Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: 5jdZmO3h0tCgsdPWT/q/SqEB+iPf/u71ZyBI4lTybag=
Subject key identifier: 40:D9:BF:01:97:44:32:CB:40:29:77:43:9E:55:0A:CC:B9:35:E8:C1
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 01984D420D94223835F35859ECF0CE35A349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 19:00:31 +0000
Manifest this update: Sun 27 Jul 2025 19:00:31 +0000
Manifest next update: Mon 28 Jul 2025 19:00:31 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: 4Js5oWGt+hIfBUybYa7M5f6rqOHWN0suaLO6VnKjVT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:0d:94:22:38:35:f3:58:59:ec:f0:ce:35:a3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Jul 27 19:00:31 2025 GMT
Not After : Jul 28 19:00:31 2025 GMT
Subject: CN=40d9bf01974432cb402977439e550accb935e8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:78:d3:f4:59:78:75:f6:7d:d9:83:1e:12:
04:d4:65:2c:24:a0:4c:ca:e0:fe:98:43:be:1b:6a:
a1:e2:0c:94:e2:be:75:a1:65:ef:f8:f2:62:79:14:
87:79:6b:e3:75:a2:e2:2b:94:e8:e5:39:d4:92:28:
9c:60:13:18:81:7b:68:0c:48:fa:a6:8e:f7:7d:d2:
d2:02:77:60:4a:ed:cf:de:ec:58:b5:f8:36:48:29:
a3:38:69:2e:4c:50:16:23:6b:eb:2d:90:18:cf:56:
f7:b9:4a:5c:31:e3:c8:80:9a:59:65:fc:6d:c1:10:
31:68:69:0a:09:37:9e:5a:42:ba:06:e8:ad:4a:67:
41:47:fd:f3:db:5b:85:71:b1:01:07:01:58:28:a2:
f0:28:b7:d2:40:d6:ce:74:d1:ab:a1:58:66:1e:ed:
df:c9:0a:49:8e:29:23:fe:28:7d:20:de:7f:0b:84:
1f:74:5b:88:82:53:85:25:f0:28:f2:15:ee:55:67:
5d:e5:5c:1a:23:ac:97:78:86:2d:e8:da:c9:d4:44:
b0:c3:a7:91:9e:fa:1e:91:95:ee:d6:01:40:8e:08:
7d:30:c2:f3:59:6d:e5:36:24:eb:47:eb:d6:ce:28:
c9:d2:61:10:58:5f:43:0b:d8:64:0b:cc:98:d3:16:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D9:BF:01:97:44:32:CB:40:29:77:43:9E:55:0A:CC:B9:35:E8:C1
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:aa:0f:10:0d:16:44:ef:8f:9a:92:c7:1d:26:94:25:55:3c:
39:6d:d7:17:d9:2b:ad:13:90:47:a5:56:dc:96:62:57:fa:4b:
e4:2f:09:86:2d:f9:45:0e:52:7b:07:ed:d0:bc:99:c0:ed:ec:
87:a7:49:83:d9:aa:40:80:87:b9:df:01:aa:ea:5c:7a:c1:52:
be:84:de:cd:ed:8f:b4:8a:32:dd:66:35:33:4b:d5:3b:84:ff:
78:35:1f:70:a4:0d:ad:4a:8e:97:ce:a0:d6:29:53:94:8b:61:
e0:32:7c:f0:1c:aa:fd:cb:71:fd:b3:e3:4a:d2:24:0c:f5:4a:
ab:5d:f1:c5:82:17:1a:d4:82:9a:38:5f:7a:75:99:e0:61:1a:
35:90:60:f5:fb:9c:00:6b:12:b4:57:f2:01:52:0d:ce:d0:b1:
17:b9:e0:09:d5:55:6c:b4:8c:69:19:7f:8e:29:86:cd:d6:5d:
18:eb:67:78:6a:e3:00:2e:3a:0c:9b:aa:4d:8e:86:4d:09:12:
9d:76:ff:d3:51:b0:25:14:29:9b:23:18:c5:31:ff:10:e6:53:
2a:3c:35:f7:26:6b:d6:50:16:87:1d:52:8e:da:ac:28:da:43:
37:5d:80:b5:8d:f2:f7:40:bb:d8:be:c3:85:ab:28:db:31:a3:
a1:d0:c9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:44:54 2025 by rpki-client