Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: 2pzZs5qMpeAN640NTYnM56pyeXXlfzc+iesou2FEJTA=
Subject key identifier: C5:3A:6B:94:9C:68:13:EC:5C:C8:0B:69:B1:CE:C9:51:AA:84:C5:C9
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 0198D5F1A456EA8DC761F39C0A8287C4F2E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: GGuZV4w4l_L1AAB0u4gI9OxObhI.roa (hash: CLNm60QGfX0COSZodNNnpcHnrbcFlA00OSTVLEP9aw4=)
2: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: PymWBwPX+E1JsRN1WqChu9JaTTUg4Y5WLRbXyFnsLek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a4:56:ea:8d:c7:61:f3:9c:0a:82:87:c4:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=c53a6b949c6813ec5cc80b69b1cec951aa84c5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:f4:eb:f5:ce:e3:3c:29:82:72:3a:15:ed:
ac:8c:50:5e:48:29:0b:ec:fa:9e:80:89:22:7c:76:
8f:0a:81:ac:56:a4:4b:9a:b5:d0:47:dc:a6:3f:a3:
9c:e2:6a:f7:11:1a:5b:c3:35:76:93:e7:72:e0:e1:
08:db:66:b5:96:12:75:ff:ff:aa:9e:d5:5f:35:d4:
df:b3:5d:93:f0:07:dd:19:45:83:60:17:1a:bd:60:
e3:7f:92:5c:b3:d6:bd:64:95:b3:9b:f1:3e:9a:9f:
37:0f:1e:64:e0:46:9d:f0:48:fb:1a:a8:47:b7:d3:
31:a6:90:c9:8d:df:b1:6f:92:9f:f2:06:be:70:e4:
ce:b0:b9:6e:6a:ba:28:f0:6c:e7:a7:e6:96:64:a9:
ff:66:36:88:90:a9:82:1d:db:80:2a:6d:c6:cc:36:
54:11:7a:7c:8b:be:be:5e:b2:79:08:ec:cb:f6:18:
f5:ea:a1:69:46:b3:65:77:eb:ac:0d:b1:3d:4d:f2:
e5:69:e0:2b:fb:e3:a4:d1:31:5f:5f:97:4a:6a:a2:
74:d8:cf:b9:bf:b1:5f:0f:d6:bb:8b:6c:f6:1b:3d:
bc:e2:44:5e:3c:fd:8d:b6:4b:1f:96:fd:5b:aa:6e:
19:ae:75:c7:7c:d4:ce:4b:8c:5a:a9:5d:1e:62:07:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:6B:94:9C:68:13:EC:5C:C8:0B:69:B1:CE:C9:51:AA:84:C5:C9
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4f:e1:cd:11:b4:a6:99:ab:ba:de:8d:e6:1b:c4:b8:fa:78:
9c:3a:8e:a7:5a:6c:d9:89:55:09:41:c2:50:fc:3f:1f:03:fe:
0e:06:00:13:ac:0a:b3:2a:a7:74:91:9d:03:b8:56:40:5b:1b:
d8:85:d6:72:6a:9e:b1:d1:fd:57:3e:e7:28:1a:34:8d:4d:ec:
5e:71:55:ee:df:7d:71:f5:d7:60:bc:2b:07:9b:84:39:b4:6d:
c4:a6:2a:45:b6:5c:62:d5:23:06:7d:5f:5a:18:e9:4e:22:5a:
a8:3a:e8:4c:fc:cb:28:66:2e:6d:d2:07:78:30:ea:36:15:4d:
11:cb:f3:21:95:a5:2d:07:70:26:6f:14:13:92:7e:ba:a2:0a:
d8:3e:bd:bb:12:1f:83:ec:80:b2:15:95:bc:bc:18:30:68:21:
a1:97:87:1a:47:56:07:a1:0b:6c:63:8b:ad:2d:71:98:90:b2:
43:a2:91:1b:6e:82:be:5d:c9:c9:57:a1:f9:9b:32:01:a7:15:
a7:17:6b:45:fa:99:06:0f:75:03:6b:8d:43:70:f8:4f:73:f5:
2a:d3:f9:9e:b8:c1:f4:c8:d2:2b:77:14:04:78:41:85:da:76:
65:c4:d8:15:8e:e1:60:e3:75:38:9f:de:71:7c:58:1a:8f:84:
8a:97:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:00 2025 by rpki-client