Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: x0UQI9pBR9X6Y36wo6J8TxLmGCghwpAn4BzxcIImNR4=
Subject key identifier: 98:63:3E:71:C6:DB:9E:34:C3:A0:8E:8C:1A:9A:0D:B0:26:52:10:7B
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 0199FC8F4B573A95D3E55B7CA6956B21F206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 162C
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: 0T9Hg05QbpdLZlEl91S0p9zsmO3ad+1Tp/jA4h7sIQg=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4b:57:3a:95:d3:e5:5b:7c:a6:95:6b:21:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=98633e71c6db9e34c3a08e8c1a9a0db02652107b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:dd:1c:0d:d0:b3:26:ca:d3:0b:3c:4e:67:
66:6a:4b:6f:f4:10:36:c2:4b:2e:58:56:c4:28:d3:
75:4f:0a:3b:31:3a:0c:6d:01:2a:c1:2d:fb:ff:ce:
f2:c0:dc:00:21:11:fe:dc:a2:88:d8:05:a7:e4:48:
5a:3c:d1:76:bd:83:a7:e0:98:39:7e:38:3b:2f:14:
83:9d:79:23:32:30:6a:d2:b0:ef:bf:d7:53:2e:c8:
6b:58:2c:3e:08:79:a7:5e:6f:1f:2b:b4:70:64:6e:
34:6c:c7:0f:83:d4:43:98:14:57:2e:97:fa:21:b1:
3b:ca:20:95:a7:80:a9:d8:3a:17:66:03:06:3d:bf:
d2:ae:47:56:e5:61:79:ed:a4:73:33:15:f4:5e:3a:
4f:57:7a:1a:19:bc:f7:23:00:3a:7c:f1:c0:16:1d:
8a:c7:50:a0:29:4b:63:40:42:b1:d8:98:82:99:ec:
7d:b2:bb:3d:21:46:f4:b7:7a:bd:03:85:07:d2:d7:
5d:bc:af:0d:c8:be:07:1b:b5:da:42:7e:26:91:4e:
6e:9b:22:4a:18:93:f4:21:24:2e:5d:75:a6:75:8c:
bc:4f:cb:e4:2a:b6:f9:64:d0:19:9b:b0:77:4a:0d:
d5:e0:7c:67:32:cb:25:85:0e:d9:56:d3:f7:77:c6:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:3E:71:C6:DB:9E:34:C3:A0:8E:8C:1A:9A:0D:B0:26:52:10:7B
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d8:ce:c6:12:65:1c:b7:71:6a:54:c3:8c:5a:c5:13:c5:09:
46:a4:6e:74:32:79:1a:e9:6b:b1:e8:41:b4:f7:23:18:bb:2b:
7d:f0:1e:e8:9e:89:c5:1d:8e:2c:2b:65:12:1c:32:9a:39:1b:
54:b7:72:75:38:44:55:a2:fa:0e:60:1d:56:4f:b7:d8:62:c4:
04:0f:dd:7e:c9:a3:6d:f9:d2:6b:4f:1a:cb:c8:d0:98:18:9c:
84:ad:2b:1d:2f:69:96:0e:87:47:45:51:ab:b2:26:ab:ef:ae:
3a:49:49:d1:e3:1e:59:62:b3:ac:f4:87:84:44:cf:66:d6:03:
5d:d1:59:bb:ec:00:05:7a:ea:97:33:70:bb:5a:a4:9d:b0:90:
3f:f6:16:e1:3a:6f:bf:b6:6d:10:6c:ac:11:db:9d:28:34:6b:
98:f8:c9:30:e2:f4:9a:fd:27:4f:a3:68:f6:85:d3:dc:db:e9:
32:90:d0:fc:19:77:6d:7b:d6:84:f3:c2:f2:a0:03:81:7b:c9:
cd:19:f0:f4:2b:81:eb:08:9c:be:ee:97:a6:b0:f1:5d:d9:6a:
f9:39:40:7f:76:b7:26:74:43:73:e4:cc:6e:fa:54:31:13:ab:
d9:a7:9a:bc:a0:00:4a:a6:e6:31:67:93:b0:d9:e4:f2:9b:c5:
cf:22:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:35 2025 by rpki-client