Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: S8ZdE3/FXtW2fgAuuKBztuadcnKU6s33AKEaYIZse9U=
Subject key identifier: 27:D6:F1:AF:A5:20:B1:5D:2F:C6:91:D6:8A:AC:64:59:95:0E:00:FD
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01969E9A4467E92682C722B1C754843EE384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 1535
Signing time: Mon 05 May 2025 04:00:32 +0000
Manifest this update: Mon 05 May 2025 04:00:32 +0000
Manifest next update: Tue 06 May 2025 04:00:32 +0000
Files and hashes: 1: BrQq7YEFajNSVsBn6S_XP8bHPLY.roa (hash: egGSnJVF4ZpifdFK3Q0Rkj8+zW1UTdDs4D8hficQgOQ=)
2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: knwlwX7r3J82kWmEUv+c2OJytuylypbIoebvhBMHYMo=)
3: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
4: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:44:67:e9:26:82:c7:22:b1:c7:54:84:3e:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: May 5 04:00:32 2025 GMT
Not After : May 6 04:00:32 2025 GMT
Subject: CN=27d6f1afa520b15d2fc691d68aac6459950e00fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:be:d3:f6:01:33:29:66:e6:3a:f2:9c:81:c8:
a4:a5:07:ee:b3:74:45:64:bd:44:d2:07:b8:52:15:
3b:e9:dc:9a:2f:45:aa:e0:2d:e3:cd:f5:7f:7d:8d:
0e:4c:bf:41:fa:1d:e3:ea:7f:a7:ab:d1:74:46:85:
b5:74:99:72:e2:4a:4c:08:fa:79:ad:53:b3:08:62:
11:a6:c8:9d:a4:1d:33:07:3e:02:64:6e:2b:68:2d:
2d:03:5a:68:30:07:12:b8:fc:01:64:6f:4b:83:75:
f2:33:9d:6f:22:c7:84:8a:9a:33:e8:b6:79:e7:02:
e1:14:2c:90:de:6d:98:37:a4:35:e7:27:b0:96:0d:
29:96:d6:73:dc:55:82:06:0f:86:0d:f4:28:96:8d:
01:c5:f6:06:18:da:b8:31:b6:3d:c7:4d:c8:e2:4a:
55:e9:0c:33:d8:88:ba:61:66:2f:36:eb:7e:21:cc:
cc:91:74:11:27:3b:50:ff:2d:f8:8e:bd:d0:79:8c:
53:70:29:c8:65:c0:0c:5a:55:85:6a:55:f0:41:c8:
b8:79:72:2a:6f:f8:4a:6f:09:18:aa:55:2d:9c:dc:
08:2e:68:41:8c:30:9a:f5:0d:a2:e5:f2:0e:ff:e0:
14:76:ed:f2:73:3f:6c:ed:2a:58:d5:b4:20:de:6f:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:F1:AF:A5:20:B1:5D:2F:C6:91:D6:8A:AC:64:59:95:0E:00:FD
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:67:5c:08:df:84:21:fe:c3:c2:47:9a:71:e0:49:eb:3c:8d:
c8:14:2e:fd:0d:d6:a5:d4:79:ec:fc:a3:c9:c2:68:0e:48:9b:
d7:50:3d:db:af:50:9d:1b:c4:45:de:9f:77:e7:f8:e8:41:e7:
de:03:45:f1:2c:4c:a8:8e:85:e7:e7:9b:16:34:95:9c:74:6c:
67:0a:c8:9e:f4:5f:bb:da:94:79:25:ca:a7:7d:73:c2:98:a7:
38:2b:6c:8f:19:06:79:4a:cb:93:ed:9e:71:b6:1a:74:b3:25:
7e:d2:78:99:68:82:1b:56:62:72:48:71:8a:a0:03:b6:b9:ab:
c3:9f:f1:40:d5:d9:2c:1d:23:77:18:ae:ba:b3:87:74:81:1c:
ec:68:ea:3b:46:aa:9b:cd:62:14:e9:b7:ac:d9:e0:c6:ea:16:
77:8c:ef:a4:c2:47:22:a1:54:95:85:31:ed:0b:e3:42:f2:51:
ea:48:a5:c6:50:bd:8b:cc:37:62:ec:a1:fa:e7:f1:a8:b0:20:
35:8a:bc:35:3c:c4:f0:38:97:ec:c3:58:33:9c:66:ec:cb:47:
04:20:eb:f3:65:9c:b3:d3:ed:35:9e:69:c0:f1:af:a0:c0:a5:
87:3f:22:0f:dc:99:8d:e6:66:ba:c7:96:d1:5c:0a:1b:6e:e2:
62:0a:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:23:59 2025 by rpki-client