Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: 69vW/GAAwTSg2ZrmG/5LPgnCdOD8ItTj3sJJMD0K1So=
Subject key identifier: A4:55:72:3A:3E:D2:B7:5E:17:DB:B8:0E:F7:95:3A:3F:FF:E8:02:37
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 019748FA7F8C84CDF7B0310EDE4963E14A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:01:05 +0000
Manifest this update: Sat 07 Jun 2025 06:01:05 +0000
Manifest next update: Sun 08 Jun 2025 06:01:05 +0000
Files and hashes: 1: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: pSSBP9VakG3HEiPYG7gXWX9IpISXMuOePBjmIkQGW94=)
2: yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa (hash: 1v07ddxL5rWksw0TtZmPMhkBlMfB2KOWe+9tKgMQP40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:7f:8c:84:cd:f7:b0:31:0e:de:49:63:e1:4a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Jun 7 06:01:05 2025 GMT
Not After : Jun 8 06:01:05 2025 GMT
Subject: CN=a455723a3ed2b75e17dbb80ef7953a3fffe80237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:81:5a:a5:f3:77:4e:cd:fa:da:ca:2f:44:
db:8e:56:63:e5:b7:1f:48:b9:b4:5a:6c:68:a9:20:
2f:67:32:d7:bd:8e:e4:5d:a6:27:06:c4:1f:1f:a3:
6a:b2:51:00:25:08:47:e7:82:f0:6a:bd:c5:68:9c:
b3:bd:f6:53:88:a8:f4:9f:6f:e9:e0:70:dc:f4:ca:
f7:9b:dc:09:d6:f2:ac:f3:10:32:12:81:8b:b0:69:
d7:f8:8b:f4:21:9f:67:a2:70:36:2a:5f:d1:a3:1c:
37:56:67:b1:7d:1a:dd:80:9b:c5:f8:2c:94:d3:63:
ab:ec:c7:67:97:77:0b:73:d3:51:57:04:e6:8f:98:
2e:64:df:90:74:b9:a9:e8:5b:b8:42:ec:61:d0:af:
4c:82:66:69:79:7f:d1:8e:7a:0c:5d:7f:92:f2:b5:
3d:36:52:1d:47:9c:b3:fa:a6:5e:88:9b:d7:b5:9d:
ff:c9:7d:d7:0a:ad:bc:33:1e:b5:04:4c:67:be:46:
59:5d:7b:e2:c8:d2:eb:01:9d:99:59:a2:f8:fa:7e:
0d:ba:10:3c:c4:77:81:5f:9c:9b:76:3e:db:48:94:
38:c5:ea:7a:69:96:de:55:3e:5f:15:ec:f5:b4:62:
38:75:7f:f7:0e:c5:fd:10:70:fe:15:7e:70:da:03:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:72:3A:3E:D2:B7:5E:17:DB:B8:0E:F7:95:3A:3F:FF:E8:02:37
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:13:e0:b6:fa:34:5e:0b:bc:24:51:ce:27:3b:7c:10:bb:4e:
45:09:ea:5a:c1:ba:84:fe:11:ee:eb:7b:07:ef:c1:84:49:f8:
e1:45:3b:3b:aa:c7:7a:02:e8:f1:06:22:52:70:91:44:18:1b:
05:25:51:e7:0a:6c:56:2e:2e:5b:95:1c:2c:1f:d1:e4:f7:81:
89:0f:71:04:8c:4a:68:09:a6:93:c8:4f:ca:d4:c8:ed:1d:74:
06:d8:a5:c5:d2:28:76:d8:05:8c:b2:a2:23:31:b2:96:a6:7a:
2e:e2:9a:00:13:50:b3:76:8a:af:9c:93:d4:91:72:9d:0a:5c:
7e:bf:f7:67:fa:f0:fe:4d:22:61:ee:af:26:f8:da:18:e9:5a:
55:e6:b3:f4:c5:69:e0:d6:33:24:ad:bc:e0:3b:a7:ef:31:27:
8e:cf:62:db:eb:66:38:b2:57:b5:8c:ee:1c:2a:39:1f:62:b3:
40:29:b3:4f:74:2e:4d:a2:77:97:c3:d8:17:20:e1:76:4c:d5:
67:53:f4:2a:60:56:31:4d:fc:e1:11:32:7e:40:76:dd:00:da:
c8:aa:de:60:15:26:1c:c5:7b:9e:69:8a:8d:d9:5c:f8:54:2e:
be:f4:97:83:ed:f9:c5:72:ae:4e:3e:07:9e:d2:de:89:b9:29:
ae:5d:b7:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+n+MhM33sDEO3klj4Uo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODU5OTI5MmE2MzI0Mjk3ZTAyZmZmM2M1MTE5YmVlMGIz
MTc1NDgwHhcNMjUwNjA3MDYwMTA1WhcNMjUwNjA4MDYwMTA1WjAzMTEwLwYDVQQD
EyhhNDU1NzIzYTNlZDJiNzVlMTdkYmI4MGVmNzk1M2EzZmZmZTgwMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJyBWqXzd07N+trKL0TbjlZj5bcf
SLm0WmxoqSAvZzLXvY7kXaYnBsQfH6NqslEAJQhH54Lwar3FaJyzvfZTiKj0n2/p
4HDc9Mr3m9wJ1vKs8xAyEoGLsGnX+Iv0IZ9nonA2Kl/Roxw3VmexfRrdgJvF+CyU
02Or7Mdnl3cLc9NRVwTmj5guZN+QdLmp6Fu4Quxh0K9MgmZpeX/RjnoMXX+S8rU9
NlIdR5yz+qZeiJvXtZ3/yX3XCq28Mx61BExnvkZZXXviyNLrAZ2ZWaL4+n4NuhA8
xHeBX5ybdj7bSJQ4xep6aZbeVT5fFez1tGI4dX/3DsX9EHD+FX5w2gOQJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRVcjo+0rdeF9u4DveVOj//6AI3MB8GA1UdIwQY
MBaAFLKFmSkqYyQpfgL/88URm+4LMXVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEt
ZTM1YTY3ZTVkOWUyLzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lNTUyZjQtOTZjYS00MjU5LWE4MmEtZTM1YTY3ZTVkOWUy
LzEvc29XWktTcGpKQ2wtQXZfenhSR2I3Z3N4ZFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhPgtvo0
Xgu8JFHOJzt8ELtORQnqWsG6hP4R7ut7B+/BhEn44UU7O6rHegLo8QYiUnCRRBgb
BSVR5wpsVi4uW5UcLB/R5PeBiQ9xBIxKaAmmk8hPytTI7R10BtilxdIodtgFjLKi
IzGylqZ6LuKaABNQs3aKr5yT1JFynQpcfr/3Z/rw/k0iYe6vJvjaGOlaVeaz9MVp
4NYzJK284Dun7zEnjs9i2+tmOLJXtYzuHCo5H2KzQCmzT3QuTaJ3l8PYFyDhdkzV
Z1P0KmBWMU384REyfkB23QDayKreYBUmHMV7nmmKjdlc+FQuvvSXg+35xXKuTj4H
ntLeibkprl232g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:40:55 2025 by rpki-client