Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: EuogIZmp9jOCZnJRREbO4IhV5N6PUgqBYHx5nnJWNHI=
Subject key identifier: 84:03:84:0E:81:13:60:AC:B1:D7:90:AF:33:8B:41:DC:0A:25:2A:B1
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 019A72938D2C01047EECF943BB17DC681976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=)
2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: DBiX2eiicoFULDi9en8kff45yALZwP8+qmdcCmHaUVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8d:2c:01:04:7e:ec:f9:43:bb:17:dc:68:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=8403840e811360acb1d790af338b41dc0a252ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:20:33:cd:7d:d4:6e:50:36:31:cf:52:e5:
bb:31:d1:20:b8:59:30:38:0c:ed:c8:88:c1:a5:d0:
7f:54:82:78:a1:80:89:a2:99:34:13:0e:f5:cf:0a:
61:29:fe:ef:c4:c8:9d:ad:a6:dd:02:bd:6a:f4:29:
48:72:e9:3b:fb:1b:11:be:01:c7:33:13:32:27:66:
16:eb:9d:77:cc:ee:ec:88:e0:4c:ab:45:89:d0:b8:
f6:34:f5:e5:73:ff:bf:f2:5b:4e:9e:ca:fe:bd:b8:
c0:dc:c0:02:c4:44:97:d7:8d:91:36:b9:de:03:dd:
28:a7:46:df:10:45:4b:54:54:b4:51:bf:4d:3f:9b:
53:71:af:b9:88:95:65:a1:f3:da:8b:30:07:ae:0e:
af:e0:36:7e:63:be:d8:b2:e5:d2:ba:fb:c7:56:a4:
5f:18:7a:04:b6:fc:54:12:65:4f:94:41:ac:ac:d7:
60:54:6e:30:d2:ea:e2:ea:83:80:62:c1:96:98:8b:
34:ef:07:a5:02:72:cd:e8:b9:92:89:98:1a:42:48:
31:77:ad:8b:64:e3:42:0d:f2:ad:b3:29:22:f1:cd:
22:27:fd:e7:03:f4:55:fe:42:c4:89:ea:29:52:1a:
64:af:f8:c7:f0:40:9c:03:9e:24:74:44:b8:53:d2:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:03:84:0E:81:13:60:AC:B1:D7:90:AF:33:8B:41:DC:0A:25:2A:B1
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:44:15:c2:0a:28:fe:ae:93:96:8c:59:63:64:41:7e:c9:8b:
4c:57:78:22:f6:57:d4:9b:6a:ae:ed:1b:80:17:e4:f7:a6:17:
92:1c:31:6e:ff:c1:3f:49:c7:b9:9b:bb:41:ca:5b:5c:a3:e0:
11:41:a6:55:f6:8b:34:07:cd:bb:22:1f:a9:21:cf:fe:10:32:
f9:9f:50:61:a7:b5:57:03:39:67:ab:2b:d6:12:71:0c:d5:18:
46:83:59:d8:6a:d0:27:76:27:4f:12:70:e1:3d:ea:9c:a8:fc:
aa:49:a1:24:41:7c:37:be:57:db:01:b4:59:b7:c1:40:67:c2:
9c:ac:b8:83:d0:f5:4b:50:9e:f1:46:d4:fe:13:d4:ab:64:cc:
99:7e:ac:48:ee:ed:63:9b:92:d9:30:f0:f0:b3:a5:36:94:a3:
e1:c9:1e:b1:86:c6:ab:88:a1:a9:a8:30:60:d2:6d:14:77:f6:
68:d8:a2:40:43:da:6a:10:ca:54:c5:ea:e9:a9:24:11:84:af:
ff:ca:22:37:58:80:88:cf:1d:7d:81:fe:30:3c:ff:09:c5:c7:
cb:6b:6d:02:bf:ff:29:ec:c3:a3:44:cf:0e:d1:d2:e8:c9:db:
70:d8:19:bf:58:64:f6:57:dc:b5:37:3b:72:6a:0f:e0:fc:16:
a7:b4:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:26 2025 by rpki-client