Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: RyN6Zdt9Nl+deK0+iwbobOWFTu6kxYKdXynMw11wRLM=
Subject key identifier: 05:A6:C2:5C:80:28:4E:C0:CA:0A:DE:1C:79:DF:9B:75:FB:27:82:38
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 0199FC21BDAAD0C3501C1A72328A61DECC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: Upn0+DRaSYDGW7FF8shAc7f9dT5hOBdkeKKLALNVe+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bd:aa:d0:c3:50:1c:1a:72:32:8a:61:de:cc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=05a6c25c80284ec0ca0ade1c79df9b75fb278238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:46:1b:aa:92:20:42:22:9c:0a:2b:95:f0:
99:3a:5c:4a:87:b9:4b:1f:94:90:70:79:e0:05:0c:
d2:f5:b8:3b:7f:9f:4d:ac:2a:57:8a:4d:01:59:5b:
a6:cc:aa:7e:c4:75:04:2a:ad:31:f2:8e:05:83:d2:
f1:0a:67:0b:cf:a8:cc:f2:d6:39:c2:65:45:3f:3b:
8e:d6:74:65:dc:9a:44:aa:8c:ed:b2:65:08:7c:a1:
c0:1d:df:e4:58:70:10:af:61:50:b1:f3:c3:3f:65:
3a:9c:ed:be:75:fa:bb:74:de:fa:f0:15:36:6d:be:
a9:7e:d6:f1:5e:f7:41:b1:e9:29:15:74:2a:6c:14:
a7:c5:67:4a:e0:e2:72:7c:29:a9:57:6c:c5:dd:08:
4e:e4:97:7c:7b:f1:61:37:5e:e4:0b:53:72:a4:fc:
02:11:98:64:80:99:88:42:9b:f4:55:c6:47:75:0b:
2f:68:df:0e:53:52:dc:b6:5c:4d:a2:7a:5c:41:cf:
8f:be:9b:11:4a:07:b2:a3:ef:7e:81:a6:6a:da:3e:
cf:ac:f5:e6:11:d8:38:f3:ea:f2:ca:67:a0:6c:38:
f7:08:37:e0:62:af:7c:43:97:87:c4:5a:1a:53:5d:
ab:c0:9d:87:35:5c:31:cd:49:8f:f5:32:7a:4a:8c:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:C2:5C:80:28:4E:C0:CA:0A:DE:1C:79:DF:9B:75:FB:27:82:38
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:01:d7:7a:66:8f:6d:00:7d:45:e8:cd:58:3c:50:b6:98:2c:
c2:1f:87:50:9f:47:bf:9a:e0:39:c4:bd:e6:0e:01:bc:65:81:
f9:36:89:5f:a8:d1:71:62:c2:3a:db:eb:e3:4a:6f:2c:12:c5:
92:8f:5b:79:4c:a8:08:4d:b1:d7:b5:21:43:3f:98:8a:65:f6:
50:10:b7:ad:9d:b6:d2:de:20:cd:8e:1a:9c:93:74:0b:88:b4:
1c:cb:0a:f1:10:54:25:d6:c8:b0:e2:d7:8e:6b:d8:4d:ea:d0:
97:49:bb:f1:30:19:62:8e:7b:99:52:50:c2:c1:6e:f5:07:d2:
9a:81:5d:8f:62:c2:a9:80:46:18:9b:1e:e4:65:0d:65:c3:5c:
01:dd:72:b8:a4:a6:63:5c:ea:a3:11:4a:7e:81:79:89:e6:e8:
2f:b6:57:17:e2:84:b9:75:43:4d:0e:5c:91:31:7a:d6:a9:2a:
ac:77:7b:ff:5a:69:aa:ca:e5:b1:9a:bb:a9:7d:73:d7:5d:4e:
2c:b0:0b:82:dc:1e:05:f9:f2:ba:c9:8c:27:1f:10:3e:60:7a:
87:a8:04:b0:38:b4:fb:39:be:02:e9:89:d4:b3:56:60:ce:85:
6f:18:4e:40:65:69:e9:1a:17:b5:92:29:28:12:4e:f7:89:aa:
6a:1b:7f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ib2q0MNQHBpyMoph3sw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGU2ODcwMmVmNWQ0OGM0ZjJiMDcyZDljYjQ3M2U2MmI4
N2IzZTQwHhcNMjUxMDE5MTEwMTMzWhcNMjUxMDIwMTEwMTMzWjAzMTEwLwYDVQQD
EygwNWE2YzI1YzgwMjg0ZWMwY2EwYWRlMWM3OWRmOWI3NWZiMjc4MjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqRGG6qSIEIinAorlfCZOlxKh7lL
H5SQcHngBQzS9bg7f59NrCpXik0BWVumzKp+xHUEKq0x8o4Fg9LxCmcLz6jM8tY5
wmVFPzuO1nRl3JpEqoztsmUIfKHAHd/kWHAQr2FQsfPDP2U6nO2+dfq7dN768BU2
bb6pftbxXvdBsekpFXQqbBSnxWdK4OJyfCmpV2zF3QhO5Jd8e/FhN17kC1NypPwC
EZhkgJmIQpv0VcZHdQsvaN8OU1LctlxNonpcQc+PvpsRSgeyo+9+gaZq2j7PrPXm
Edg48+ryymegbDj3CDfgYq98Q5eHxFoaU12rwJ2HNVwxzUmP9TJ6Sow8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWmwlyAKE7AygreHHnfm3X7J4I4MB8GA1UdIwQY
MBaAFEqOaHAu9dSMTysHLZy0c+Yrh7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWIt
MWM0YmI1OGFiNzIwLzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWItMWM0YmI1OGFiNzIw
LzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQHXemaP
bQB9RejNWDxQtpgswh+HUJ9Hv5rgOcS95g4BvGWB+TaJX6jRcWLCOtvr40pvLBLF
ko9beUyoCE2x17UhQz+YimX2UBC3rZ220t4gzY4anJN0C4i0HMsK8RBUJdbIsOLX
jmvYTerQl0m78TAZYo57mVJQwsFu9QfSmoFdj2LCqYBGGJse5GUNZcNcAd1yuKSm
Y1zqoxFKfoF5ieboL7ZXF+KEuXVDTQ5ckTF61qkqrHd7/1ppqsrlsZq7qX1z111O
LLALgtweBfnyusmMJx8QPmB6h6gEsDi0+zm+AumJ1LNWYM6FbxhOQGVp6RoXtZIp
KBJO94mqaht/rQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:07 2025 by rpki-client