Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: 8kbj0Z9igXhRdx5Ohpxe3NTc7nqBzZr0VIfkkq+JUGc=
Subject key identifier: F7:95:3C:7D:68:39:3E:AB:6B:99:BD:48:B3:28:FA:E1:61:57:51:37
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 0198D65FDB3F388BE7233E290AFC123CB7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 13DB
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: Rzrmb42ygYWOX9oN6QdgYPhqwrhDThyocJq89X8rJD0=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:db:3f:38:8b:e7:23:3e:29:0a:fc:12:3c:b7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=f7953c7d68393eab6b99bd48b328fae161575137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:76:67:4c:75:9f:5d:c0:92:61:d8:eb:63:
07:04:67:54:c8:78:a5:5a:42:ec:9d:a2:82:93:32:
74:3a:33:82:60:d6:a6:1c:6c:4c:06:94:4a:97:b3:
c7:33:84:76:13:7f:8a:e1:70:ed:69:ae:e3:91:f3:
b6:f8:b8:b5:14:e2:a6:21:1c:79:99:4f:50:0e:4f:
72:47:e5:92:20:45:21:3a:ec:c2:b3:db:3b:ad:f5:
88:84:4b:78:e0:df:78:b3:6e:fd:10:e5:0f:04:db:
08:2e:6b:36:a4:50:f2:13:36:8a:9b:04:70:48:a9:
6f:af:57:be:9c:5b:87:7a:14:0f:7c:70:bd:a0:b8:
ed:7c:97:08:3b:d4:53:e4:3c:a2:5c:d0:8c:82:94:
15:93:d4:00:38:f3:ea:02:aa:23:cd:c3:72:c3:a7:
9c:cd:05:73:41:77:64:9d:f6:17:79:46:51:a0:a5:
b7:80:e2:94:72:ed:b1:59:09:16:90:b8:30:3f:fc:
94:56:17:80:eb:92:75:5b:3c:39:8e:3f:09:bd:0d:
70:0b:34:59:e6:d9:06:12:99:fc:5d:db:a7:76:b2:
37:28:f2:7a:26:b8:94:54:00:8a:47:31:40:f1:f9:
e8:04:ea:d6:b7:a9:9c:9a:61:88:fb:5e:04:8c:3f:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:95:3C:7D:68:39:3E:AB:6B:99:BD:48:B3:28:FA:E1:61:57:51:37
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:16:44:da:b4:7d:d8:bc:93:72:b0:e7:19:36:0e:1d:b9:71:
ba:fd:f5:4c:67:cc:ce:cc:b0:70:e2:b5:b3:d8:c4:6d:63:b0:
eb:63:62:ef:49:f8:be:70:a2:0b:2d:da:4c:1c:95:2b:c6:81:
e5:b0:8c:39:41:7b:65:2e:f6:10:22:43:10:e0:cd:79:8d:a9:
cc:48:6a:09:8c:c4:e9:c1:d4:72:36:ef:51:d8:88:8b:e5:53:
f7:be:2b:64:18:29:73:8e:66:21:01:7d:c1:67:e4:46:a3:ac:
1a:d6:66:b4:07:22:e3:4a:b6:c8:02:6c:41:38:e8:83:d0:a8:
3e:13:99:b1:3c:91:c6:48:c6:57:e1:62:50:1e:f7:68:46:84:
c1:db:af:01:17:72:62:fa:d1:f5:54:5a:a6:03:3c:ef:e3:6e:
40:2c:f2:40:fb:00:14:c3:b0:82:fe:6c:7b:41:c6:51:6a:6e:
dc:b0:8c:69:fe:b2:21:91:e4:1a:40:6f:85:fd:2d:a3:2f:eb:
34:aa:1e:33:2d:cf:50:0d:9d:a6:3b:3d:f5:90:77:cd:eb:13:
42:10:6a:22:c5:7b:0e:f1:4a:37:35:4d:50:d6:ea:0b:33:66:
97:ba:ad:8b:49:78:68:13:96:ca:91:f6:80:25:cd:de:e7:04:
8b:fc:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:19 2025 by rpki-client