Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: XONEyiyHEAXYnWnGbjEAmDkR/VkcAfy4VB0MO0awlAg=
Subject key identifier: 2E:4C:81:FA:B8:C5:5D:17:81:00:C8:BC:1F:2F:CB:08:9D:F2:FF:CF
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 0199FBB35FF60A29F892C4BDA6284327C070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: G4p3T3vKIJwpoVG087GbMaXF5PU.roa (hash: S1k3o+lhMdQMdnd1dbHX7NQg9XvE842LHxXNFh07jnY=)
2: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: nknfXMR4oOcABzKFriVSJvnSnCi9MYuqzLvsApr3MCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5f:f6:0a:29:f8:92:c4:bd:a6:28:43:27:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=2e4c81fab8c55d178100c8bc1f2fcb089df2ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:3a:a8:0b:11:e9:17:5c:91:83:5a:11:c7:
bc:09:93:de:9f:0d:a8:17:5c:c6:fb:a6:14:d5:28:
21:7e:60:ee:ba:e4:ea:cd:49:da:4e:0f:60:1b:b5:
c1:d0:25:65:7f:02:9f:ed:15:38:5e:46:7e:94:b0:
8c:8e:86:be:89:5d:e3:2a:ae:80:83:29:64:1a:48:
6a:e0:60:63:9b:a6:75:79:53:aa:bf:8d:5b:48:50:
ef:90:e9:79:e4:29:53:49:f4:7c:65:aa:3d:81:7d:
ca:7d:f5:ac:78:62:49:85:66:46:76:fb:63:ab:f0:
41:5e:0d:2d:91:5e:73:aa:5d:26:0c:55:61:65:0f:
48:d5:6b:1b:ea:03:87:42:4b:c7:86:84:5c:6d:59:
bd:f5:2e:73:25:e0:cd:02:14:fc:54:9e:3e:d4:db:
f0:bc:8f:4b:1d:34:af:a1:69:05:f5:1d:bc:45:0a:
83:59:44:f5:a2:47:26:24:6e:a3:dc:e1:76:0f:81:
aa:fb:e1:8a:83:48:0e:0d:22:1c:cb:14:29:71:14:
43:78:a9:97:31:40:a7:41:74:8a:aa:02:92:ee:48:
c0:05:65:ef:01:11:ef:ad:f1:9f:ef:e6:b9:4c:dd:
44:06:e4:b7:2a:81:54:6a:36:a1:35:78:33:4b:f1:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:81:FA:B8:C5:5D:17:81:00:C8:BC:1F:2F:CB:08:9D:F2:FF:CF
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e3:0a:57:c2:d4:71:95:4b:d2:64:c7:0c:52:16:ba:2e:1f:
b1:d8:db:92:0e:11:e3:3b:85:86:55:11:e3:63:4c:fc:27:a5:
21:b1:0c:7c:de:b0:a9:22:bd:b4:17:91:57:4f:22:fd:0f:0b:
97:60:67:38:67:6b:24:87:8e:87:b8:44:77:3d:44:26:17:2b:
be:af:76:e2:6f:3c:9e:32:ea:cf:56:88:7b:42:3d:cc:d5:53:
6a:03:4b:92:d5:b1:68:4c:49:cf:f2:c4:eb:13:17:87:77:d1:
16:4b:94:9d:fd:d1:50:de:e1:e9:d0:50:54:98:45:f3:39:dd:
82:1e:40:ec:9b:1e:d0:97:ce:bc:60:43:3e:54:55:45:45:47:
b9:1c:e3:16:6a:8e:09:77:b1:6c:e5:53:ac:67:88:3a:3c:09:
c3:da:02:4a:a3:10:74:91:69:fd:24:88:76:c6:ec:6c:a6:d6:
36:98:ef:a4:63:f5:d2:6c:bc:e2:46:37:a6:1c:58:71:48:dc:
01:47:55:27:76:b6:97:0e:f1:82:fb:50:26:b2:e9:37:6e:14:
01:43:1e:08:3c:83:3c:f4:db:41:d8:8e:14:5c:a9:ae:21:22:
0c:56:44:91:ab:2e:8f:2b:f6:a4:34:f7:ea:cf:95:27:08:2a:
e4:70:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:28 2025 by rpki-client