Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: GUHQZP15zuOkvtuOxCOl2r0MQqwZ3M9PlEczFgPYl3k=
Subject key identifier: 0E:0E:5C:6F:F1:91:6D:67:3E:29:FC:23:C8:A4:EE:EC:9F:3C:F0:94
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 0199FD6B4C0A3E3ECEDC03FF9764115D5B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 17:01:31 +0000
Manifest this update: Sun 19 Oct 2025 17:01:31 +0000
Manifest next update: Mon 20 Oct 2025 17:01:31 +0000
Files and hashes: 1: GGuZV4w4l_L1AAB0u4gI9OxObhI.roa (hash: CLNm60QGfX0COSZodNNnpcHnrbcFlA00OSTVLEP9aw4=)
2: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: PSAh+L6OozCdX29GY//ZBVFFc7l0BQ33Iwd8hKriubk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4c:0a:3e:3e:ce:dc:03:ff:97:64:11:5d:5b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Oct 19 17:01:31 2025 GMT
Not After : Oct 20 17:01:31 2025 GMT
Subject: CN=0e0e5c6ff1916d673e29fc23c8a4eeec9f3cf094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:ce:85:e1:4b:54:6e:f9:83:c0:a0:a7:35:
e2:af:6a:c0:2e:fe:18:3f:20:3d:f9:d9:42:b0:b7:
47:ae:bd:47:36:9a:58:d7:d6:15:c9:96:75:77:b3:
ec:c4:ae:03:40:c1:62:7a:e3:e7:52:bc:ec:9e:31:
d5:de:19:9b:14:99:a2:4c:09:f7:02:9e:63:af:57:
7a:01:82:be:0a:87:99:f4:bb:b7:40:12:1a:92:a1:
e7:79:a3:6b:76:15:e8:fd:82:ac:18:37:b5:fb:b1:
09:8c:fe:9b:66:e4:fc:be:60:36:d1:f8:9c:8b:57:
6f:aa:8e:e4:ad:38:9b:2e:df:37:a1:36:a2:6a:66:
fe:e6:8d:7c:ee:ef:70:c1:44:43:3f:aa:fe:0c:ac:
02:e1:ca:1f:cb:f8:2c:2e:bc:da:c4:e6:6f:3c:1d:
0b:fd:e3:ef:8f:c0:07:85:67:a6:a6:9c:c1:a1:ac:
1d:75:0d:3e:e5:bd:01:26:1b:93:2a:2d:c2:c7:9c:
9f:f5:7c:6c:8d:a1:17:41:80:4c:cd:19:98:0f:f9:
e7:7d:06:74:10:97:5b:88:09:8c:ff:51:d6:c7:5b:
78:1d:2f:8e:fc:e3:78:e0:99:f7:8b:e7:8f:bb:49:
9b:6d:f5:fd:6a:43:94:d4:0e:1b:8d:2a:44:bc:b6:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0E:5C:6F:F1:91:6D:67:3E:29:FC:23:C8:A4:EE:EC:9F:3C:F0:94
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d6:e8:5c:88:af:67:e2:5b:c8:5f:d4:11:4d:e3:ce:a4:cc:
9a:19:a5:cd:8f:2c:4e:64:d4:37:c3:ef:65:3a:8a:02:d6:f3:
ab:5c:b6:15:a9:14:88:a0:fa:b5:74:c8:38:34:8e:6c:21:98:
86:af:f5:18:70:1b:8a:f3:df:7a:e3:e1:4c:a7:49:b3:65:fc:
74:a8:9b:fd:86:7e:33:37:4d:d7:d0:47:4d:da:43:d6:4b:58:
53:b9:6d:e5:14:72:af:2f:c7:e5:bb:72:ff:b1:f9:d9:24:42:
df:ee:db:ac:48:d1:f1:77:95:cb:44:46:02:4b:3b:68:35:a0:
d8:a0:92:d7:86:4e:d7:93:f1:aa:46:06:03:51:db:91:a2:41:
49:06:6e:db:d5:01:16:a8:4c:e9:48:be:5c:32:5b:37:de:1f:
39:2a:22:b3:55:be:24:78:4d:cd:7a:a4:da:99:e7:e8:ff:d7:
9c:75:69:82:d9:13:c8:ec:1c:53:09:f7:e0:c5:88:df:36:24:
dc:ce:39:a0:57:e2:7a:79:bb:fc:a0:66:96:0d:9a:09:bc:ca:
b3:6f:0c:0f:a2:7b:a4:13:b5:85:16:bd:c3:4c:df:78:88:3b:
7e:00:7e:e9:48:1c:7a:93:50:4c:a9:67:37:2c:fe:77:3a:e5:
c2:b5:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:45 2025 by rpki-client