Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: letRz7NgjvOsQLppmnC5bpPpdBp+HAVPykeMe2QROe8=
Subject key identifier: D9:47:D1:A6:82:3E:58:0A:25:50:41:6B:85:04:F0:F4:DB:08:C7:EA
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 0197B5C4F917D29A914D8D502786D2CCE96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 09:01:14 +0000
Manifest this update: Sat 28 Jun 2025 09:01:14 +0000
Manifest next update: Sun 29 Jun 2025 09:01:14 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: lakhY6ivhWOJEkW//stkAJ65ZGLJH2yQ5dqkkSB7/mg=)
2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f9:17:d2:9a:91:4d:8d:50:27:86:d2:cc:e9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Jun 28 09:01:14 2025 GMT
Not After : Jun 29 09:01:14 2025 GMT
Subject: CN=d947d1a6823e580a2550416b8504f0f4db08c7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:cc:43:77:ef:e3:06:7d:25:ca:b1:ba:9d:
a7:ca:ab:13:15:32:92:9f:aa:f1:25:40:bf:73:32:
97:c1:70:84:8b:79:92:d1:47:2d:2b:93:ab:4a:82:
77:9d:82:91:e4:6a:b9:e5:6e:62:f4:ff:b8:a3:4b:
4e:9a:84:37:71:35:d9:49:a1:16:11:7c:3b:57:45:
59:fd:af:69:e7:66:af:af:98:e6:4b:32:ba:2d:1d:
6b:54:a0:e5:c0:08:79:fa:11:44:03:f4:6e:02:89:
f7:4d:23:31:42:4b:aa:93:6f:b1:e4:2f:9c:2f:c1:
75:f5:4d:1e:31:40:c0:b5:49:42:96:a0:7c:63:f0:
a6:b4:43:6a:39:f3:c7:78:7b:93:5a:e8:c5:61:bc:
5b:d4:22:2f:13:bd:9e:56:47:7f:6a:00:31:ff:72:
8f:e9:4c:67:01:17:13:b2:d0:49:ab:a3:74:f6:5f:
9f:4d:6e:59:54:71:55:d5:8e:ac:24:6f:bd:6e:68:
c5:33:17:b0:90:41:67:0e:00:ef:00:72:90:af:db:
81:0d:68:e4:7c:92:2d:5c:8b:63:85:79:97:b8:ce:
08:e5:81:cd:c1:11:32:09:65:3f:64:78:ab:7d:25:
5f:f1:42:a7:78:3d:cd:86:42:55:2d:28:91:2a:73:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:D1:A6:82:3E:58:0A:25:50:41:6B:85:04:F0:F4:DB:08:C7:EA
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5e:ed:55:f6:2d:69:33:20:b5:3d:da:8f:f1:4e:d1:21:6c:
fc:9f:dc:e4:bb:ad:a1:94:a8:00:d7:76:fd:09:b2:fd:48:d4:
c2:47:b3:b9:5e:1e:42:89:81:8b:af:00:01:13:0d:9f:b6:cd:
6a:e2:8b:67:fd:88:4d:9f:7c:69:9f:74:37:cc:c8:17:d0:6f:
f7:8d:ba:58:d2:ee:2a:38:cf:59:9f:67:3e:84:4c:74:c0:10:
de:e0:59:d6:25:5f:79:fe:76:40:00:7b:30:38:7c:bf:e0:68:
58:77:a9:e8:fa:8f:0c:e4:1d:03:92:0b:fd:c1:9b:16:2f:d9:
b1:c9:d8:0f:6c:b7:53:fa:dc:6f:86:2e:be:5f:46:e0:f8:0c:
76:64:93:01:ef:e4:75:51:4a:a3:69:e8:a6:71:6f:5f:58:fc:
b1:35:55:40:33:5a:f5:8e:a1:94:8f:f1:c9:f4:90:60:ec:a1:
62:70:df:4e:b9:28:73:94:9f:21:8b:fb:0f:6b:1a:21:9d:5f:
ea:93:30:64:01:6a:fd:48:e9:01:4b:3d:18:ad:b3:14:3d:30:
13:1a:5b:80:74:36:d2:43:f8:73:b4:1a:90:1e:b3:d0:70:71:
c0:0e:53:83:29:5a:d0:50:05:10:0f:fa:d8:50:95:ba:5a:97:
4d:ea:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:54 2025 by rpki-client