Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: uXW4joGZ/1DMpNk5KdNRcqLZNurS/nTA5Cc+3mWMDzE=
Subject key identifier: 1A:06:22:57:F4:34:E9:C9:33:4F:B7:63:5A:C1:99:F6:01:F3:4B:D9
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 019873E292B8EA93FD392B8CECCB87A97169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1628
Signing time: Mon 04 Aug 2025 07:01:25 +0000
Manifest this update: Mon 04 Aug 2025 07:01:25 +0000
Manifest next update: Tue 05 Aug 2025 07:01:25 +0000
Files and hashes: 1: BrQq7YEFajNSVsBn6S_XP8bHPLY.roa (hash: egGSnJVF4ZpifdFK3Q0Rkj8+zW1UTdDs4D8hficQgOQ=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: aLqW0zjNHet+O+bdRRHcQw9faJluk4awfb4sA+q39bU=)
3: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
4: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:92:b8:ea:93:fd:39:2b:8c:ec:cb:87:a9:71:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Aug 4 07:01:25 2025 GMT
Not After : Aug 5 07:01:25 2025 GMT
Subject: CN=1a062257f434e9c9334fb7635ac199f601f34bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:6f:7b:bf:b1:dd:9d:5d:b2:37:6d:52:74:
9a:a7:80:27:e1:40:00:40:a3:0b:b6:37:ad:70:b1:
20:25:52:bf:8e:aa:52:ea:9a:97:da:a1:27:f5:b8:
05:b7:4b:95:4d:a8:af:c1:30:9c:8f:49:c3:3b:3b:
a0:46:e1:47:5b:6f:42:7a:03:a2:a9:b3:6c:70:4c:
59:45:4e:d4:42:66:94:8e:9d:bd:c8:8b:55:02:7e:
a0:f6:1b:e6:98:be:82:52:7c:ee:9b:47:54:ff:c9:
7e:53:d7:fb:bb:f5:b7:62:ee:e1:5e:35:cf:86:78:
e8:bf:e4:67:98:d9:53:aa:1b:91:b8:69:14:b7:71:
09:f8:19:f2:89:3a:8b:a7:f8:11:7c:de:a7:06:0e:
8d:33:63:28:2c:b2:63:4f:18:19:b7:89:18:da:7d:
90:45:00:0d:76:18:7d:26:6e:91:52:95:2c:5b:6e:
ca:b1:27:db:26:1d:63:6b:58:95:ba:34:07:0e:49:
db:82:ed:81:0f:dc:8c:2d:b1:73:a5:2d:6f:54:fe:
41:de:b5:cc:49:10:cb:01:27:0d:de:fc:9f:ca:b5:
35:46:61:ab:6d:3f:24:f1:e5:a7:b5:1b:ad:86:11:
21:d9:db:a1:14:ae:67:3f:a1:27:74:c9:84:96:25:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:22:57:F4:34:E9:C9:33:4F:B7:63:5A:C1:99:F6:01:F3:4B:D9
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:dd:5f:4b:94:ef:70:d3:d9:80:6e:7b:78:ad:ed:68:05:49:
27:cb:b5:db:9f:7f:92:4e:d3:bc:32:44:90:b8:17:3e:27:31:
70:8a:a1:48:1a:0b:7d:f8:6e:67:bc:10:36:72:2e:12:34:a0:
7d:45:5c:74:2a:31:80:6a:01:e9:d5:d6:a0:9e:9a:93:e7:90:
37:c7:af:ab:8a:ed:53:80:20:c5:18:e9:f0:56:00:c5:48:01:
00:f8:df:b2:2e:c4:db:39:db:0e:9b:03:72:b4:df:ba:59:fa:
e8:63:59:49:33:4b:f2:21:c1:1e:21:ba:3e:e4:09:07:34:b5:
80:4e:e3:a5:1b:80:b3:95:b8:42:05:28:f1:b7:50:c3:1d:7e:
9f:ef:1b:64:86:51:0d:4a:f5:ee:a9:5e:54:fb:e4:ef:7e:06:
1c:8e:82:61:90:7a:c8:02:8a:e2:a2:fc:c2:b7:87:a3:25:7b:
8c:a1:f9:75:b9:36:da:09:d2:3c:40:87:9d:b3:74:51:e0:02:
0d:c4:5a:0d:e7:0a:b9:93:aa:4e:c7:cf:d9:20:e8:7a:f5:f2:
64:3e:28:22:3a:60:5c:28:5e:5e:a0:99:d3:49:44:4a:31:20:
1c:74:c1:40:60:e4:0b:0e:81:f1:0b:e1:b0:a4:c4:6f:33:26:
eb:17:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:21 2025 by rpki-client