Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: mDOFTgRM/xG2CIHpnvfbRhfB8UsVcUr/N4URxtM3hdI=
Subject key identifier: 62:E3:79:8D:F0:9D:38:31:65:E7:08:60:86:D3:DF:14:9A:A3:07:0F
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 0199FC2157F3BF624CAE9C34993FF218F0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: t+TRRdprds2yRpRAYDfgqR72aPlP94Bz3OTAAO3i8c0=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:57:f3:bf:62:4c:ae:9c:34:99:3f:f2:18:f0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=62e3798df09d383165e7086086d3df149aa3070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:92:7a:f1:04:41:06:aa:eb:39:7f:77:f7:
6a:8c:34:0c:4e:03:ac:96:8d:27:8d:46:9d:e6:b7:
47:38:07:dd:5a:f6:b5:e3:0b:e2:57:b4:56:b6:25:
de:84:6a:93:d2:53:50:f9:90:ea:0e:69:bc:b5:11:
60:d5:1d:fe:ee:e9:ab:3d:34:ca:9b:8c:31:f6:ce:
1a:81:16:39:ec:2c:be:a8:b3:2b:51:9e:37:89:3e:
f5:f0:e0:2d:6d:f8:d5:2b:f8:96:7b:37:05:3f:39:
52:a0:29:80:f8:2c:e2:3f:59:80:98:ee:e6:37:5a:
b4:c4:5d:18:9e:b6:51:c9:8e:0b:58:e4:3a:9a:a9:
0a:49:13:9d:49:f4:50:fb:af:6b:66:f3:5a:ac:97:
0c:46:14:c7:f9:9b:4f:5e:0c:b2:e9:6d:18:db:33:
3c:af:a4:7d:90:e0:f2:b9:3b:99:a6:ff:f9:68:6e:
85:ad:21:c4:11:90:29:87:67:a9:87:a8:65:cc:ca:
0f:5d:e6:80:b9:37:d7:d6:e8:6c:fe:18:cb:fe:d6:
7b:90:7b:e9:9d:0f:83:1f:a3:d5:e4:8d:09:8c:8c:
ee:67:56:67:a7:e2:3b:90:62:35:b6:65:c8:4c:4f:
0f:12:cc:02:30:8f:13:9b:a8:27:d0:81:0f:00:53:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E3:79:8D:F0:9D:38:31:65:E7:08:60:86:D3:DF:14:9A:A3:07:0F
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d3:0e:f9:e8:89:e4:71:e6:11:2d:f7:b4:87:b0:0e:fe:c6:
bd:cd:3a:eb:71:76:73:aa:dc:e7:40:37:73:7d:c2:1f:8a:91:
60:f5:44:ed:b7:1e:89:da:93:a1:1c:71:d9:87:65:6d:f0:a1:
46:ea:87:85:b2:f8:89:88:f0:1f:45:f2:26:bd:a8:f8:b2:b5:
69:53:a3:e3:c4:6d:bb:84:2b:40:2a:75:60:59:12:66:c8:5c:
85:4d:f8:55:2e:3a:65:a2:03:a9:5a:69:c8:64:87:71:0b:00:
fb:7d:86:d4:e3:dc:14:1b:d5:16:97:46:af:1d:5f:82:aa:5e:
90:d5:94:a6:26:5f:ee:c8:b9:4e:08:ad:db:50:da:7d:a2:e6:
28:ca:72:5d:59:7a:d9:5a:a8:e0:15:5b:09:84:4c:28:33:38:
e6:91:84:60:97:0a:78:2f:85:2e:e2:94:47:99:04:62:ca:23:
d9:29:dc:8e:88:7d:3a:4e:e7:9a:82:25:0b:54:07:58:e2:c1:
ff:96:48:20:39:8e:80:a2:9f:dc:33:40:15:e5:ca:34:ed:0c:
db:2f:a3:1b:66:94:3a:2a:ab:cf:a8:5f:33:dd:b3:92:ab:d4:
03:7c:6c:c0:48:77:92:91:43:08:43:bf:b0:fb:fa:b2:eb:59:
01:ed:43:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:36 2025 by rpki-client