Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: 8v+tdg3YUqmaJwL63ba61YT0Wf9x6sxCfgMGKOdp1sg=
Subject key identifier: D4:88:90:58:C0:94:85:86:DF:7D:8B:4B:87:A2:5F:7A:F8:C5:27:E2
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 0199FC8F5B5DA0F7A571E4EABDDE77519409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0E6B
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: RBZXIQN26/GKXwj/g6zoF6AjTGzwsV1XbZVCilvo0mQ=)
2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5b:5d:a0:f7:a5:71:e4:ea:bd:de:77:51:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=d4889058c0948586df7d8b4b87a25f7af8c527e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:0e:fb:e1:90:3e:72:7a:a8:0b:27:8d:34:
fc:5d:da:e2:b5:a3:7b:69:0b:ac:8a:d0:42:db:28:
85:a7:3f:8e:73:ef:08:12:7a:77:07:8f:96:ec:33:
e8:f8:ef:69:c4:48:74:20:dc:a0:93:30:77:19:33:
a2:e4:11:c9:f6:86:7b:26:e6:8e:74:eb:ad:4e:00:
bc:c7:43:bb:7e:c5:fb:6c:cc:b3:21:fb:a6:70:45:
1d:96:7b:6f:70:09:6f:a4:c2:36:f1:3a:81:8f:99:
b5:9f:1c:de:3b:86:96:03:29:93:cb:35:b6:b1:d2:
bd:49:cf:88:01:09:47:16:31:9b:49:f1:09:5b:3d:
8b:36:b9:4a:05:e2:19:08:d2:28:ad:58:19:41:8b:
83:80:44:0a:fe:ce:39:fc:e9:ff:25:7f:14:80:c4:
10:42:9d:d0:b2:d8:a8:8c:6b:d3:aa:85:6a:61:31:
ab:3a:65:f2:c9:1d:3a:80:0b:57:d7:2d:03:ca:f4:
0f:56:20:37:26:c1:fc:cf:f7:5d:70:61:75:4a:ff:
f5:51:44:34:9f:66:f3:fd:bf:96:af:5e:bd:dc:b1:
51:0a:b7:6f:fe:46:01:1b:97:fe:dd:a3:9b:0e:51:
a6:13:96:c0:f3:e2:cb:31:ff:1b:05:98:52:04:1c:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:90:58:C0:94:85:86:DF:7D:8B:4B:87:A2:5F:7A:F8:C5:27:E2
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e5:c1:39:b6:36:14:16:20:9a:57:ea:14:fa:de:11:a2:55:
c5:69:3f:1f:d1:97:33:47:3c:ba:e2:90:2a:4e:e8:10:10:16:
a3:52:86:2a:61:6a:68:2d:51:ef:3b:ea:17:a7:f5:2b:30:b6:
71:f5:6a:c7:78:83:22:38:42:84:81:73:0b:66:10:1a:72:3d:
59:2e:92:fe:ca:34:eb:b5:df:ac:a6:4e:7e:30:ed:f0:19:81:
5c:49:4c:94:04:af:3b:f1:0e:44:6e:8d:d7:fb:6d:5b:d3:85:
d5:ea:a6:62:b1:04:95:52:4e:09:05:ba:6d:c1:55:ba:e6:e0:
9e:60:9c:34:bc:56:d5:61:66:88:50:1e:90:7b:b9:d7:a9:f7:
c0:be:7e:9c:ff:46:cf:de:1d:61:fc:1e:7b:cf:38:16:cd:f6:
d9:2d:57:a0:4e:00:6d:d8:64:99:87:c8:7b:19:ce:a1:59:23:
0f:09:60:c0:04:2f:fa:13:be:7e:7e:54:5a:1a:13:e1:fb:52:
1a:49:56:b5:01:0d:f3:e6:0b:19:1d:2a:2a:8b:28:e4:f1:3a:
5b:92:2c:22:17:f6:db:78:f4:68:9f:54:63:ca:a1:df:a8:6a:
3f:d5:04:80:db:fe:a6:d2:11:ff:b9:06:56:99:96:f4:e8:b8:
5d:0b:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:56 2025 by rpki-client