:62:cf:51:5e:9a:da:a0:f8:86:c3:31:58:3e:c8:b7:31:
97:4c:eb:ff:a9:8f:58:dc:ad:a5:92:66:3e:23:8b:3e:65:fe:
8b:fa:a3:bd:b4:b8:42:45:3a:d1:2c:cc:34:52:d4:fd:56:ce:
ce:49:a3:e1:d3:29:59:99:a9:a9:4e:01:1e:55:59:80:28:81:
db:47:7a:ab:21:1e:5a:68:8f:5f:7d:0e:7b:1e:36:fd:66:ea:
f6:85:c5:8d:3b:aa:fa:ce:10:02:dc:1d:d3:43:f0:3e:74:e3:
d8:11:d2:aa:21:ec:12:84:c2:56:40:0c:4b:b7:80:65:8f:63:
0c:11:2e:31:64:f2:e8:de:bb:37:d3:f7:27:18:75:2e:6e:ac:
da:8b:57:3a:f3:21:2f:58:56:67:51:7f:09:63:b8:61:91:42:
d1:0e:57:85:78:e0:d3:3d:57:21:11:40:07:5b:4c:0c:de:ba:
af:cc:64:bf:bf:61:8d:b4:ae:3c:4c:07:1c:ac:15:70:69:07:
a0:10:c1:5f:06:d4:83:88:13:60:bf:d6:c7:8e:c7:cf:39:5f:
f3:cf:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:25 2025 by rpki-client