Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: qL4fR7TYD4/ybpeUaKjKkPqQ97FXYVJQdAGAlGzxK+c=
Subject key identifier: 86:0A:60:38:DC:FF:6E:6D:88:6C:5F:EF:63:51:0F:FE:22:75:FD:52
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 019853E8EF5E543AB32734FFB18A3BC841D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 02:00:31 +0000
Manifest this update: Tue 29 Jul 2025 02:00:31 +0000
Manifest next update: Wed 30 Jul 2025 02:00:31 +0000
Files and hashes: 1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=)
2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: RSDWM2mv1i5jl9Nw3Q4PfGbf4iW5UPiCe6L9IAcsABg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:ef:5e:54:3a:b3:27:34:ff:b1:8a:3b:c8:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Jul 29 02:00:31 2025 GMT
Not After : Jul 30 02:00:31 2025 GMT
Subject: CN=860a6038dcff6e6d886c5fef63510ffe2275fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:5e:55:1b:f8:b7:bb:9c:5e:93:67:90:51:
79:b0:20:0a:07:17:81:09:ed:3f:dc:bc:33:5e:41:
44:1e:da:b0:8c:88:bd:b8:0f:d6:4e:9c:80:12:81:
53:d0:6d:72:eb:c9:1f:3e:ff:d5:b1:39:24:85:19:
27:16:44:3e:13:7b:b4:be:58:ec:58:00:0b:73:9a:
e1:21:41:cc:4e:f3:9f:c0:ef:d4:af:9d:7d:a2:94:
c7:07:06:1b:6e:9c:c4:62:37:51:9e:aa:fb:98:25:
87:49:6a:59:3f:04:a2:0b:9f:dc:f2:93:c3:49:35:
4e:e2:ea:0c:db:ab:65:f1:8f:f4:d5:76:c1:7b:48:
1d:e6:65:fb:75:de:1c:9c:df:14:a0:bf:20:8f:5e:
65:d3:73:56:54:d4:8c:4b:07:44:4a:31:2f:73:26:
ec:09:b5:ba:ae:9a:5c:a9:0e:e6:e6:76:24:4b:e5:
65:fd:e4:83:21:ea:aa:2c:a9:84:25:b7:c5:6c:45:
75:57:46:2b:9e:b8:6b:77:9c:e1:56:fa:e0:5d:d3:
fe:c2:3f:98:aa:a8:44:7d:ed:69:dd:ee:46:21:71:
c1:d1:a3:dd:b4:13:a8:92:9d:8e:f6:ee:e9:3c:c9:
45:07:66:4b:35:e3:7d:04:a9:26:45:f7:e1:66:79:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0A:60:38:DC:FF:6E:6D:88:6C:5F:EF:63:51:0F:FE:22:75:FD:52
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:38:17:f7:ab:fd:1e:25:a6:69:6d:81:20:65:15:ae:00:ac:
7f:b0:d9:4f:0d:8f:84:07:ce:b0:af:7c:63:41:c5:a9:14:a2:
aa:ca:ae:52:09:b9:a5:dd:0b:78:de:84:98:29:c0:83:50:73:
58:1d:68:63:40:18:73:d0:2a:27:f9:8b:1d:30:e7:67:c2:0b:
b7:9d:5c:ea:52:2f:45:d0:ea:1e:9e:fe:39:87:15:23:f7:f7:
39:23:65:a0:78:7f:89:05:1d:0b:5a:d2:11:8e:89:f8:31:10:
29:05:ec:de:a9:61:3b:b9:63:2a:89:45:1b:9b:cf:9b:ba:15:
9d:d4:b9:22:45:fa:da:00:a7:51:30:0b:21:2e:62:67:37:b5:
1d:bd:50:47:a5:83:b6:6a:08:ab:12:b4:40:d2:a8:34:03:9e:
96:5e:0a:fd:c9:6c:c2:db:58:d1:32:00:7d:99:c0:ec:56:db:
73:4a:95:82:99:12:5d:a9:ab:1e:5c:b6:52:a1:78:71:f8:eb:
6a:11:ff:44:36:f7:56:d1:61:4f:9a:f9:c6:5c:47:af:09:c1:
4f:cb:16:f3:8e:54:9f:f1:0a:7c:0f:8a:fe:d2:bf:3a:6e:ae:
4c:e4:e9:8e:5b:60:39:9a:73:c9:00:b1:cc:65:4c:0a:29:de:
08:a0:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:20:04 2025 by rpki-client