Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: 4zCY42x9wPqBTHsUwFVSrXgsqj4et2WPmNlTs8Osmks=
Subject key identifier: 82:B1:9E:1F:71:04:B7:26:37:7E:B3:2B:8E:82:AD:F8:1B:45:F5:1E
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01976960CD1AC2FD0A2F3BC325E0D7925DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 159E
Signing time: Fri 13 Jun 2025 13:00:40 +0000
Manifest this update: Fri 13 Jun 2025 13:00:40 +0000
Manifest next update: Sat 14 Jun 2025 13:00:40 +0000
Files and hashes: 1: BrQq7YEFajNSVsBn6S_XP8bHPLY.roa (hash: egGSnJVF4ZpifdFK3Q0Rkj8+zW1UTdDs4D8hficQgOQ=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: szG8dS33nVi2+AHoi3YxxWM11wxhQsPned3e/2kh85o=)
3: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
4: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:cd:1a:c2:fd:0a:2f:3b:c3:25:e0:d7:92:5d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jun 13 13:00:40 2025 GMT
Not After : Jun 14 13:00:40 2025 GMT
Subject: CN=82b19e1f7104b726377eb32b8e82adf81b45f51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:d2:da:b3:03:75:03:f4:f1:02:34:df:dd:
1f:c7:9b:7e:8d:23:e4:0b:25:3d:c8:a4:0b:fc:69:
a1:c8:4b:45:95:cd:9c:2c:b5:c4:34:97:ee:79:09:
c1:df:34:94:35:98:64:b2:22:ee:fe:6d:60:6f:ad:
15:36:29:a4:08:16:be:42:b5:2b:18:ed:1a:5a:f7:
c4:80:76:22:f6:4b:f0:79:85:31:20:f1:86:fa:50:
2d:77:f8:54:4a:3d:c6:25:8a:85:04:b0:33:0a:cf:
65:29:9a:17:69:28:1b:85:09:50:b8:ca:2c:69:1d:
89:1f:d8:18:95:49:1e:10:92:58:1c:e5:21:f9:c1:
43:8e:de:c0:78:04:f7:0c:99:b7:c1:b5:ec:e2:43:
5d:a4:24:71:14:21:55:01:1b:1b:2b:d2:eb:18:50:
88:f1:d2:32:ea:fe:78:f1:28:68:df:87:14:23:0c:
c7:73:b1:30:1b:e2:fb:31:08:be:ab:81:71:69:3b:
2e:5f:da:12:d7:c4:13:6d:29:a1:a2:73:30:9d:df:
fe:41:16:6c:a9:5c:36:11:05:40:ff:24:e0:04:37:
c5:8d:33:06:41:8b:28:2c:02:da:4e:8c:2a:6a:48:
45:91:0c:3a:d0:7f:17:04:18:8b:0c:54:5b:69:6c:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B1:9E:1F:71:04:B7:26:37:7E:B3:2B:8E:82:AD:F8:1B:45:F5:1E
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8f:ed:1e:f5:a3:29:64:f1:52:50:36:c4:c7:d8:8b:ec:c0:
8c:d1:a3:f8:16:50:d6:5d:3f:59:59:86:16:a9:32:fa:d0:f6:
a6:83:33:0e:b1:92:65:8c:d6:25:9b:af:01:12:ef:ad:d4:eb:
7d:98:4e:dc:ed:79:6b:77:20:35:a3:1c:58:64:36:ff:a2:81:
2d:bc:55:c4:4e:45:fd:4c:a9:fe:82:61:aa:e5:d3:0d:59:c2:
66:d9:4d:56:6f:1f:02:ec:42:90:89:e8:de:a4:33:fa:69:80:
66:92:5d:33:e5:24:6b:e4:cf:af:c6:f8:42:5f:1b:47:eb:16:
c8:4a:5f:b0:89:2e:d0:f5:d2:57:a7:93:c3:20:68:e6:e3:65:
99:ab:f3:78:0f:08:df:66:73:6c:78:c5:47:ad:21:4b:3e:be:
84:04:3e:7c:02:9d:15:0d:b7:df:2e:50:f3:62:fa:db:78:82:
29:1b:de:03:98:0f:17:67:0f:f5:bd:9a:51:75:69:cd:e9:11:
d1:b4:c6:d3:cd:ce:2f:6b:39:8c:70:18:c9:62:c2:61:f5:78:
7c:20:d5:00:1c:fe:5f:a4:cd:6b:5d:08:83:8d:8b:5f:17:a0:
c2:07:96:99:a3:71:e7:1c:0b:4f:36:e3:ba:4c:84:3c:68:e3:
0d:24:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:09 2025 by rpki-client