Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: ojQr4xIHMMbJbOlEM/IY3QOMG8+QLDiW9pXwxN6sOAQ=
Subject key identifier: 1F:1F:5E:E6:C3:47:31:C4:D3:40:55:52:DA:A1:48:C1:E4:AA:25:E8
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 0197B6A1ABB9E7783F6BDDB36D225256A794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: J0VWuTNDBM9jc591BLwq5BiGCRSFes9s7DyhJtcqRA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ab:b9:e7:78:3f:6b:dd:b3:6d:22:52:56:a7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=1f1f5ee6c34731c4d3405552daa148c1e4aa25e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:98:bd:4b:61:4f:7f:f1:e6:3d:ca:c7:f7:
7b:e6:39:06:cb:cf:16:f5:ca:a9:42:d9:5e:04:0d:
44:05:b2:e9:16:44:8a:8b:bb:d4:db:c5:cf:80:b2:
6b:ed:a3:58:0d:9f:5b:0e:2b:71:5e:77:85:21:1d:
0e:31:8b:17:00:5f:01:10:64:f2:d9:dd:ce:a7:68:
d0:87:10:6a:55:9b:5b:d3:55:2d:58:11:34:00:6b:
42:7b:5a:e5:4a:ef:19:c2:5b:13:37:15:2e:b4:b8:
ef:4a:64:71:37:f0:b2:a0:42:b8:0c:41:47:3f:52:
ba:8a:3d:f3:72:0a:16:69:22:9e:a0:08:81:cd:a7:
8d:8e:0c:8b:7f:80:20:80:fe:ac:42:a4:86:e4:84:
e0:65:04:fe:23:12:79:fd:b4:32:32:2d:38:c3:47:
d8:e6:f7:f8:43:4e:5d:b4:08:ee:12:51:32:1f:80:
92:8b:a4:dc:79:a6:d6:6e:42:a4:9e:ca:6e:b9:3d:
ae:e5:4b:92:a9:15:d6:a8:df:5c:95:39:85:bb:d9:
79:b9:a4:a1:5c:a3:b4:81:65:b2:7f:e4:1e:ff:aa:
92:d0:7b:ec:2b:79:6b:cc:c7:c3:25:df:d8:32:6a:
00:96:20:d8:2f:ee:40:06:8a:b1:1d:16:54:b4:86:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1F:5E:E6:C3:47:31:C4:D3:40:55:52:DA:A1:48:C1:E4:AA:25:E8
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d8:eb:b4:8b:7e:fe:4e:bc:34:94:66:3d:4e:aa:90:c5:4d:
d5:7a:22:1d:c2:f2:f5:76:30:15:9d:63:0d:8c:8d:5d:a8:71:
32:fe:b8:62:77:6e:f3:c0:8c:2b:b4:17:c6:a4:55:a9:d5:c4:
11:a9:c4:d6:e6:ec:ba:62:b3:03:90:a6:88:d5:f1:46:ae:bb:
c6:1f:b4:4e:f7:f4:07:0c:f9:12:e0:a5:71:6c:db:fa:7a:f8:
1a:91:cb:0e:02:58:ff:b3:a2:a4:fb:04:75:34:1b:20:f0:12:
07:ab:d5:7f:e8:4c:22:93:fd:48:42:eb:b3:97:16:f2:1a:09:
95:ce:4c:7c:03:2b:aa:e8:41:d1:ee:3c:0a:50:2f:a7:10:51:
f9:05:08:77:f7:2b:16:a4:64:53:c9:e7:d6:83:88:d8:95:cb:
4d:d1:2f:dd:31:1c:f3:e6:0a:46:72:2c:81:ef:39:ae:d2:0c:
48:62:0c:ef:2f:ce:e4:be:a2:67:e7:2b:90:d1:e5:ca:b4:ae:
8f:b1:d7:d3:b7:f1:95:31:32:22:8c:03:72:16:71:06:08:ba:
43:13:76:40:7b:2c:24:1c:13:3e:87:c5:ed:48:40:35:ad:c9:
5a:70:ac:1e:18:f2:7f:4c:e9:b2:29:89:e6:37:29:33:8e:56:
fd:37:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:06 2025 by rpki-client