Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: PHZw2M2kiyibQ8mFnANl7p3bJ/7RBR9FObU7sonXQMo=
Subject key identifier: 8C:F4:27:5C:CB:D0:FE:1F:7A:76:8C:81:76:56:E7:9F:CB:6D:1B:81
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 01984A40C61222EE40ECBA1E184C96DDCEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0D8A
Signing time: Sun 27 Jul 2025 05:00:15 +0000
Manifest this update: Sun 27 Jul 2025 05:00:15 +0000
Manifest next update: Mon 28 Jul 2025 05:00:15 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: dVhRCjd1uvYYoz/NNCgEIgQxwVlvX4XdXvqVjhwn/Aw=)
2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c6:12:22:ee:40:ec:ba:1e:18:4c:96:dd:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Jul 27 05:00:15 2025 GMT
Not After : Jul 28 05:00:15 2025 GMT
Subject: CN=8cf4275ccbd0fe1f7a768c817656e79fcb6d1b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:55:29:b0:c4:e0:b1:8a:8d:d0:27:c1:b3:
cf:fc:9c:e1:95:9a:0a:86:4a:8b:19:1a:78:b1:6a:
db:04:f0:bc:70:45:98:1e:23:1c:18:a4:48:9c:bf:
02:43:7c:cb:e5:87:19:e9:29:e3:36:65:01:94:44:
c3:88:6b:9e:9d:d3:ed:7b:17:44:91:a9:9a:a7:7b:
f3:95:2c:10:6d:84:8a:7a:99:28:6c:a3:37:dc:bf:
47:20:29:9e:8e:8f:96:89:3c:49:19:73:e7:7c:b2:
ed:8b:88:5c:b4:fc:30:10:c3:6e:51:c4:f5:91:c0:
0a:18:a5:4e:7f:85:58:56:48:d7:2d:a5:9e:90:e2:
92:16:6a:37:93:48:60:8b:6d:26:10:4d:7a:7e:0a:
88:55:88:b9:4f:78:30:cb:23:e2:5d:3d:71:94:f2:
2f:f9:98:99:65:6e:ae:ed:a7:3e:29:c3:bb:65:d0:
e7:50:b0:52:fc:79:34:05:05:a1:52:7e:bf:cc:80:
2c:3f:f9:8c:85:8a:8c:8b:b2:bf:ff:d8:ad:63:1a:
a7:5a:67:c3:18:ea:c9:e9:c2:97:63:2c:9d:b4:3d:
e4:1e:4b:79:d8:66:eb:eb:21:d7:c7:fe:32:d4:0d:
12:30:a1:57:50:a8:84:de:4b:b8:b4:30:df:a1:55:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:27:5C:CB:D0:FE:1F:7A:76:8C:81:76:56:E7:9F:CB:6D:1B:81
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a3:f9:0d:cb:15:55:97:23:03:bc:8c:d5:48:59:aa:1d:61:
62:f2:7a:96:0d:71:a8:ee:d7:8f:cd:4b:fc:05:01:9d:0d:e8:
97:e4:7b:b4:3d:39:49:52:d8:3c:1f:9c:cf:9e:a1:85:96:c9:
21:80:54:2f:c8:ad:be:47:22:ca:49:3e:e3:3e:46:e3:52:45:
56:9d:88:5b:5e:ac:58:e3:33:a9:22:ce:a6:43:46:43:d6:5e:
5a:52:0f:2b:2e:94:16:4f:f5:70:84:a4:7d:26:bf:ee:8c:b0:
e9:d0:8b:b8:ff:58:e9:b3:3a:79:ec:63:9a:cb:13:83:45:cd:
03:4d:e2:e4:05:a8:50:27:d5:23:e5:fd:66:c0:87:ca:6b:6f:
7e:06:01:1f:49:18:ca:05:ef:9c:1e:da:85:c7:48:07:38:83:
f7:f6:f4:e8:47:c3:b8:26:93:23:2d:84:9e:5c:a6:86:45:90:
52:36:3a:37:6f:2a:0c:92:38:ba:65:97:ba:a1:d1:5c:07:72:
f9:f0:96:4c:6e:f9:57:8f:9d:6f:29:c0:ff:8e:6e:09:7e:84:
d2:d5:1c:f0:75:27:f9:b1:11:51:2f:23:a0:fe:1d:f8:f9:a0:
0b:85:f1:9c:2e:f0:66:c4:4a:b9:74:66:de:61:72:aa:51:2d:
cb:ac:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:18 2025 by rpki-client