Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: H7hal3+thlk7mys4GadbNjo3JfwFui+CmsttwDzZTi4=
Subject key identifier: CF:DF:1B:8F:1B:36:FF:47:92:4E:58:F3:B2:61:17:B2:C5:E4:8D:49
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019A4BBC84420C664C47DFAC0C6647B3312E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 171F
Signing time: Mon 03 Nov 2025 22:00:37 +0000
Manifest this update: Mon 03 Nov 2025 22:00:37 +0000
Manifest next update: Tue 04 Nov 2025 22:00:37 +0000
Files and hashes: 1: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: cyUOuajW4xCKtHWpsc1DVwBTY90u+4CyFp1qwKzgI8U=)
2: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
3: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
4: aBxSYhVn_anxC7-03zZfXGAPrRA.roa (hash: 4z8vPSTGN/KrBGvUG7yKZHmMHGsa+QLaisXrVqvvKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:bc:84:42:0c:66:4c:47:df:ac:0c:66:47:b3:31:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Nov 3 22:00:37 2025 GMT
Not After : Nov 4 22:00:37 2025 GMT
Subject: CN=cfdf1b8f1b36ff47924e58f3b26117b2c5e48d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3e:02:4d:87:b7:b9:43:99:8c:c9:81:a1:5c:
6c:17:52:ed:68:18:f2:48:92:93:c9:1e:0d:69:97:
96:c0:b1:62:fc:e0:b8:f4:a3:79:fa:29:78:99:9c:
ba:01:e1:db:b2:8b:70:42:ee:e1:52:c2:16:a5:aa:
96:e2:6d:58:f7:65:a7:ac:aa:98:9c:90:7d:a7:99:
ad:6a:f6:41:68:1e:27:5d:1b:76:d5:20:66:a0:70:
10:d1:cc:28:02:12:f8:0d:70:a7:fe:76:4d:fd:95:
4c:f1:58:9f:4d:7e:27:e8:ab:03:62:6a:39:6d:f0:
4a:5a:ca:61:0a:53:7c:8e:c5:81:ef:ad:5e:d4:44:
92:cb:54:3a:8d:e3:f2:d7:c9:51:03:59:96:ae:9d:
6e:e9:ba:61:1f:4c:bc:7d:f1:c7:2c:08:1d:21:45:
25:0c:f0:55:59:21:e2:03:c7:b1:da:90:c4:ce:d6:
6e:2e:45:29:bd:29:2c:49:a8:dd:ef:b3:a0:7a:2a:
50:09:f5:2e:17:b5:7b:11:56:1d:12:6f:b0:25:8f:
12:25:4e:cc:fc:50:a7:a4:b4:66:ef:c8:dd:10:2a:
e7:f7:b1:fc:4f:19:64:e4:9c:5b:22:10:36:2b:57:
67:ef:17:82:a8:8a:94:e1:2b:6a:5b:03:a6:27:2d:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DF:1B:8F:1B:36:FF:47:92:4E:58:F3:B2:61:17:B2:C5:E4:8D:49
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a5:ea:83:6c:0e:05:db:95:8c:15:d8:75:8e:80:2d:b1:30:
92:ee:8e:a6:57:b8:0d:9b:b8:d7:01:6a:d5:21:fc:d9:01:82:
0c:f1:ca:4f:fa:33:bf:75:03:a0:d1:e1:d6:12:ca:39:47:64:
d4:ca:60:8b:0d:19:b6:f0:0d:37:d6:5b:95:be:e2:ff:01:5c:
a9:7f:bd:75:8f:eb:91:98:4b:4a:89:0d:22:19:fc:5f:99:74:
ef:1b:0a:65:d7:3b:58:b5:ed:f6:ce:dc:49:d4:ee:03:b0:bb:
01:8c:24:18:31:32:0c:d2:a4:b1:34:05:72:59:f8:b4:29:35:
ca:b7:fe:47:b1:1e:b4:35:b0:a5:3b:3f:a2:10:36:8a:48:b0:
4f:25:9a:19:15:5a:a9:53:a9:75:50:7c:40:df:a5:e1:3c:b8:
97:f5:98:5e:db:bb:21:b6:c1:50:c3:25:3c:b3:9c:3b:8b:d7:
59:c5:c8:df:dc:51:25:ab:31:26:f7:e3:01:71:8f:ec:7a:a8:
26:48:02:33:fa:eb:b1:54:e6:1f:e5:9e:9e:16:e4:ce:de:71:
3c:ae:85:1d:e5:f0:6b:ba:e8:ec:3b:60:f4:c7:28:97:7a:be:
23:eb:e0:29:dd:20:aa:e5:9c:39:c7:ab:a2:80:e6:d8:d4:05:
ec:22:b0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:17:05 2025 by rpki-client