Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: sRJNkjDusQvU4/tSbH4b8/nXgM0vycmW/fLihQYqWCY=
Subject key identifier: D6:A3:FB:35:8C:DE:7C:F1:42:0C:51:F5:87:0F:87:12:69:75:5F:AE
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 0199FDD9C9304A26549AB5CA36F2F59E2B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:12 +0000
Manifest this update: Sun 19 Oct 2025 19:02:12 +0000
Manifest next update: Mon 20 Oct 2025 19:02:12 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: MrBJhPiSteCQZ7z7J0sBKZ65Xt9EOfEPNgNLonq0qCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:c9:30:4a:26:54:9a:b5:ca:36:f2:f5:9e:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Oct 19 19:02:12 2025 GMT
Not After : Oct 20 19:02:12 2025 GMT
Subject: CN=d6a3fb358cde7cf1420c51f5870f871269755fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:79:34:8f:7a:a3:f8:e4:32:59:06:48:64:e3:
cd:e7:1f:34:41:a5:94:28:40:78:ee:c8:94:ff:d0:
19:99:e4:94:93:e5:16:3c:64:de:3d:d6:29:8f:27:
a3:7e:15:40:21:39:98:6f:16:34:d0:75:a4:05:39:
a7:9e:7d:76:b8:00:f9:79:4b:e2:f6:2a:e0:68:72:
60:2a:17:22:37:1c:2d:96:0e:d7:8f:41:b6:ab:ec:
d1:b5:2f:1a:2d:4b:bf:a1:dc:2a:86:e1:99:f9:ff:
a7:e5:fe:70:1d:6e:65:66:46:8c:6e:23:36:4f:97:
a6:d6:f3:67:7e:cc:24:fe:2c:6b:37:e8:ed:b1:b2:
7b:9c:67:62:18:60:da:7c:a1:5d:e9:5a:a3:1e:6b:
ef:67:b2:30:ee:6d:75:1d:50:c9:94:23:62:68:70:
de:bf:84:eb:80:b5:3b:d3:92:d1:11:3b:ff:f1:b0:
e6:21:c8:d2:18:c0:99:20:63:69:df:83:2a:e2:69:
cd:c9:b2:27:b5:56:d2:fd:81:51:8f:c4:62:c3:8b:
34:1e:15:3b:5a:38:11:9e:d3:f7:04:90:c5:cf:49:
e6:81:59:64:43:f1:b0:be:98:4e:a5:01:7e:4d:24:
07:f2:27:0f:3a:5b:13:5c:dd:34:84:e6:f5:85:99:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:FB:35:8C:DE:7C:F1:42:0C:51:F5:87:0F:87:12:69:75:5F:AE
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:03:79:3f:fa:67:2c:91:61:3c:d9:55:a4:55:20:d2:42:24:
8a:af:96:e2:77:c9:72:ec:18:8f:07:30:33:d2:cd:f5:ea:39:
5c:56:64:50:1d:2b:24:13:a9:3a:fd:bb:bb:dc:3c:a1:ef:06:
dd:96:24:ed:ee:4f:cb:fc:13:30:bc:07:24:0a:59:4b:36:88:
8f:2d:ad:b5:92:9f:26:41:38:16:68:f5:65:fc:24:32:b1:be:
8c:3a:fd:ea:39:7e:3c:ad:f7:f8:1a:e5:ee:d1:5b:d8:29:fc:
3e:03:0b:3e:9e:6f:21:5d:2b:17:84:3d:4d:a8:fa:a5:bb:d8:
89:47:e8:29:b2:de:5b:92:d9:f6:e1:c7:69:a7:ac:1e:07:b7:
66:9c:76:9d:be:ed:7b:2e:e3:71:70:07:63:96:7c:c4:fc:dc:
8d:67:54:21:70:fe:7a:a3:1a:1e:ff:a3:16:5f:56:16:82:01:
94:4d:f6:a5:63:8b:6f:d4:e5:70:9c:d7:1b:90:1a:e8:c6:54:
0c:b2:34:dc:0e:f7:7b:4e:cf:b6:de:bf:16:cf:ef:aa:3a:4a:
e9:dc:1c:ef:fc:c7:9a:77:07:b4:63:fc:07:e0:aa:6c:2b:b5:
f4:59:cf:4e:90:a2:b5:f2:13:06:74:24:45:ef:5d:12:ab:b1:
a1:15:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:21 2025 by rpki-client