Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: XSOc3NqlAgDm7NDJCf2zU47dbaDLz/8o8tTVzuOxXdo=
Subject key identifier: 4D:89:3C:4A:19:15:BB:FE:DA:23:3E:BE:7E:FE:09:46:C6:FF:3F:CE
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 0198D6982238E77286A058BA43FED8F7899D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 1657
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: ScOI69m6mIJpTxMNNNWbMMQeHCX44za1C0bue13KDMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:22:38:e7:72:86:a0:58:ba:43:fe:d8:f7:89:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=4d893c4a1915bbfeda233ebe7efe0946c6ff3fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:b4:ff:56:57:87:6a:6c:75:fc:e2:43:ed:
85:28:9c:9e:6a:65:86:42:8f:b2:4e:e9:41:80:c5:
92:66:33:2e:20:45:db:0e:a0:aa:ee:8f:c3:52:4b:
03:9c:70:dc:26:f4:fa:0b:81:12:cc:c1:ca:e5:1a:
2a:ab:c6:45:8e:8c:0e:48:24:16:36:f4:f0:78:b3:
33:1f:45:2e:78:f0:be:b0:9e:3d:b2:66:9b:e8:5b:
9c:9e:63:dc:43:9e:c6:f5:af:78:bc:09:f8:ef:50:
ae:a5:cc:f8:76:3c:36:5a:56:0b:f7:2a:1e:4f:ed:
e6:d3:05:3c:b0:7c:be:9e:b3:e4:8b:21:5f:10:4d:
ca:f8:57:55:57:2c:9f:2f:90:95:f1:1d:46:7d:cd:
bf:5e:0d:ce:55:4e:aa:1a:91:7b:e8:0d:40:25:54:
29:af:e0:03:4c:d9:10:44:8a:74:56:2b:ed:92:ec:
fb:35:de:3b:f8:f3:1c:9b:0e:91:95:a3:4e:bd:6a:
de:f5:54:cf:d5:00:d3:59:b8:0e:e0:18:db:ed:c6:
48:7f:b1:90:df:fd:c9:ba:cb:37:00:0c:e5:a4:ad:
20:33:c9:bf:15:f4:c0:d2:01:38:70:4e:9c:5e:b5:
ce:89:89:9f:34:b9:38:69:64:90:a3:f6:f2:47:66:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:3C:4A:19:15:BB:FE:DA:23:3E:BE:7E:FE:09:46:C6:FF:3F:CE
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a6:8c:55:53:f0:55:d4:17:26:ed:fb:b6:c9:d4:78:6e:3c:
3c:a9:33:bc:ac:1d:7f:9f:21:ea:3a:3b:4a:c3:8c:c1:7a:77:
c6:15:60:5e:6b:a8:b3:ce:0a:56:5f:a4:6a:cb:5e:d2:83:f2:
c8:98:30:3f:64:cd:91:5a:ad:8d:06:81:84:26:8a:17:71:a0:
43:b5:95:2b:64:ac:c1:c2:f8:81:9a:6f:a0:fa:a2:3c:ec:21:
b2:42:4d:10:91:44:1e:76:a2:c8:ef:7f:94:6e:f2:d4:a5:6d:
9c:c5:e6:07:d8:c0:b9:c0:dd:d9:48:73:43:8e:bb:86:1d:53:
18:6c:89:5f:ce:62:66:2e:71:03:8e:58:c4:ce:59:24:a9:7a:
61:e3:8a:52:55:fc:4e:41:80:da:5c:00:de:ef:9e:ef:cf:f9:
ec:a3:27:ca:84:11:05:ce:60:c4:9a:e8:b0:25:1d:e1:04:f5:
88:ce:f0:c3:3a:b0:b6:61:5e:c3:26:3c:8b:3f:d8:9e:67:37:
d4:5a:ae:04:c8:e9:6d:c7:4d:16:34:15:26:8f:52:5b:f7:f5:
24:c6:a0:05:64:22:c5:ca:f9:0f:8b:9e:25:75:3b:b1:c9:af:
c9:84:c3:68:ce:17:c6:f3:a4:17:2b:ef:b8:bf:1a:af:ec:d3:
46:ce:1c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmCI453KGoFi6Q/7Y94mdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGU2ODcwMmVmNWQ0OGM0ZjJiMDcyZDljYjQ3M2U2MmI4
N2IzZTQwHhcNMjUwODIzMTEwMjMxWhcNMjUwODI0MTEwMjMxWjAzMTEwLwYDVQQD
Eyg0ZDg5M2M0YTE5MTViYmZlZGEyMzNlYmU3ZWZlMDk0NmM2ZmYzZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua+0/1ZXh2psdfziQ+2FKJyeamWG
Qo+yTulBgMWSZjMuIEXbDqCq7o/DUksDnHDcJvT6C4ESzMHK5Roqq8ZFjowOSCQW
NvTweLMzH0UuePC+sJ49smab6FucnmPcQ57G9a94vAn471Cupcz4djw2WlYL9yoe
T+3m0wU8sHy+nrPkiyFfEE3K+FdVVyyfL5CV8R1Gfc2/Xg3OVU6qGpF76A1AJVQp
r+ADTNkQRIp0Vivtkuz7Nd47+PMcmw6RlaNOvWre9VTP1QDTWbgO4Bjb7cZIf7GQ
3/3Juss3AAzlpK0gM8m/FfTA0gE4cE6cXrXOiYmfNLk4aWSQo/byR2Z9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2JPEoZFbv+2iM+vn7+CUbG/z/OMB8GA1UdIwQY
MBaAFEqOaHAu9dSMTysHLZy0c+Yrh7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWIt
MWM0YmI1OGFiNzIwLzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWItMWM0YmI1OGFiNzIw
LzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqaMVVPw
VdQXJu37tsnUeG48PKkzvKwdf58h6jo7SsOMwXp3xhVgXmuos84KVl+kaste0oPy
yJgwP2TNkVqtjQaBhCaKF3GgQ7WVK2SswcL4gZpvoPqiPOwhskJNEJFEHnaiyO9/
lG7y1KVtnMXmB9jAucDd2UhzQ467hh1TGGyJX85iZi5xA45YxM5ZJKl6YeOKUlX8
TkGA2lwA3u+e78/57KMnyoQRBc5gxJrosCUd4QT1iM7wwzqwtmFewyY8iz/Ynmc3
1FquBMjpbcdNFjQVJo9SW/f1JMagBWQixcr5D4ueJXU7scmvyYTDaM4XxvOkFyvv
uL8ar+zTRs4cbQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:43 2025 by rpki-client