Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: 6+BOCW+Gaqt/ggm7NSZpDNIoPg3ZUXk7/JII80HFWbM=
Subject key identifier: 43:F9:2D:9F:F8:2E:DE:A3:F1:9A:F5:A7:50:5C:D0:6B:CA:C1:E5:FC
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 0197B70E7A0EB9EE0FF269B3751662B9E51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (hash: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=)
2: CXC2XsvDIqaanTmqd2a1qzMnjWs.roa (hash: QAIN6LBn+W+vlGLr5cVirBbL9u+a95dTjOFvgbUMGX4=)
3: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: JyIvLN/phLZSY86l7JG6g90MVNEx0RFRnU6CLocyjuA=)
4: hWRqGYVmCWMq0Y1sle0EKmWSB94.roa (hash: obdTuMexMzDiPJAN90w8Hcb2NiK0kbzvsWZeLWPpsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7a:0e:b9:ee:0f:f2:69:b3:75:16:62:b9:e5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=43f92d9ff82edea3f19af5a7505cd06bcac1e5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:6f:96:55:e5:7b:05:4e:f1:45:d1:a6:3a:
87:bc:47:78:cd:82:25:af:e0:db:f4:36:2f:f0:d7:
96:da:58:21:88:97:85:d1:71:29:d7:49:4a:49:95:
85:ea:82:78:9b:64:5a:45:93:79:cf:60:d2:95:52:
5c:e8:3b:27:07:a4:9d:44:eb:49:b1:fd:ec:1e:aa:
9d:32:c4:40:de:fc:ef:7a:e7:5e:7c:21:cb:6c:19:
ef:99:79:2b:c2:bb:f7:2c:f8:30:ee:f5:a9:36:ea:
26:dd:f9:20:9b:0f:b8:7a:60:9d:36:67:27:07:fa:
74:0a:c4:29:d9:cb:48:05:a1:3a:f4:34:ee:c5:a9:
39:1c:b9:5f:7f:9e:4c:d3:83:b0:8d:3b:8e:5a:f1:
d2:6e:fb:e6:cb:55:7c:3f:29:51:f7:f7:7b:9b:bf:
9f:c3:b1:ae:89:a0:92:dd:4a:20:4c:0b:18:85:2e:
37:f5:0e:d3:6e:da:83:3f:9e:00:5e:60:5f:1f:26:
7c:d2:75:22:8c:39:13:33:17:de:cf:e2:cc:ac:8b:
39:51:a9:98:04:fe:36:89:4a:38:00:ff:8a:b9:0e:
40:39:ea:26:f9:f6:62:9c:54:57:2d:f1:c0:4c:5e:
ea:80:f1:04:bd:23:c4:93:99:6f:92:eb:e9:4a:48:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:2D:9F:F8:2E:DE:A3:F1:9A:F5:A7:50:5C:D0:6B:CA:C1:E5:FC
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:bd:cb:d1:9a:c0:15:97:25:27:07:06:e4:25:6b:1f:4c:
ce:2e:6b:2d:22:b4:6a:df:22:a9:38:e9:1d:a7:2b:9a:87:50:
65:91:73:a1:65:4f:4e:ab:c3:65:69:0d:76:db:d6:e0:b5:1b:
94:bb:26:e5:e2:f8:b6:53:c7:a6:04:0e:76:8d:d4:ee:50:76:
60:7b:c7:64:ec:34:8e:64:8c:e2:1a:ce:d1:d1:9c:30:04:d4:
94:3b:cc:37:e4:bc:fc:9d:d9:d9:85:09:9d:10:9e:de:92:f3:
41:8f:ac:ca:c9:fa:7e:20:fe:0e:6f:c6:92:8a:a8:23:c5:23:
f8:47:8b:95:44:4a:e8:fc:fa:99:93:27:00:6f:e0:8a:b2:9e:
15:22:28:fb:74:25:87:d8:86:19:b2:77:02:b1:77:59:93:8a:
d1:ad:d2:8b:94:05:ca:5b:4c:11:4c:4b:7a:d9:d9:f0:59:ab:
12:06:5b:87:48:f4:50:88:b0:75:ea:4d:04:eb:d4:ff:08:22:
bc:5d:e2:9c:43:52:7f:36:9f:0a:d5:42:d6:e1:57:d5:a8:11:
e1:06:51:6e:66:d1:2e:0a:87:b7:a3:07:8e:de:52:a7:56:1d:
91:bf:49:cb:d9:8f:85:ee:0a:85:25:dc:2c:67:51:5c:80:40:
c4:71:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:54 2025 by rpki-client