Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: 5nTIvRtN0jo9mtn1Rtb1KPDcpdvNIVcr1ZgH8r36xSI=
Subject key identifier: 81:20:62:2A:9C:56:85:41:25:A1:C9:96:55:14:E2:69:F9:AB:92:F9
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019A51874D2829BBE170F103EC4FE29E0F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1722
Signing time: Wed 05 Nov 2025 01:00:12 +0000
Manifest this update: Wed 05 Nov 2025 01:00:12 +0000
Manifest next update: Thu 06 Nov 2025 01:00:12 +0000
Files and hashes: 1: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: A8Uhld59E+lr/1AgduqUxm5w2HaQC6XFNRqZLMqdzhw=)
2: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
3: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
4: aBxSYhVn_anxC7-03zZfXGAPrRA.roa (hash: 4z8vPSTGN/KrBGvUG7yKZHmMHGsa+QLaisXrVqvvKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:4d:28:29:bb:e1:70:f1:03:ec:4f:e2:9e:0f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Nov 5 01:00:12 2025 GMT
Not After : Nov 6 01:00:12 2025 GMT
Subject: CN=8120622a9c56854125a1c9965514e269f9ab92f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:77:0f:85:0c:3d:92:21:ad:90:6a:9a:f1:
a5:c0:1b:10:46:c4:84:8d:0d:92:99:7f:a0:00:7e:
9a:04:43:07:6e:e6:6f:3d:ca:53:d2:3b:65:56:80:
ca:dc:cf:e0:44:c8:c3:a0:8c:06:ca:34:1b:59:89:
2b:50:6c:38:8d:43:c6:7a:8a:04:81:c5:ef:7c:ed:
7d:ad:dc:58:e9:f3:a5:1c:f0:d5:b8:0d:02:34:e4:
d4:60:2a:a4:96:11:76:0d:fc:50:95:8d:8e:ba:45:
9a:4e:ae:b9:3e:1a:3a:5d:1f:73:cd:1a:77:93:92:
72:47:6f:10:7f:32:c1:d6:bc:63:32:c7:69:f0:0b:
53:93:1f:16:17:8f:72:e1:6f:7a:7d:26:3d:81:d8:
c1:9b:16:9f:6b:a9:c5:75:39:00:25:f1:e5:bf:a8:
12:f2:71:4a:48:ff:8f:56:44:c6:f4:69:d3:1a:b8:
81:12:7f:d3:55:6b:ab:1c:ed:63:95:77:37:d8:27:
e0:49:7d:c5:87:cc:c2:39:e3:c7:bf:29:22:6d:1f:
f9:27:e7:4d:38:09:7d:92:4f:42:cb:5d:d7:09:cc:
aa:1f:47:a9:49:b5:38:86:24:54:ba:65:30:5a:8d:
fe:65:1a:01:e6:e6:b2:af:84:5f:76:ef:5f:6c:29:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:62:2A:9C:56:85:41:25:A1:C9:96:55:14:E2:69:F9:AB:92:F9
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8f:11:07:d9:0a:d5:53:79:1b:fe:8c:86:59:3c:5f:ad:a3:
1d:b1:a5:a3:01:a4:56:9e:07:38:df:e0:fd:08:84:a6:31:6e:
80:68:70:67:53:09:9b:ea:e1:8f:65:d6:c2:71:44:d0:00:34:
9d:24:1c:f3:10:bb:c7:45:10:cd:fb:f9:ea:f6:b3:0c:44:42:
a7:6b:a9:dd:87:dd:c9:6d:6b:34:e2:28:ad:f3:c3:54:39:3b:
b5:08:3c:8a:70:5c:47:32:27:3d:9c:64:f5:11:92:e6:c2:58:
b7:9f:f0:31:9c:62:b7:1d:7f:17:55:06:86:2f:75:30:bb:4a:
ca:37:d8:e3:36:0e:6f:0d:04:38:43:28:e5:db:5c:cf:0d:61:
1d:0b:6e:8a:98:d9:33:b5:b9:e7:d5:e1:cd:c0:7e:25:34:b6:
3b:a1:41:33:62:f3:11:14:b1:34:58:84:3e:f4:7f:b9:28:1a:
0a:4d:a3:90:d1:25:48:bd:e2:47:5d:f5:71:b3:04:5c:26:1d:
1a:26:f5:dc:c6:da:d5:93:7a:c0:1c:12:34:37:d2:80:61:ae:
e2:86:78:e0:52:94:33:9b:91:8d:06:f6:ca:0c:88:eb:4d:5e:
b1:a0:b5:99:a7:45:97:9c:18:7b:bc:91:8b:ef:01:89:24:91:
f8:eb:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:32:53 2025 by rpki-client