Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: s3Jlapv7OT3FF2/siEjld6boOZFpBDx+cmZKEvwUwlE=
Subject key identifier: 0A:F1:FF:14:D2:9A:FC:B3:4E:41:ED:86:40:E3:AE:F6:64:0E:B3:AE
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01984966950716953CD984434EA9BB124B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1612
Signing time: Sun 27 Jul 2025 01:01:56 +0000
Manifest this update: Sun 27 Jul 2025 01:01:56 +0000
Manifest next update: Mon 28 Jul 2025 01:01:56 +0000
Files and hashes: 1: BrQq7YEFajNSVsBn6S_XP8bHPLY.roa (hash: egGSnJVF4ZpifdFK3Q0Rkj8+zW1UTdDs4D8hficQgOQ=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: SS/F0ItaN2z3Mg4fF1LQrlSyoP/poDCFxDdmUbBnWKU=)
3: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
4: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:95:07:16:95:3c:d9:84:43:4e:a9:bb:12:4b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jul 27 01:01:56 2025 GMT
Not After : Jul 28 01:01:56 2025 GMT
Subject: CN=0af1ff14d29afcb34e41ed8640e3aef6640eb3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:76:80:11:11:4f:27:05:67:7f:6c:b8:6d:b4:
5d:00:d2:ee:7b:c3:40:58:92:34:c5:61:28:a4:01:
4e:09:82:ca:30:dd:c0:66:ac:d1:d4:ae:22:d0:f9:
ee:65:bd:2b:e3:a3:9e:2e:35:19:2e:02:01:44:c4:
1c:14:6a:94:be:21:06:3d:9f:9d:9c:4b:99:03:87:
86:3b:14:07:45:14:cd:f9:1f:be:ae:57:e0:b9:9f:
7a:b6:ae:12:74:cf:c9:02:52:68:16:45:6d:bf:5d:
de:7c:33:b3:33:ef:4d:db:c3:69:3e:8b:75:f1:cd:
34:e0:89:66:d7:0a:02:6d:0b:d1:6d:0d:75:5e:ea:
08:9a:95:0b:27:08:1d:ef:45:d9:3a:64:cd:47:09:
64:e4:ff:15:2e:26:7f:3a:77:92:f3:a8:56:a2:d5:
f3:01:ae:9d:81:b9:b7:6d:f2:00:f2:c0:89:17:bf:
4d:77:83:de:01:44:53:49:36:3f:f2:66:a6:ee:8e:
a3:e1:b0:3d:4f:70:6d:a6:87:e8:84:af:bf:8d:ce:
e5:be:ff:40:6b:43:2a:31:08:d7:8a:73:ea:ca:5d:
0d:3d:1d:84:19:3d:c3:04:e0:0f:4f:1f:80:c1:3b:
61:00:34:2a:79:5e:f9:a4:9a:3c:59:82:7d:04:a1:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:FF:14:D2:9A:FC:B3:4E:41:ED:86:40:E3:AE:F6:64:0E:B3:AE
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:53:6e:b4:e5:f8:6b:95:44:90:43:e3:53:dd:97:42:4a:b2:
45:21:0f:ce:ae:65:dc:4b:41:b2:38:e3:ba:fb:e8:63:e2:5c:
e7:4b:35:4e:5e:72:e9:47:82:3b:30:00:54:bb:7a:50:87:ba:
a8:e5:b5:ac:f9:35:48:bd:12:75:1f:27:70:b4:32:4c:95:33:
88:8c:ac:3d:fd:09:52:0f:c9:4d:e7:fc:7e:ab:c0:b1:75:de:
1e:fa:4a:05:4e:05:1b:0b:51:47:e4:d1:1e:d9:5c:96:12:b3:
08:e6:f0:37:27:20:46:ef:6b:55:c6:eb:88:37:d2:6d:9c:0e:
30:4a:9b:80:a3:bf:17:ef:01:3e:3f:0d:b3:5b:83:b7:cb:8b:
5e:e0:38:91:b6:c3:c2:f2:ae:9d:2f:eb:f8:17:16:d4:13:59:
51:2a:d8:76:9d:d6:83:2d:65:eb:7f:94:08:ff:f5:0f:22:0a:
54:c5:aa:d4:5c:e8:ad:85:ec:22:f9:cb:ba:3f:5f:b3:64:92:
03:72:bd:74:02:59:95:98:56:68:24:0d:57:65:5b:33:99:3f:
92:20:d3:21:b3:88:b5:46:33:dc:1c:1a:ea:df:e5:ec:8f:6c:
0c:dd:94:97:61:20:7a:20:95:4a:21:6c:c3:3d:e0:73:29:79:
d9:40:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:12 2025 by rpki-client