Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: kpNb8LVww8UjezWpzb2ZSuR96kYVT6tq4JIcnPHkVF4=
Subject key identifier: 89:6B:ED:CB:84:D3:AA:CB:B4:70:F1:DA:A3:B5:30:2B:00:3F:55:30
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 0198D69851AB283B29861B67BDE265A8F666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: 7mZo7zVwSeIR8wVTYKUY1lrqfBEKCcMaF0Eul8Lpw0M=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:51:ab:28:3b:29:86:1b:67:bd:e2:65:a8:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=896bedcb84d3aacbb470f1daa3b5302b003f5530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:95:44:f1:11:e2:ea:a8:38:e2:ad:3e:07:
33:02:eb:b8:83:3d:d8:d5:74:ed:71:b1:19:a9:3e:
b8:60:62:0a:b9:05:13:17:cb:fa:4e:ef:25:38:94:
ad:4b:f3:9a:f7:df:19:32:2a:90:24:b6:62:ee:54:
e5:b6:ed:0b:96:55:26:f5:55:cc:04:98:52:ba:5d:
67:b1:8f:a8:be:be:71:ad:67:5c:84:fa:2d:b3:6b:
03:1b:6b:ff:25:63:ae:7b:02:27:01:93:05:06:01:
9e:d1:5e:5f:91:8a:2d:77:43:0c:6c:61:cb:33:03:
0e:d8:80:85:7a:77:ce:19:0b:cd:60:5a:55:e5:b6:
83:e7:37:ee:4d:0e:95:eb:50:65:24:07:1f:22:de:
d8:c7:5b:df:c1:10:dd:3b:20:84:22:0e:e9:40:12:
59:77:02:53:74:49:f2:d4:90:a6:d3:f9:81:e9:6b:
6b:b1:31:b2:51:ec:72:fe:fa:f0:fd:bb:7b:0a:10:
13:89:8a:d7:0a:91:49:e3:f3:ad:96:91:35:11:58:
2c:63:5b:49:37:2a:3d:8f:a8:aa:56:e4:55:e1:3c:
b1:53:4d:e2:c9:71:5a:99:54:3b:af:90:fe:78:b2:
14:95:d9:ba:1e:43:ec:f5:26:1c:d0:94:2c:f5:af:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:ED:CB:84:D3:AA:CB:B4:70:F1:DA:A3:B5:30:2B:00:3F:55:30
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:28:58:61:06:5a:b5:bd:43:bc:6e:8c:9a:53:5a:d3:13:d2:
a0:78:6a:45:3c:92:2f:fe:cd:6f:70:ba:29:c4:b3:9c:9f:16:
e7:8d:59:e5:d9:ca:ef:3d:de:c7:be:2b:8e:95:c6:1a:af:b2:
7a:5c:70:44:84:6a:6d:08:b6:26:b5:2a:9b:ac:b9:c5:ab:f5:
d8:cd:64:80:cd:09:1a:9d:96:31:62:87:39:72:d3:cf:3e:4a:
ac:14:9d:c0:b0:86:0c:ba:87:25:5a:27:f9:a5:d2:3f:02:f9:
a2:10:16:58:22:70:7e:b4:65:57:aa:48:f2:3b:45:05:f8:c6:
30:af:e5:ad:aa:dd:b0:9e:66:c3:6c:c3:49:86:97:fc:16:11:
61:ef:2f:67:3c:8f:1f:4a:b3:4c:91:ac:dc:2f:1a:40:bd:2f:
76:59:f5:69:ee:b2:ab:9e:4b:14:bd:42:c0:b4:57:35:f5:9f:
21:9a:ac:79:9a:05:65:68:a3:76:14:2b:21:44:50:42:80:0b:
a8:a6:d1:a4:bc:96:4c:21:20:f5:56:fd:7d:cd:3b:61:6d:50:
f9:8f:fc:ac:7e:84:32:9a:37:38:89:9f:0a:92:b7:70:07:03:
6d:c1:ae:5d:21:67:79:48:26:29:91:47:e5:a9:4b:3d:0d:a3:
c7:63:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:57 2025 by rpki-client