Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: KawEOt5WXqiLy1gibNLrFccr5RQa6aRXEv3ft/LqbWM=
Subject key identifier: A5:14:0D:F4:2B:9C:99:F2:53:29:28:EA:E7:47:0B:AF:DC:BA:1B:5E
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 0198D4729730B46B717B2A66BC0D01707B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:16 +0000
Manifest this update: Sat 23 Aug 2025 01:02:16 +0000
Manifest next update: Sun 24 Aug 2025 01:02:16 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: 5t8jpxPYH85z95D1S2ksws//vzCjBYumVIyV8+fxhSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:97:30:b4:6b:71:7b:2a:66:bc:0d:01:70:7b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Aug 23 01:02:16 2025 GMT
Not After : Aug 24 01:02:16 2025 GMT
Subject: CN=a5140df42b9c99f2532928eae7470bafdcba1b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:e5:5a:16:2b:3d:e7:b4:2f:e4:19:d7:62:
34:46:e8:8b:d7:13:a6:17:10:ed:23:51:03:26:fe:
85:a9:81:d7:56:f9:24:b7:ce:09:dc:df:a5:54:dc:
22:ae:0e:3c:00:35:08:76:7c:42:cb:7c:de:b8:e9:
e9:a4:55:7c:d2:ed:bc:df:b6:ab:19:a5:2d:b7:98:
ad:53:ee:d6:e8:98:15:3b:04:a0:2a:af:ba:fe:83:
f4:e7:99:ee:7d:a7:f4:9b:4c:a5:6d:ce:88:65:f4:
df:79:b5:74:ff:88:8b:04:b5:fe:1b:2d:f1:1b:02:
e3:f5:a5:f2:22:83:fd:43:81:e7:47:bf:f4:10:05:
94:a3:16:1c:6e:d9:cb:ba:ed:a4:4a:e5:51:6d:f4:
61:28:09:9a:77:39:bb:72:be:ae:cc:3e:50:dc:f9:
c8:bc:98:b6:f7:84:82:64:de:18:0e:5c:94:e4:07:
40:eb:3c:d9:a0:df:f0:df:2b:8d:28:1e:51:09:8c:
9d:fb:8b:cc:bd:7b:6c:87:e6:d7:23:36:a6:9d:91:
b2:06:28:22:fd:40:b2:69:cd:0c:84:e7:d0:0e:fd:
d5:41:37:1e:82:d6:01:1d:da:6d:10:59:a0:84:13:
f2:16:13:84:4d:14:0b:80:90:73:88:ef:b3:40:d7:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:14:0D:F4:2B:9C:99:F2:53:29:28:EA:E7:47:0B:AF:DC:BA:1B:5E
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:dc:29:05:57:26:b6:da:8d:32:26:c0:36:63:63:20:74:ba:
93:d1:f9:bc:a8:ae:17:f9:8d:f5:9f:68:8a:84:ea:f4:85:99:
be:fd:78:31:2d:4e:d0:54:c0:71:52:a2:e1:0f:c6:45:2d:0f:
f0:99:02:e4:fb:f3:8d:af:c4:86:09:66:b0:f9:c8:68:3b:da:
e6:25:5e:bc:5f:c4:94:a0:f8:14:2e:61:a3:1f:3b:b9:13:8b:
cf:e4:b5:97:dd:e5:86:74:23:e6:96:28:54:46:7d:b0:90:cd:
f3:32:66:ec:3f:55:58:46:3a:1a:57:39:c2:0d:66:73:81:f7:
61:00:01:a6:c4:47:bc:f0:d7:6c:75:35:b1:84:f0:60:35:5b:
3e:d0:70:8e:3e:9f:08:34:ed:bf:78:58:9f:d5:14:c0:2b:c0:
8a:92:13:33:08:13:60:b7:5c:0a:25:93:0f:b6:6c:d3:de:ec:
07:7c:bb:93:2f:7c:80:dd:63:f6:5b:6d:3f:62:b8:d0:c7:6b:
00:64:7e:19:2d:e2:82:5c:65:b9:f7:91:2a:2b:fd:5f:27:cc:
64:a8:52:e6:2b:2c:85:a1:39:22:7e:6e:1c:3d:be:d4:38:b3:
b0:d4:ba:6f:87:91:c4:cb:34:45:7d:8a:73:0a:dd:ac:39:7e:
40:0a:68:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:52 2025 by rpki-client