Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: PjBal4DqA2qFmb541mtEe0Q4MKm7rtNeAvvvw9+gsMg=
Subject key identifier: F2:B5:EB:93:A1:C2:76:3F:98:9F:37:BE:2D:83:E6:80:36:99:82:F2
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 0197B88FC424E38DDD04C5CE0AFD81BE5713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1347
Signing time: Sat 28 Jun 2025 22:01:58 +0000
Manifest this update: Sat 28 Jun 2025 22:01:58 +0000
Manifest next update: Sun 29 Jun 2025 22:01:58 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: +wugFistR60fFSdxQkFiVFoyuubsmYiLgno6rmMQqj4=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c4:24:e3:8d:dd:04:c5:ce:0a:fd:81:be:57:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jun 28 22:01:58 2025 GMT
Not After : Jun 29 22:01:58 2025 GMT
Subject: CN=f2b5eb93a1c2763f989f37be2d83e680369982f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:ea:91:6d:4d:26:18:e2:0d:ca:b6:cb:9c:
65:f8:b8:f7:7e:f0:90:8c:f5:4c:6a:13:5c:1f:ed:
e3:de:88:c6:0f:16:df:ea:7c:b5:ef:ea:fe:2c:74:
f7:71:52:ed:95:55:4e:75:33:5f:ba:a9:7b:f6:83:
1c:eb:62:91:41:73:00:e7:d0:f8:80:d3:16:dd:44:
93:83:79:b1:72:ed:c3:e1:e6:90:29:21:15:da:45:
eb:bb:18:76:43:c5:80:3e:6d:0a:72:46:03:c4:16:
0a:bb:93:62:40:d1:40:b0:2d:66:a0:ea:0c:41:87:
8d:9f:88:12:e5:aa:dc:10:35:ea:e0:ee:4b:db:b1:
04:6e:bc:2f:9b:53:60:c7:8f:82:55:00:9e:ae:b4:
26:95:cb:53:6c:80:7c:95:cb:7a:47:de:3f:eb:42:
ba:87:87:35:2f:40:68:17:b3:b6:86:26:6f:d2:eb:
fb:68:41:2b:a0:7c:dc:67:3f:d3:94:22:58:b1:7a:
a3:ee:e7:7f:df:35:01:91:7e:bb:3d:a6:f2:7e:2d:
6d:8c:6f:27:8d:65:21:27:8b:1b:c3:98:eb:35:69:
a9:35:5c:a2:6a:70:57:1c:7a:52:73:40:58:b8:30:
de:27:10:2f:44:be:ea:4e:fa:23:9f:c4:e9:de:31:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B5:EB:93:A1:C2:76:3F:98:9F:37:BE:2D:83:E6:80:36:99:82:F2
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:73:b6:f4:2d:b0:cc:4e:cf:a6:97:b1:71:6a:0e:df:17:
21:b1:5e:dc:cd:04:72:9c:86:2f:7c:c1:15:67:ad:1d:53:8a:
ec:d5:85:11:81:58:0a:04:ae:3c:f4:60:29:31:47:0f:58:22:
fa:f8:46:59:ed:05:38:7b:68:ea:09:59:86:f1:e3:77:cd:75:
ec:c4:a3:47:06:8c:c8:0b:4e:c0:43:3f:d6:db:ab:19:c5:e7:
98:be:ee:7b:5f:ea:59:03:ad:87:2c:21:18:34:a6:4d:c4:e8:
d4:fc:5c:ed:b8:f6:f3:c7:cf:82:09:15:66:2b:e9:e2:92:7b:
8d:51:3a:f0:51:81:0b:3a:a5:82:e2:cd:bb:dd:09:a9:93:a4:
56:a9:46:36:15:4c:6b:57:e5:07:6f:aa:36:d9:cd:1d:be:0e:
f5:6c:43:61:e4:ba:ff:68:78:c6:b5:19:0e:e8:3e:dc:0e:38:
6d:e1:cf:75:4b:80:e0:ec:61:ce:4d:23:bc:51:4a:ca:40:89:
8c:61:8d:36:ed:4a:b7:55:04:62:c0:71:bc:12:a9:e1:61:21:
95:ca:64:fb:61:6d:7e:d4:33:51:7e:a6:83:9d:61:98:46:26:
a7:25:7d:31:80:05:c3:7f:6d:3f:18:3b:47:b8:46:e4:da:fa:
3a:cb:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:50 2025 by rpki-client