Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: iFvbpfE4TuuCxTp57jTaB6vYsbR41SNMN0BUwVlqbyM=
Subject key identifier: 04:83:FC:4A:0A:90:C7:5E:D7:68:01:74:06:FF:7D:45:BA:F4:5B:0B
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01967FB4C0BBA24F480079DF87DB5AAA23D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1525
Signing time: Tue 29 Apr 2025 04:01:14 +0000
Manifest this update: Tue 29 Apr 2025 04:01:14 +0000
Manifest next update: Wed 30 Apr 2025 04:01:14 +0000
Files and hashes: 1: BrQq7YEFajNSVsBn6S_XP8bHPLY.roa (hash: egGSnJVF4ZpifdFK3Q0Rkj8+zW1UTdDs4D8hficQgOQ=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: HiXX5Xb/Trk5Ca0rS9C8Z0XGJgyDFIEZbhHbiSJa/so=)
3: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
4: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:c0:bb:a2:4f:48:00:79:df:87:db:5a:aa:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Apr 29 04:01:14 2025 GMT
Not After : Apr 30 04:01:14 2025 GMT
Subject: CN=0483fc4a0a90c75ed768017406ff7d45baf45b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:39:51:66:c1:52:90:dc:ac:de:8e:8b:a5:
a6:b2:29:9b:a6:d1:da:5c:00:f1:14:09:62:8e:ed:
d3:a6:d8:e9:01:25:33:6e:7d:a2:2b:2e:20:32:31:
39:d4:9c:35:a6:dd:65:86:ac:21:fe:48:01:34:06:
16:df:ad:1c:66:d3:fa:b6:13:21:42:33:bd:e0:6e:
61:ee:f0:d5:49:59:e6:50:d1:f7:dc:d4:08:fe:35:
aa:93:8a:a6:1d:41:2b:c4:11:59:ad:a5:1a:5d:62:
44:43:8d:0d:ae:b7:ec:d8:7e:b5:b3:e3:8a:9a:ce:
b0:95:31:b4:13:f3:f5:8f:f3:c3:cb:fa:c8:3e:2d:
56:cf:3c:51:36:80:74:43:04:94:ff:62:f1:18:2f:
12:f6:88:59:78:33:48:4a:6b:ae:28:e0:fe:1f:06:
66:4f:c3:43:ba:ec:1f:bc:b8:d0:33:7b:9a:8e:b2:
06:98:14:a9:7f:34:fe:67:bb:cf:df:bb:89:da:a9:
6c:53:1d:25:b5:bb:47:69:fc:7e:9a:7b:c4:c8:fd:
58:98:70:08:d4:3d:56:db:70:fa:6b:3a:2f:31:0d:
c5:9b:5d:05:71:b4:3c:38:f9:e1:d8:23:b3:71:38:
2c:13:4d:e8:b4:6c:0e:0b:74:36:3d:e5:b4:ef:96:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:83:FC:4A:0A:90:C7:5E:D7:68:01:74:06:FF:7D:45:BA:F4:5B:0B
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:49:4b:35:ce:2e:29:e2:9a:ee:37:02:f2:ce:7b:c7:6e:
82:64:15:7d:dd:14:94:4a:57:44:08:e7:3b:4c:61:d5:bf:52:
0e:e0:b7:96:f8:bb:10:ee:58:85:a0:a1:5e:2a:32:80:f9:b8:
0d:2f:96:b0:55:37:36:37:0e:de:0f:30:af:a4:12:2b:2f:6b:
95:41:e3:db:c6:13:6c:f0:d9:cb:fd:d8:af:5b:e9:00:c6:26:
6e:f2:41:99:b4:2e:64:31:52:bb:d7:b9:67:a2:49:59:90:21:
a3:80:c3:36:7a:79:49:d3:fa:11:a7:fc:a7:5f:47:77:71:0f:
42:db:0b:b9:7b:0c:a1:9d:ae:68:03:42:97:10:a6:8a:e0:ac:
ca:5e:39:37:a3:b1:a6:4a:4b:a3:38:1e:04:a0:57:fa:a0:50:
19:9d:33:fd:12:6a:ee:72:d4:e1:e2:9f:f0:36:01:dc:fa:e7:
71:81:46:95:84:33:d2:ef:48:64:f6:a8:3b:80:73:43:9b:b5:
c1:85:b7:16:df:22:f0:2f:b5:d1:45:59:68:62:95:7f:7d:39:
fb:5d:e7:87:e2:af:90:32:98:e5:0a:a8:3e:71:e6:05:0b:d6:
a0:6c:bc:81:d3:df:f6:37:ba:49:fe:cf:15:e8:bb:04:42:5b:
16:81:b0:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tMC7ok9IAHnfh9taqiPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm
NThiZTUwHhcNMjUwNDI5MDQwMTE0WhcNMjUwNDMwMDQwMTE0WjAzMTEwLwYDVQQD
EygwNDgzZmM0YTBhOTBjNzVlZDc2ODAxNzQwNmZmN2Q0NWJhZjQ1YjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCM5UWbBUpDcrN6Oi6WmsimbptHa
XADxFAliju3TptjpASUzbn2iKy4gMjE51Jw1pt1lhqwh/kgBNAYW360cZtP6thMh
QjO94G5h7vDVSVnmUNH33NQI/jWqk4qmHUErxBFZraUaXWJEQ40Nrrfs2H61s+OK
ms6wlTG0E/P1j/PDy/rIPi1WzzxRNoB0QwSU/2LxGC8S9ohZeDNISmuuKOD+HwZm
T8NDuuwfvLjQM3uajrIGmBSpfzT+Z7vP37uJ2qlsUx0ltbtHafx+mnvEyP1YmHAI
1D1W23D6azovMQ3Fm10FcbQ8OPnh2COzcTgsE03otGwOC3Q2PeW075ZRIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASD/EoKkMde12gBdAb/fUW69FsLMB8GA1UdIwQY
MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt
YWIxYTg3ZWNkZjFiLzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi
LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdhJSzXO
Linimu43AvLOe8dugmQVfd0UlEpXRAjnO0xh1b9SDuC3lvi7EO5YhaChXioygPm4
DS+WsFU3NjcO3g8wr6QSKy9rlUHj28YTbPDZy/3Yr1vpAMYmbvJBmbQuZDFSu9e5
Z6JJWZAho4DDNnp5SdP6Eaf8p19Hd3EPQtsLuXsMoZ2uaANClxCmiuCsyl45N6Ox
pkpLozgeBKBX+qBQGZ0z/RJq7nLU4eKf8DYB3PrncYFGlYQz0u9IZPaoO4BzQ5u1
wYW3Ft8i8C+10UVZaGKVf305+13nh+KvkDKY5QqoPnHmBQvWoGy8gdPf9je6Sf7P
Fei7BEJbFoGwaA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:33:28 2025 by rpki-client