Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: paqTtlR056MHI23NQ9WDlnhYN75GhqyUJ20clBSIvUE=
Subject key identifier: 5E:AF:8F:82:17:BF:D8:C1:69:DE:0A:2A:9A:A6:EF:80:DA:00:B9:6F
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 01984A418DEA48794327BCA7042315016C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 1209
Signing time: Sun 27 Jul 2025 05:01:06 +0000
Manifest this update: Sun 27 Jul 2025 05:01:06 +0000
Manifest next update: Mon 28 Jul 2025 05:01:06 +0000
Files and hashes: 1: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: m9fGU6yUfBWmA/mShfflwh+PfzJ1Y1S6g6h+qIJemeo=)
2: ZyzamFxx31MI8DWtNOW9NjiSAdw.roa (hash: k0oTub67+XpNNg/oLxWWVGf2ml63S+4IV7J2xSqjNvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:8d:ea:48:79:43:27:bc:a7:04:23:15:01:6c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Jul 27 05:01:06 2025 GMT
Not After : Jul 28 05:01:06 2025 GMT
Subject: CN=5eaf8f8217bfd8c169de0a2a9aa6ef80da00b96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:b1:2c:ff:4c:2c:c3:84:66:ed:b5:f6:67:
8f:85:2e:0f:b4:d5:f7:ec:3f:14:da:93:77:9d:02:
6f:7d:cf:15:29:67:66:96:2d:38:be:94:7b:7c:51:
ca:20:62:51:33:c6:55:f3:0c:b8:b3:32:eb:f7:5c:
65:87:d5:ed:5c:6f:e8:5f:df:73:1a:a8:60:d1:ba:
7a:62:a1:bc:a2:5a:10:7d:78:cd:d8:0e:f6:0f:32:
ab:bd:07:4c:8f:5e:59:08:9d:d7:ca:6c:9c:e6:31:
ab:ea:3a:82:4a:46:61:d2:19:c6:6b:92:3c:8e:2a:
56:47:bc:ec:e9:2a:22:65:0a:fe:b4:53:e5:fb:5a:
1a:1d:0e:c8:30:3a:58:ad:80:fd:91:fa:7d:34:f9:
2f:d0:be:4e:60:29:c9:b9:04:a5:00:57:ca:6e:4c:
8e:76:18:f5:d9:77:00:56:98:f2:6d:00:d3:58:c1:
8f:f6:68:5b:0a:34:37:d1:2c:26:ca:7f:cf:a1:ef:
9d:a9:1e:6c:a1:e7:06:ad:74:d7:30:fa:ac:38:a8:
a8:f9:f3:4d:6f:4f:89:e9:50:56:f4:b0:a1:af:19:
00:4e:98:a2:28:59:74:35:f0:75:e2:75:4c:25:e9:
2c:5d:cf:b9:7e:66:2c:b4:c8:b0:1e:c4:95:80:90:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:8F:82:17:BF:D8:C1:69:DE:0A:2A:9A:A6:EF:80:DA:00:B9:6F
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a6:09:d5:80:2e:cc:05:18:16:85:8a:01:b3:a4:cc:9c:a1:
1a:39:2d:ca:f9:c6:40:2e:61:ef:96:f3:0d:d7:8c:9b:4b:0a:
76:03:90:9c:6c:ab:10:ee:76:c1:01:54:a1:23:fc:ef:52:eb:
e7:da:53:6e:bb:46:51:34:04:f9:a6:c8:83:46:86:01:37:28:
37:c6:ec:af:55:5f:be:b9:0c:2d:79:b4:06:0a:78:ed:e2:da:
c4:5f:7c:27:80:69:d9:fb:0a:38:b7:41:60:44:e6:53:36:b4:
fd:e2:89:0e:a3:75:d4:68:7a:eb:0b:98:ed:95:49:e0:70:d0:
39:ef:a2:00:2c:5b:18:cb:e2:07:e6:e6:b1:1e:30:9a:29:16:
5b:f5:08:79:60:55:bb:13:9f:d9:29:34:d6:c3:6a:87:84:bc:
1e:30:3b:de:62:14:35:7e:6f:29:9e:4c:85:3f:5d:3f:ef:5c:
c1:8c:fc:67:90:30:8e:13:18:28:7d:20:fd:fc:4f:00:ca:92:
28:5c:db:c4:b0:28:d3:6a:4f:ab:7e:f7:ce:c7:f8:13:d8:39:
a5:40:11:8b:2d:33:9e:c8:bf:fd:3e:52:5f:5a:92:b1:3c:7a:
01:49:6e:78:6f:f4:d9:d4:59:f8:ea:80:f9:d4:9c:1a:84:48:
7d:41:0b:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQY3qSHlDJ7ynBCMVAWw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZWEzMGMwZjI4ZTAyMjY5YzU3NjViZjRhMDQ1Njc3Y2Ey
Nzk0YTUwHhcNMjUwNzI3MDUwMTA2WhcNMjUwNzI4MDUwMTA2WjAzMTEwLwYDVQQD
Eyg1ZWFmOGY4MjE3YmZkOGMxNjlkZTBhMmE5YWE2ZWY4MGRhMDBiOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2CxLP9MLMOEZu219mePhS4PtNX3
7D8U2pN3nQJvfc8VKWdmli04vpR7fFHKIGJRM8ZV8wy4szLr91xlh9XtXG/oX99z
Gqhg0bp6YqG8oloQfXjN2A72DzKrvQdMj15ZCJ3Xymyc5jGr6jqCSkZh0hnGa5I8
jipWR7zs6SoiZQr+tFPl+1oaHQ7IMDpYrYD9kfp9NPkv0L5OYCnJuQSlAFfKbkyO
dhj12XcAVpjybQDTWMGP9mhbCjQ30Swmyn/Poe+dqR5soecGrXTXMPqsOKio+fNN
b0+J6VBW9LChrxkATpiiKFl0NfB14nVMJeksXc+5fmYstMiwHsSVgJDDUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6vj4IXv9jBad4KKpqm74DaALlvMB8GA1UdIwQY
MBaAFEjqMMDyjgImnFdlv0oEVnfKJ5SlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUt
ZjI4YjRkNjQwYTQ5LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUtZjI4YjRkNjQwYTQ5
LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKYJ1YAu
zAUYFoWKAbOkzJyhGjktyvnGQC5h75bzDdeMm0sKdgOQnGyrEO52wQFUoSP871Lr
59pTbrtGUTQE+abIg0aGATcoN8bsr1VfvrkMLXm0Bgp47eLaxF98J4Bp2fsKOLdB
YETmUza0/eKJDqN11Gh66wuY7ZVJ4HDQOe+iACxbGMviB+bmsR4wmikWW/UIeWBV
uxOf2Sk01sNqh4S8HjA73mIUNX5vKZ5MhT9dP+9cwYz8Z5AwjhMYKH0g/fxPAMqS
KFzbxLAo02pPq373zsf4E9g5pUARiy0znsi//T5SX1qSsTx6AUlueG/02dRZ+OqA
+dScGoRIfUELwQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:20 2025 by rpki-client