Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: fzIcxcgtDHtvIhw5AC3/ONAmihbEyt/5ap/kQ5PcTas=
Subject key identifier: AB:7A:D0:0E:91:4D:96:A5:67:51:7F:EE:55:85:E2:66:07:E3:EC:70
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 0197488C77236D2B80A1F5137BBBD34245E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 158D
Signing time: Sat 07 Jun 2025 04:00:54 +0000
Manifest this update: Sat 07 Jun 2025 04:00:54 +0000
Manifest next update: Sun 08 Jun 2025 04:00:54 +0000
Files and hashes: 1: BrQq7YEFajNSVsBn6S_XP8bHPLY.roa (hash: egGSnJVF4ZpifdFK3Q0Rkj8+zW1UTdDs4D8hficQgOQ=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: qBY1AMc4M3V5IxhrB5bRySqSkKv87SfhtE1bk5slx0I=)
3: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
4: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:77:23:6d:2b:80:a1:f5:13:7b:bb:d3:42:45:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jun 7 04:00:54 2025 GMT
Not After : Jun 8 04:00:54 2025 GMT
Subject: CN=ab7ad00e914d96a567517fee5585e26607e3ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:84:68:6d:14:8b:4c:b5:a8:f8:c1:c3:02:
ab:ff:cb:fd:17:b6:22:dc:e0:8f:e6:e6:be:5e:3e:
66:d1:9c:71:23:e0:af:04:7a:66:85:1a:47:e5:06:
63:35:55:15:e2:3a:25:59:42:25:42:8f:1c:46:a9:
c0:d4:c6:92:dc:64:64:37:c7:65:63:95:e2:d6:f6:
74:f2:77:f5:c3:b6:ea:4e:66:58:c0:b7:c5:5a:1d:
24:7f:d0:fd:db:9b:e1:00:59:7a:79:d2:64:16:68:
c5:cf:e1:30:e2:14:a2:9c:9e:fa:0d:9a:0d:a4:96:
89:cd:49:32:cb:74:99:2a:4c:47:45:37:83:93:f9:
1c:5e:5b:62:95:92:88:8d:44:75:25:3c:7a:2d:63:
b7:71:41:3c:bf:b4:2c:e2:8d:6c:36:f0:e6:b5:72:
b6:06:7e:7a:d3:05:c9:e4:71:2e:4a:11:ea:de:07:
06:44:a1:d9:ef:64:b1:4c:71:55:d0:82:39:07:75:
b1:4d:4e:cd:fe:eb:46:ee:b6:8a:5d:97:26:59:dc:
48:4e:72:49:d3:5b:d4:58:32:22:29:db:17:9a:2a:
b0:42:61:5d:ac:69:30:3f:e0:61:3b:85:19:3d:e7:
01:fd:16:75:4e:90:01:2c:5e:4c:0c:66:05:a5:0b:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7A:D0:0E:91:4D:96:A5:67:51:7F:EE:55:85:E2:66:07:E3:EC:70
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a3:45:36:d2:c0:5b:07:2f:40:e3:68:6f:e5:82:14:47:c6:
2e:5a:9e:ee:ec:7b:1e:3d:b5:e3:23:3a:6e:c5:c7:60:e5:0e:
ed:05:08:15:c0:28:a7:fb:e8:c4:f8:d1:f9:8c:af:7a:7e:bc:
6b:19:62:b2:cf:1d:45:7a:31:49:58:96:b1:17:4f:a8:bb:ef:
d4:d3:5c:4f:48:ba:37:08:79:77:0b:a7:2a:24:f3:52:07:38:
99:24:f6:b6:40:a2:46:e0:9d:8f:13:d6:34:b9:dd:86:71:92:
fc:7e:e5:c3:57:09:67:ef:b5:0c:ca:68:be:e7:37:dc:0b:d7:
65:d1:90:5c:d1:4c:63:e1:40:7c:54:1a:c4:fc:b5:14:4c:13:
64:fd:3c:23:0a:79:09:83:89:fc:a3:9c:b1:70:41:f4:21:b3:
7b:4c:52:f1:ad:c0:51:cf:1c:b6:ec:fb:a9:46:6e:59:26:91:
7c:35:7c:7c:53:65:16:2c:3b:97:2b:ba:e1:c0:19:79:71:f9:
12:09:78:84:de:ef:41:06:e6:07:15:35:4f:3e:16:43:50:34:
d3:3f:88:4f:d2:c7:32:58:7b:ab:22:ad:3d:ac:0f:41:1d:08:
2e:c7:a0:9b:15:fb:77:ab:d4:95:63:68:3f:80:2b:6b:50:3f:
d8:84:2d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjHcjbSuAofUTe7vTQkXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm
NThiZTUwHhcNMjUwNjA3MDQwMDU0WhcNMjUwNjA4MDQwMDU0WjAzMTEwLwYDVQQD
EyhhYjdhZDAwZTkxNGQ5NmE1Njc1MTdmZWU1NTg1ZTI2NjA3ZTNlYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA262EaG0Ui0y1qPjBwwKr/8v9F7Yi
3OCP5ua+Xj5m0ZxxI+CvBHpmhRpH5QZjNVUV4jolWUIlQo8cRqnA1MaS3GRkN8dl
Y5Xi1vZ08nf1w7bqTmZYwLfFWh0kf9D925vhAFl6edJkFmjFz+Ew4hSinJ76DZoN
pJaJzUkyy3SZKkxHRTeDk/kcXltilZKIjUR1JTx6LWO3cUE8v7Qs4o1sNvDmtXK2
Bn560wXJ5HEuShHq3gcGRKHZ72SxTHFV0II5B3WxTU7N/utG7raKXZcmWdxITnJJ
01vUWDIiKdsXmiqwQmFdrGkwP+BhO4UZPecB/RZ1TpABLF5MDGYFpQuifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt60A6RTZalZ1F/7lWF4mYH4+xwMB8GA1UdIwQY
MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt
YWIxYTg3ZWNkZjFiLzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi
LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqNFNtLA
WwcvQONob+WCFEfGLlqe7ux7Hj214yM6bsXHYOUO7QUIFcAop/voxPjR+Yyven68
axliss8dRXoxSViWsRdPqLvv1NNcT0i6Nwh5dwunKiTzUgc4mST2tkCiRuCdjxPW
NLndhnGS/H7lw1cJZ++1DMpovuc33AvXZdGQXNFMY+FAfFQaxPy1FEwTZP08Iwp5
CYOJ/KOcsXBB9CGze0xS8a3AUc8ctuz7qUZuWSaRfDV8fFNlFiw7lyu64cAZeXH5
Egl4hN7vQQbmBxU1Tz4WQ1A00z+IT9LHMlh7qyKtPawPQR0ILsegmxX7d6vUlWNo
P4Ara1A/2IQtwA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:58 2025 by rpki-client