Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: X/KMPBkn0r6uHkVXFu/C24dg5O4z6R6bDPkpZbzOq0U=
Subject key identifier: 97:C3:DA:2A:8A:D8:8A:6A:C7:A3:41:53:27:F9:65:48:23:F9:78:17
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019859468628356C720C1CD98B28E707BE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0CEB
Signing time: Wed 30 Jul 2025 03:00:50 +0000
Manifest this update: Wed 30 Jul 2025 03:00:50 +0000
Manifest next update: Thu 31 Jul 2025 03:00:50 +0000
Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=)
2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: XDL64qYYLgomFVOTlvL6hCETz9JqHB6jRVhNxXdxMdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:46:86:28:35:6c:72:0c:1c:d9:8b:28:e7:07:be:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jul 30 03:00:50 2025 GMT
Not After : Jul 31 03:00:50 2025 GMT
Subject: CN=97c3da2a8ad88a6ac7a3415327f9654823f97817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:f1:07:5c:e4:5b:d1:5c:ad:44:39:5a:71:
d5:5e:d5:33:cd:aa:0d:f2:98:4c:69:4a:3d:ac:8d:
06:b3:d8:58:5c:1a:07:10:86:9a:28:bc:38:5e:2f:
a6:d7:4e:de:09:16:f3:5f:fb:af:61:d8:8e:33:db:
2e:d7:81:dc:a3:50:c2:a0:2c:c8:34:a0:08:6f:ff:
d9:1d:43:d5:47:69:5a:0d:95:ab:e3:77:d2:1c:a4:
53:a8:39:d2:7a:8f:bd:8d:26:bc:08:77:5c:ef:df:
f4:6d:d5:37:24:e8:d4:22:dc:94:64:63:4c:ab:9d:
be:50:35:51:ab:e7:d9:06:79:f1:ff:bb:43:55:d6:
6e:69:80:39:76:73:f3:a5:d4:3f:a9:4e:74:b7:77:
72:37:1d:b5:ca:7c:a3:81:2c:8e:97:9f:af:98:b5:
2c:5f:02:96:96:53:9f:86:69:8f:9b:7a:58:f1:89:
f6:1b:5b:8e:8f:f1:8e:a0:43:a9:bf:f7:18:40:21:
5c:04:4e:61:04:a7:a1:d9:b9:e1:b2:10:63:a6:f6:
a7:07:3c:4a:5d:0f:bd:f0:96:58:cd:7f:2e:79:1b:
4d:35:35:bf:f3:83:c9:59:ec:f8:5f:8c:0c:b2:e3:
7f:eb:3e:46:6c:92:e7:a9:e5:27:75:e1:54:fb:17:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:DA:2A:8A:D8:8A:6A:C7:A3:41:53:27:F9:65:48:23:F9:78:17
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5d:9c:c6:e8:a4:3f:7b:c7:45:f5:d3:4d:86:b4:e0:d3:30:
49:8f:3c:05:35:26:fd:f0:1e:16:c7:af:f6:ac:cc:f2:37:d9:
eb:6b:13:c3:1e:f2:4a:83:28:17:f4:a0:51:67:2a:4f:56:9c:
80:e6:00:95:d5:95:a9:99:df:36:25:3b:86:06:8a:d2:23:0e:
b3:65:15:94:63:0d:89:41:23:26:52:5d:49:09:49:97:b4:43:
db:eb:86:4c:52:e8:d9:ae:a6:b5:04:c6:a9:ee:3a:2f:ba:1c:
ab:84:ee:6d:27:24:a7:8e:2a:a9:e9:df:49:8d:1f:7c:a3:ca:
86:3f:ba:6b:8f:e0:38:4a:6f:9f:91:5f:be:4f:78:f2:e2:6d:
ed:60:d3:6a:66:7a:3b:a2:1b:d0:b8:53:8c:3a:5e:89:9b:c3:
55:b3:03:13:d8:9e:ff:f1:34:18:6d:42:52:4f:ce:e1:7f:84:
ef:d6:81:ca:68:7b:3c:08:45:e8:c7:32:1f:e7:1d:77:f8:54:
fe:ff:1c:e1:8a:29:a1:2e:73:27:e4:11:64:2e:a2:95:a0:b4:
19:fe:be:28:24:53:19:da:27:5f:ac:06:19:d4:dd:01:67:58:
d5:57:c4:15:dc:7b:ec:18:49:10:eb:9e:09:fd:90:fd:98:61:
27:ea:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:04:37 2025 by rpki-client