Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: 9XqNIvTtH+L1a46e5lwmgF7ZEqSHDNbu9tnhxBKRbUQ=
Subject key identifier: 42:19:45:ED:AD:A4:A9:A1:61:07:BE:05:38:3E:9A:BB:CA:3B:AB:3F
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 0198D58340A3B9E5BB6FAE10B2D8BFD3FCD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: qrI3pz5JyMuPfYPT/F6Z1SP8b7tw7o+Zcc/t1gU2oOA=)
2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:40:a3:b9:e5:bb:6f:ae:10:b2:d8:bf:d3:fc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=421945edada4a9a16107be05383e9abbca3bab3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:14:70:7a:3f:3a:ce:5d:a6:6f:99:49:c2:
e4:88:1e:36:63:93:fc:e4:b4:d9:1a:79:75:a2:c9:
48:d6:cf:ec:76:60:ba:e2:f5:ec:76:2b:ef:05:8b:
25:90:a0:02:82:17:74:fd:cc:49:de:76:89:f2:a1:
0f:d9:06:e1:2a:8d:30:6f:ab:8c:53:91:e6:f2:99:
7c:47:58:55:2f:a4:9c:11:53:7b:a2:2e:67:2e:d0:
06:0c:44:9e:45:b4:97:d7:f2:93:59:bf:39:f8:19:
ab:57:4a:13:e7:c4:cb:79:24:b7:8f:58:c5:9e:59:
47:9b:ca:cb:c5:8e:50:0a:d0:84:f9:97:9b:5b:38:
d5:1e:2f:9b:cd:f8:d8:08:27:68:a8:36:d9:92:62:
ee:26:9f:8b:9c:89:c0:13:a6:38:49:84:4e:e6:a0:
9d:20:f7:0a:79:94:93:a3:e1:92:e2:3b:f1:30:9c:
d9:29:96:65:03:34:8a:8d:0d:71:e6:c4:63:01:72:
b7:6a:7a:f1:df:4f:0b:fb:6a:7c:36:28:01:b3:b8:
b3:8b:5e:3f:ec:dd:f9:6b:d4:33:1c:80:3e:05:98:
e9:32:f6:f1:f6:6c:d8:cc:ea:40:73:e5:74:ab:7f:
84:d1:aa:5d:1a:ed:8f:82:e5:36:e7:0e:85:83:75:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:45:ED:AD:A4:A9:A1:61:07:BE:05:38:3E:9A:BB:CA:3B:AB:3F
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9a:17:70:6f:32:33:c8:e8:3b:63:55:89:da:df:28:91:43:
9a:ea:6e:70:bd:7a:53:88:c7:cd:16:f8:f6:6d:dd:f6:ac:1a:
19:bc:33:89:1a:b5:ef:cd:83:ec:ac:e9:63:84:70:99:33:58:
53:d8:29:2f:64:00:9b:a5:da:25:92:08:59:da:de:85:44:22:
1a:68:be:8b:67:c7:d3:1c:98:e8:3c:80:35:71:3b:1b:91:41:
79:b6:cb:6d:b7:8c:eb:0c:8b:03:d5:c7:15:40:c2:cb:b7:ed:
1d:30:b4:dd:19:55:55:c2:1f:c2:bc:03:4a:d7:9c:3b:39:fb:
7c:76:c3:c0:ea:f9:f8:ff:4a:7f:55:4d:2e:3c:e4:f7:a9:69:
db:5e:27:9b:e2:21:4b:11:a2:fb:32:88:62:29:7c:5d:fe:8a:
0b:96:43:56:17:19:35:71:ff:0b:90:ac:c5:83:14:c9:67:cd:
7e:a3:eb:7f:e0:3c:bc:6e:05:b1:37:f4:ef:cd:84:fd:0c:36:
fb:cf:be:f2:ea:80:61:05:bb:ab:d9:8c:0a:d5:39:e9:0b:ce:
19:cd:4c:c1:38:06:c7:7e:16:7e:8a:4e:d7:d7:1f:2e:14:7d:
1b:f2:03:be:90:93:52:d8:37:bd:ab:88:85:2a:39:27:ff:30:
38:9c:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:13 2025 by rpki-client