Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File: SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier: 9AHNVx5CvOlYoMdDQv6XoM7SHlANlR1mgMpxag3YYPw=
Subject key identifier: 65:6F:4A:35:F4:C5:25:BF:BB:07:5B:E2:E9:98:5C:D4:42:BB:E3:6C
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 0199FC8F8B6CAE5182D47EC4F158E88F3C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: ECLvjnzPvMhILY5f1CQV842xNgLDlDpAoq+Jz33zGoY=)
2: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
3: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)
4: aBxSYhVn_anxC7-03zZfXGAPrRA.roa (hash: 4z8vPSTGN/KrBGvUG7yKZHmMHGsa+QLaisXrVqvvKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8b:6c:ae:51:82:d4:7e:c4:f1:58:e8:8f:3c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=656f4a35f4c525bfbb075be2e9985cd442bbe36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:51:37:36:1a:1d:a4:73:74:49:27:4b:3e:
71:ef:14:bb:25:a6:94:db:cb:9e:c3:c0:33:43:b4:
d8:d3:05:85:8d:cd:91:11:d0:d3:2e:92:59:e5:23:
e2:30:48:cb:b4:58:3f:ca:8b:8d:2f:1b:b0:c0:42:
75:10:4f:93:48:df:18:67:d4:1b:d9:bc:16:5b:a8:
78:f6:38:76:23:c0:96:c1:1f:5c:f3:57:80:4d:4c:
8e:6a:cb:80:83:59:54:82:72:18:bc:42:be:f8:e3:
3d:c1:fd:3c:03:61:df:6e:e5:99:57:98:a7:70:6c:
ad:63:2c:70:94:7c:57:8e:57:79:88:7f:bb:c6:4f:
50:9e:de:7b:32:58:c1:df:d0:67:bc:83:16:c7:43:
b7:d9:7d:0b:c9:14:66:fa:d3:ac:ef:4b:2a:80:18:
f1:1a:f0:4d:27:ee:6b:ea:6c:7d:52:90:40:a6:5a:
f8:5d:96:53:0c:4f:4c:82:cd:88:17:bb:51:f1:3c:
b2:12:83:cc:ed:09:f8:81:10:dc:ed:eb:f8:69:5f:
94:c2:90:0c:03:69:4c:44:32:71:67:5f:9b:28:ae:
f6:83:45:8b:a5:35:da:33:0e:7e:5b:91:c2:dd:a5:
33:48:9a:2b:de:d9:08:1b:32:00:7b:e8:4f:ea:b6:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6F:4A:35:F4:C5:25:BF:BB:07:5B:E2:E9:98:5C:D4:42:BB:E3:6C
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d1:c8:73:5e:d3:11:04:e2:b8:26:db:5c:b6:e7:0a:34:e2:
79:84:73:2f:a2:67:65:5d:51:9e:57:17:17:46:c0:23:26:21:
f2:f2:8b:d5:d7:68:6b:fb:53:0c:85:14:dc:ad:e3:cc:b5:57:
9e:34:a4:70:c7:61:68:f1:2e:9c:eb:77:fc:86:7a:2e:f4:0d:
a5:eb:e0:03:0b:be:9b:d7:dd:f0:51:69:9c:5e:01:0e:86:a4:
8c:1c:45:35:f7:69:1b:5c:22:ef:06:fd:3d:0d:e2:a3:fd:6a:
0e:3c:36:80:12:05:d5:8f:66:1d:76:5b:a3:6c:cd:10:25:cb:
bd:07:13:67:9b:70:21:d2:49:75:37:f7:9d:09:f3:48:15:a9:
3f:97:dd:8e:b9:66:cf:1d:b3:35:d2:44:8f:a0:20:2a:3b:3a:
c5:c2:66:a2:b6:4d:25:3e:02:a9:10:33:a1:26:f4:02:98:9c:
5a:6f:63:d7:d9:8f:16:0e:90:b0:db:23:66:1c:cd:8b:80:93:
15:95:07:ca:b0:a3:84:40:e0:6f:22:e4:5e:9e:9c:19:ce:28:
e9:a8:be:ec:41:4c:9e:08:5c:96:ac:55:e8:33:cb:c9:ab:47:
df:48:06:c8:0a:c2:76:90:07:39:a3:5f:dc:66:b9:55:6d:79:
94:11:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:07 2025 by rpki-client