Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: hmaGPXjkY9odMn7OM7goM80aGj2XXj1yCefpBPrj49M=
Subject key identifier: D5:3F:33:02:7F:F3:62:EF:A8:EF:C7:43:75:E7:A8:79:3F:50:9F:B7
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 019A0A4A5191B257138CBA1256F54CD8E224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 12F1
Signing time: Wed 22 Oct 2025 05:00:33 +0000
Manifest this update: Wed 22 Oct 2025 05:00:33 +0000
Manifest next update: Thu 23 Oct 2025 05:00:33 +0000
Files and hashes: 1: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: rCW2R6r/902ReeJsnqPg8l/YR7pZ4ZrVXCOFWL5uTaY=)
2: ZyzamFxx31MI8DWtNOW9NjiSAdw.roa (hash: k0oTub67+XpNNg/oLxWWVGf2ml63S+4IV7J2xSqjNvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:51:91:b2:57:13:8c:ba:12:56:f5:4c:d8:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Oct 22 05:00:33 2025 GMT
Not After : Oct 23 05:00:33 2025 GMT
Subject: CN=d53f33027ff362efa8efc74375e7a8793f509fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:53:e1:02:71:0c:f0:c6:e4:61:2c:4b:eb:
ce:47:7d:0a:08:ba:b9:28:14:b9:72:43:9c:d7:44:
74:47:66:ef:57:c2:6f:47:9f:7c:45:a9:3c:6e:47:
7f:02:26:69:e1:62:2a:bd:86:1b:58:56:0a:96:e9:
d2:c5:a1:f2:fb:1e:f9:a5:56:c2:43:f9:e2:8a:90:
fa:1c:88:e4:1a:a1:af:f4:4d:de:fe:3a:0c:12:8a:
71:e1:ef:91:85:2e:cf:73:ec:5c:42:77:99:b1:83:
92:5c:57:f1:30:97:d2:0c:64:9d:bb:cb:9e:bd:5c:
0d:31:52:c0:67:f0:63:25:7b:f5:53:2c:23:07:b8:
17:2e:e3:70:6f:e5:df:3a:4e:9c:85:59:f7:2e:b3:
29:9b:27:5d:cf:05:7a:c4:df:05:d3:23:0d:67:33:
48:ff:76:9e:f3:c5:df:35:35:87:a6:fb:46:2e:07:
90:1d:24:e5:e7:26:2a:37:a1:c6:1d:38:6c:34:c7:
2c:d2:56:c9:ff:f9:b5:6d:d7:27:43:0c:d4:60:02:
1f:fa:8c:39:ec:d4:63:5f:8f:ee:55:0d:ad:d1:d3:
53:45:d6:48:d8:50:8f:36:36:c8:45:66:50:b2:6f:
cc:66:36:e9:ba:7c:3d:45:1b:53:7c:a7:82:2f:0a:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:33:02:7F:F3:62:EF:A8:EF:C7:43:75:E7:A8:79:3F:50:9F:B7
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:52:3e:f4:3c:27:80:c5:79:cb:20:32:eb:03:87:1f:d0:cb:
0d:f2:9c:0c:8f:1c:5c:63:07:33:8b:19:52:4c:86:da:1b:01:
77:0c:39:dc:4e:f9:4b:47:9d:6a:37:11:37:4f:ff:3d:3f:be:
9d:75:cf:1f:70:00:e1:4a:56:bf:50:3c:c2:23:ea:ec:b1:ab:
b0:43:78:ef:61:3a:f1:c1:54:20:5d:5c:df:75:25:6a:c7:ac:
99:b3:92:6f:39:d3:57:2f:ba:0e:85:76:75:b1:ab:2f:11:87:
c8:14:c2:2a:bf:7e:24:ab:fa:7f:c8:3e:ac:d3:f1:92:e0:9a:
3b:14:ce:37:16:e4:29:02:6f:30:0c:33:aa:f1:01:74:8c:1c:
4a:80:7b:3c:b9:fa:95:c2:e9:ae:19:fe:46:9d:52:a2:c8:15:
0f:0d:8f:26:90:b0:bc:8a:a3:a8:cb:07:5a:aa:f3:a9:77:ec:
c0:36:09:cf:99:6a:bf:26:ae:61:8d:78:66:ed:1c:dd:42:3f:
41:b0:a1:86:69:d3:d2:e9:dd:90:9f:9b:44:81:d2:ad:f5:b3:
11:bd:4a:c4:77:dd:40:60:bd:6a:e9:01:b5:cb:7b:99:15:73:
45:1d:0e:90:6d:bf:c4:05:74:6c:d0:93:ff:69:cc:0b:f0:d9:
b6:28:c2:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoKSlGRslcTjLoSVvVM2OIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZWEzMGMwZjI4ZTAyMjY5YzU3NjViZjRhMDQ1Njc3Y2Ey
Nzk0YTUwHhcNMjUxMDIyMDUwMDMzWhcNMjUxMDIzMDUwMDMzWjAzMTEwLwYDVQQD
EyhkNTNmMzMwMjdmZjM2MmVmYThlZmM3NDM3NWU3YTg3OTNmNTA5ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaVT4QJxDPDG5GEsS+vOR30KCLq5
KBS5ckOc10R0R2bvV8JvR598Rak8bkd/AiZp4WIqvYYbWFYKlunSxaHy+x75pVbC
Q/niipD6HIjkGqGv9E3e/joMEopx4e+RhS7Pc+xcQneZsYOSXFfxMJfSDGSdu8ue
vVwNMVLAZ/BjJXv1UywjB7gXLuNwb+XfOk6chVn3LrMpmyddzwV6xN8F0yMNZzNI
/3ae88XfNTWHpvtGLgeQHSTl5yYqN6HGHThsNMcs0lbJ//m1bdcnQwzUYAIf+ow5
7NRjX4/uVQ2t0dNTRdZI2FCPNjbIRWZQsm/MZjbpunw9RRtTfKeCLwrwhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU/MwJ/82LvqO/HQ3XnqHk/UJ+3MB8GA1UdIwQY
MBaAFEjqMMDyjgImnFdlv0oEVnfKJ5SlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUt
ZjI4YjRkNjQwYTQ5LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUtZjI4YjRkNjQwYTQ5
LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVI+9Dwn
gMV5yyAy6wOHH9DLDfKcDI8cXGMHM4sZUkyG2hsBdww53E75S0edajcRN0//PT++
nXXPH3AA4UpWv1A8wiPq7LGrsEN472E68cFUIF1c33UlasesmbOSbznTVy+6DoV2
dbGrLxGHyBTCKr9+JKv6f8g+rNPxkuCaOxTONxbkKQJvMAwzqvEBdIwcSoB7PLn6
lcLprhn+Rp1SosgVDw2PJpCwvIqjqMsHWqrzqXfswDYJz5lqvyauYY14Zu0c3UI/
QbChhmnT0undkJ+bRIHSrfWzEb1KxHfdQGC9aukBtct7mRVzRR0OkG2/xAV0bNCT
/2nMC/DZtijCDg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 10:28:50 2025 by rpki-client