Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: SU30A0IrCXtXu4JKkspWjb7nOnH/AOrwcwsmvd/s4Bw=
Subject key identifier: 11:DB:68:23:DA:D6:6C:F3:55:59:15:2B:DB:48:74:4D:CA:87:BC:DA
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 0199FDD91B2DB208387E0597CB8D8B5F1695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1474
Signing time: Sun 19 Oct 2025 19:01:27 +0000
Manifest this update: Sun 19 Oct 2025 19:01:27 +0000
Manifest next update: Mon 20 Oct 2025 19:01:27 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: P6O1XMMcppWusSktxrimdwQHIjEV39xPJjtxdIe6RG0=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1b:2d:b2:08:38:7e:05:97:cb:8d:8b:5f:16:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Oct 19 19:01:27 2025 GMT
Not After : Oct 20 19:01:27 2025 GMT
Subject: CN=11db6823dad66cf35559152bdb48744dca87bcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:94:e3:4c:38:63:74:5f:20:4d:45:eb:02:
d6:1b:0d:32:41:10:43:16:ec:01:23:c1:62:ca:dd:
29:86:d9:d4:fc:20:81:ad:7f:b6:01:1b:74:86:2c:
61:d0:3a:0d:c5:33:cb:5c:22:51:69:8b:08:80:1d:
61:c2:f8:55:58:c4:c4:23:a8:8b:7e:55:fe:d1:e4:
33:fd:5e:89:8e:60:6a:de:d3:ca:de:70:3b:78:75:
81:6c:67:f0:b4:72:fc:73:7a:45:8c:50:78:35:1c:
b7:cd:7e:c5:c1:fd:cc:4a:d6:93:dc:01:06:9e:51:
38:59:51:47:6a:fe:46:56:8e:73:c2:a1:a8:bc:7b:
95:f0:ff:10:3a:29:02:dd:79:dd:73:69:f5:b4:7d:
56:3f:f0:51:02:d2:60:08:57:a6:ed:85:65:de:59:
2d:cb:19:1e:af:ab:72:a5:2b:37:29:77:70:c3:f9:
fb:f0:ff:ec:67:36:2d:9d:2a:31:51:10:d0:e2:b4:
fa:d2:ab:ef:17:d3:d8:cf:d8:f9:d6:d9:a3:b0:64:
44:d2:71:75:37:09:53:b7:05:b9:f4:2f:59:b7:b7:
b5:31:b2:0e:93:93:f2:25:35:fd:1b:ab:5e:0c:93:
8d:e6:61:c3:c4:40:95:50:4b:ba:0b:c6:66:2e:c7:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DB:68:23:DA:D6:6C:F3:55:59:15:2B:DB:48:74:4D:CA:87:BC:DA
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:07:23:64:2a:32:8b:db:ea:63:d6:f0:02:f2:ae:f8:b7:6e:
0a:09:d2:31:c2:9a:af:0e:b5:20:24:42:38:18:32:8a:a8:82:
51:2d:8e:05:8f:47:11:38:01:71:e3:43:5a:34:71:a9:ad:12:
1c:bb:ef:b4:51:a3:26:48:78:51:2a:5d:c4:ac:36:3c:44:4a:
ec:13:e8:c8:7c:cb:01:27:2c:85:3c:f0:82:59:1d:1e:d6:c6:
8f:cc:66:b9:04:ec:f0:3e:6c:cb:78:68:8a:ea:ab:ac:5d:ad:
ec:bf:2f:f3:e8:1d:5d:43:8c:e9:04:a2:a0:64:f2:04:c6:74:
3d:19:4e:0a:4e:2a:8b:fb:70:4c:e9:00:37:50:a9:a1:e9:64:
62:1e:96:01:c4:7c:9a:7d:52:5e:7e:ed:bc:8e:9d:ae:ea:e3:
23:38:03:50:cc:cf:a2:b8:5b:7c:dd:b0:c5:ca:1e:84:0c:01:
93:74:a4:d9:cd:11:ee:e9:e7:e6:be:69:8d:8a:3c:99:7d:aa:
c1:d0:6e:aa:28:77:5f:0f:6d:ba:e1:8c:e6:e7:38:c6:67:fb:
13:a3:55:a7:10:aa:28:d7:0a:55:7c:2f:95:d3:19:a5:85:ad:
35:1b:fe:84:3b:b2:2a:cb:58:36:d7:36:c8:b7:8b:4f:ad:de:
b8:32:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:34 2025 by rpki-client