Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: BSGt20vg/FrTXkEDwPtNLwGavD7BIFNgLKsTorr3zgc=
Subject key identifier: 77:3E:95:C2:DE:B8:21:B9:1C:79:B9:70:F9:CA:A5:C9:3D:9B:F5:03
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0197C1C8F8C0356918C8C38309337B706185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 0F29
Signing time: Mon 30 Jun 2025 17:01:02 +0000
Manifest this update: Mon 30 Jun 2025 17:01:02 +0000
Manifest next update: Tue 01 Jul 2025 17:01:02 +0000
Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=)
2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=)
3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: BXHcFEveac1BHzQcxkKrOXT7CXdq/qbK6rU7754Pb50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:f8:c0:35:69:18:c8:c3:83:09:33:7b:70:61:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jun 30 17:01:02 2025 GMT
Not After : Jul 1 17:01:02 2025 GMT
Subject: CN=773e95c2deb821b91c79b970f9caa5c93d9bf503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:43:ec:eb:f4:6b:1f:2a:ce:fb:e0:61:a1:
85:8b:dd:9f:4c:a2:e9:f7:86:66:b0:4d:82:a2:e4:
8a:bb:49:c3:1a:11:42:4d:62:c5:1c:6a:36:ff:e0:
13:7c:eb:02:f2:0c:cd:29:7c:7f:a0:89:2f:5f:94:
f7:6b:bc:ce:36:8e:18:4e:05:f2:df:3e:f0:08:a7:
9f:e7:03:9f:67:bc:1a:0f:d5:02:93:49:17:be:f7:
94:dd:51:a1:a3:74:ae:12:db:1f:76:e4:b1:15:25:
15:40:2b:bb:f1:89:73:42:9c:c9:48:51:71:bb:89:
e6:f5:db:bf:b0:03:4f:51:48:fd:74:19:66:3e:74:
00:d8:3d:bc:4a:bc:26:34:b2:db:87:2c:ce:2c:ef:
74:ec:89:e0:6f:98:02:68:ac:bf:00:6a:fe:db:ac:
b7:05:e2:93:98:56:08:4c:26:9a:44:66:bf:e3:02:
4e:e0:a4:11:c0:44:54:9d:61:50:90:44:5f:25:c1:
ec:94:a2:ee:d7:9a:bb:0a:56:f5:33:3c:0b:e3:f4:
75:42:74:78:0e:91:93:37:cf:1d:90:c6:81:93:48:
24:27:34:e1:fe:3e:97:35:41:2c:5c:5b:4f:fd:a8:
a6:66:ac:49:76:c0:a0:e8:96:53:54:35:81:f0:e7:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:95:C2:DE:B8:21:B9:1C:79:B9:70:F9:CA:A5:C9:3D:9B:F5:03
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b2:9d:d7:69:3c:c7:04:a0:e1:40:40:7a:9f:15:ed:c8:f8:
22:07:9a:30:13:0a:85:5e:7a:e6:8d:e6:a8:cb:4c:0c:1e:c8:
eb:94:e4:aa:56:2a:98:88:e1:7c:0b:94:b3:f9:db:f8:2d:8c:
d6:71:89:ce:40:1b:3c:8e:94:12:f9:f1:e7:b6:47:af:4a:e3:
42:0d:bb:04:fc:0b:4c:4c:61:e8:c4:62:52:b0:b5:23:ff:5e:
42:17:30:6a:6b:da:2e:74:07:cd:04:cb:e6:ec:d4:36:bc:66:
29:45:e0:d3:2d:fc:85:e0:9e:f8:f3:3e:ec:29:dd:6a:98:cc:
ec:ca:11:ca:13:f1:e2:88:8f:fc:77:66:63:f3:86:b9:68:3f:
b4:9d:a5:16:89:81:e3:5e:82:af:67:b1:8d:4a:05:19:90:21:
3a:79:7b:39:78:4f:27:36:10:ce:24:e6:96:ea:1b:93:a7:a7:
cc:ff:77:c2:62:af:c5:30:35:8e:89:e7:2c:b5:66:f6:b2:46:
b8:3d:fb:db:71:ca:7e:4d:e0:fa:bc:7f:e9:75:c3:12:95:6d:
cb:10:b1:a8:0f:3f:76:4a:16:cc:5b:ca:a3:8e:dc:a7:00:86:
2d:de:81:a3:8a:a1:03:5d:be:37:1c:2a:30:c9:cc:1a:9e:bb:
9e:67:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:26:58 2025 by rpki-client