Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: hISPHU/P1DsXJv/3zueXPeurWVAl/6ZATXWVgF+maR8=
Subject key identifier: 30:A6:A6:DC:34:DC:32:A1:B1:05:2D:79:54:74:58:A2:26:17:F5:35
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 0199FC583624701BB9CB28845709A1E19D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0DC4
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=)
2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: PTvRZNBxAhbR07LQVuWcMMeppA11JddzL2NaClIv4Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:36:24:70:1b:b9:cb:28:84:57:09:a1:e1:9d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=30a6a6dc34dc32a1b1052d79547458a22617f535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:61:6f:78:d1:2d:70:7c:ee:cf:09:8a:aa:
9a:55:89:12:ae:d8:06:af:03:f5:6d:3f:c5:c8:9f:
d7:58:0d:98:8e:54:41:1a:ae:fa:dd:f4:39:9d:ff:
51:10:de:0d:2b:bd:62:13:6e:3d:dc:b4:6b:3d:57:
6c:c1:79:4d:2f:f4:b0:8f:98:da:1f:0b:3a:c7:42:
88:fd:d6:0d:1a:90:d3:23:19:1b:5d:c4:85:f4:b4:
f3:e5:f6:fd:e6:40:4d:9b:04:5c:96:53:a6:3a:95:
aa:b3:03:7c:2b:6f:1d:47:36:06:34:f9:65:8e:a3:
9b:d1:fc:88:7f:3e:66:e1:4f:d8:d6:b3:70:f4:af:
49:35:74:a4:3a:b8:79:99:b2:bf:62:71:b4:30:c8:
4a:25:ed:41:bf:3c:18:15:2f:f1:74:e1:e3:b3:b7:
a3:18:d5:c6:6b:82:27:3f:79:80:33:e8:56:f6:55:
8a:ec:20:84:a0:54:de:b7:ef:c2:f4:c6:9e:cf:f4:
34:45:4c:2e:8a:e9:86:bc:8d:5f:2a:01:66:10:a7:
37:4c:4b:10:2c:35:89:d0:e8:92:7e:17:ef:c4:7d:
87:63:f2:0f:81:d2:c6:3f:5c:2b:a0:92:88:2b:1b:
f0:78:6a:41:89:55:66:b8:09:3f:c5:f8:82:01:61:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A6:A6:DC:34:DC:32:A1:B1:05:2D:79:54:74:58:A2:26:17:F5:35
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0b:0b:6c:31:e9:1c:38:39:f4:4d:62:1c:b1:13:bb:cb:fe:
ee:2f:a9:2f:7a:46:fc:5c:09:4e:86:58:c5:64:a4:87:f6:dd:
0d:ee:38:81:d8:80:53:e5:1c:e3:20:54:eb:c2:45:f1:71:54:
bd:84:c5:2d:01:d4:20:2d:e0:73:7b:ad:08:18:10:6c:81:f3:
c8:76:9e:ef:3c:35:23:45:e3:33:58:66:f4:75:f2:49:9a:4c:
da:cf:b7:9e:03:b7:89:02:2b:96:68:71:14:18:94:e6:98:d5:
49:c9:9b:00:93:66:71:77:ce:9e:cf:fa:64:f0:ff:4a:0b:30:
28:f8:e7:ef:53:29:c9:53:18:41:58:f2:2d:59:c6:5c:9f:8a:
ce:02:11:55:4d:5a:71:66:2b:f9:04:49:aa:dc:f4:2f:2b:71:
f0:f7:a4:59:e1:2d:f8:a3:20:f2:fe:83:0a:60:bb:41:8e:93:
04:82:5d:66:00:31:87:8f:41:94:db:34:e4:c6:06:4c:ce:b0:
20:2f:f6:4f:be:56:9f:ea:d2:c9:e8:3e:6d:7a:95:99:6f:c0:
ba:03:e0:db:0e:a2:98:37:20:7f:96:80:a3:8d:a4:9a:37:c8:
c2:f2:47:2e:c7:bd:08:1e:02:d2:6a:f1:95:0f:75:be:4b:f0:
9e:0a:95:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:07 2025 by rpki-client