Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: r48H0GWJyZQ+9gUav+LbooO28R2WHPfFPlyb2l3Er8g=
Subject key identifier: 7A:EE:A0:DC:86:58:5F:64:A6:93:8B:16:51:80:8E:BF:6A:84:A0:A2
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 019A4DE1B35FFE715FEE27BE628A1F4A1300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=)
2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: he51xEAQi46h39DtPSXpLVt+A3DJg1K4Ll0v4VU96xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b3:5f:fe:71:5f:ee:27:be:62:8a:1f:4a:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=7aeea0dc86585f64a6938b1651808ebf6a84a0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:0c:7e:7f:b2:7e:4c:3c:7b:97:66:73:06:
d2:6c:f0:83:37:85:d5:93:54:ec:b9:f4:2f:9b:80:
c8:db:38:86:aa:34:f0:1b:07:b2:a5:dc:4b:15:ed:
3b:02:9f:e1:3f:e0:56:11:73:f7:5d:dc:0d:d5:e1:
3a:63:5b:b4:3d:af:20:a7:58:da:5e:43:0e:99:f8:
40:ab:93:40:c1:6b:b4:c2:2c:59:37:22:57:2b:f6:
f5:76:e0:ba:5f:cd:64:ec:56:0f:7f:40:9d:04:ef:
6b:2d:70:a5:89:b6:4e:e4:8c:62:7d:ba:44:39:38:
30:a8:e9:80:05:fd:21:a1:97:0b:ce:c5:a6:a0:13:
5e:c6:c2:de:3f:1d:40:b7:12:dd:4b:a2:0a:57:fe:
d3:7c:70:f7:74:9f:8a:99:b4:af:38:04:6e:5b:77:
b7:89:2f:53:1e:19:6f:46:32:a1:15:fa:6f:99:ba:
46:1f:c7:45:ae:f6:76:64:c6:03:02:d1:3a:7e:b5:
04:a0:cd:a2:2d:76:a6:6d:34:87:3b:b5:f0:49:35:
6d:ae:24:48:54:9a:29:aa:21:39:7c:b1:cb:52:b1:
49:bd:86:5e:67:65:84:36:1a:5c:7f:48:94:a0:fa:
33:bb:38:dc:34:58:b9:92:e8:bd:09:8a:49:ad:33:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:A0:DC:86:58:5F:64:A6:93:8B:16:51:80:8E:BF:6A:84:A0:A2
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:48:d9:0c:b6:4a:d6:20:57:3c:b5:bf:e2:50:f8:cb:57:
90:3f:88:9a:a4:a5:54:0d:64:70:76:34:58:ff:28:c4:90:32:
d1:a3:cc:07:26:63:53:09:31:c8:4e:d6:56:76:75:8c:aa:36:
43:dc:c3:c1:f0:d0:06:f2:dc:21:0b:0d:4e:34:4f:8d:6a:91:
95:99:73:ef:1d:e6:f3:6d:e6:93:bb:be:19:35:e5:7f:71:02:
45:fe:9a:a8:ec:3a:6b:26:67:a6:89:d9:5c:f2:79:fa:21:52:
be:56:6e:0f:c2:80:07:72:5b:e3:cf:c9:e2:01:31:3f:f0:dc:
97:8c:18:d8:21:a6:ae:17:5e:f5:70:17:ee:53:38:62:a1:13:
34:8c:a7:a4:8f:ea:e8:15:df:18:74:bc:d3:c4:e7:f7:1f:3a:
3a:6f:ff:8e:f8:31:32:03:cb:6b:5f:e3:9e:2f:a7:47:de:d0:
b9:d2:ba:4b:a4:aa:bc:54:4c:75:20:9e:d8:a9:f2:bc:2b:3c:
74:b8:2d:fd:34:69:49:76:a8:93:d1:19:a0:39:a9:04:fc:bd:
98:02:7a:02:ee:41:68:45:d3:69:5d:f2:e3:f4:4a:84:1c:b7:
fc:b8:5b:2b:b7:4c:e8:9b:d1:90:8a:53:58:78:35:ac:fb:c9:
33:80:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:31 2025 by rpki-client