Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: z8QQRPrZAzT2V3O0cUA5BPDNVYtFgdCYnPmA9kESsjk=
Subject key identifier: 4A:2B:47:40:CA:24:84:9B:B4:27:09:9E:A3:42:54:64:8C:35:07:CB
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 0198462D2BAFB9A7FE4D3025F4B9F26FF0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 1549
Signing time: Sat 26 Jul 2025 10:00:22 +0000
Manifest this update: Sat 26 Jul 2025 10:00:22 +0000
Manifest next update: Sun 27 Jul 2025 10:00:22 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: O3U4cKmN2jsoY2OZ7WTacnwSU3mVDDZ8olu0AsS9pYY=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:2b:af:b9:a7:fe:4d:30:25:f4:b9:f2:6f:f0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Jul 26 10:00:22 2025 GMT
Not After : Jul 27 10:00:22 2025 GMT
Subject: CN=4a2b4740ca24849bb427099ea34254648c3507cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:a4:e5:73:00:1d:b3:0b:72:5d:b9:af:59:
d3:e2:83:3b:35:e3:a3:0a:11:e8:23:49:af:9c:2b:
c3:a4:fa:49:09:98:1d:d9:97:65:da:37:7d:19:06:
79:82:a4:39:38:e8:ec:21:7b:81:62:c2:83:6c:3d:
e4:de:52:29:dd:7b:f0:31:18:4e:6f:27:4c:6e:8a:
fe:82:63:d6:bb:55:45:d2:9e:51:e8:fc:e6:d1:06:
8d:ec:e1:86:ca:11:6f:9c:27:e3:cd:f7:79:6a:c4:
74:7a:f7:3a:60:f5:68:a7:1d:50:d1:a6:44:86:36:
6f:e4:cf:14:92:12:ec:8f:72:7d:5b:3d:09:de:ac:
8b:9b:8c:c3:ec:07:f3:e9:97:ce:1b:f2:05:b2:0e:
50:ba:25:8a:8c:26:1e:25:37:57:b7:c8:b1:1d:da:
9a:e8:e2:b8:9f:34:be:ef:fe:ee:ae:27:5e:48:0c:
c5:27:c9:c3:99:b3:7e:5e:a0:50:86:8c:07:6c:7b:
61:ca:f7:6b:13:01:2c:f9:06:ec:f6:e2:cb:9a:33:
80:a2:82:4c:0f:9c:b4:17:17:c0:7a:ba:2d:9e:bf:
3f:29:dd:6b:31:ce:cc:04:f0:42:dd:a9:50:fa:a1:
ac:9c:cf:a5:12:19:ec:a7:9c:89:91:8f:02:6d:75:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:47:40:CA:24:84:9B:B4:27:09:9E:A3:42:54:64:8C:35:07:CB
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:95:ae:6c:58:46:3e:67:a8:f9:84:c9:48:ce:3f:77:dc:6e:
3f:57:59:a1:b5:23:b2:76:40:e0:9b:95:94:80:54:f9:92:2a:
5a:07:8c:c3:73:4a:26:78:65:aa:6c:b4:72:98:fa:40:f1:8e:
49:db:57:92:e9:18:0b:58:41:aa:28:90:40:58:2c:d2:6d:88:
a6:83:4f:63:a4:11:b0:57:0c:ed:e3:78:84:ed:40:2f:64:d8:
b8:b1:14:54:d9:bb:01:cc:fe:e9:2a:92:7c:6c:08:2f:7d:50:
ff:4f:3c:28:9f:3b:ce:a1:74:3a:8f:a3:0a:ae:39:59:83:d9:
52:f4:58:9e:77:9a:3b:c4:4d:64:f8:ca:ec:ed:5c:4b:0e:7b:
84:21:1e:2b:9f:c0:49:22:c5:fa:e1:e1:b4:6a:b7:35:1a:d9:
e8:51:f2:cb:aa:ac:32:06:f2:f0:58:a4:6b:da:cc:32:f9:e1:
63:0a:92:19:a7:61:46:68:54:f1:b4:55:98:b0:50:3c:1d:88:
bc:00:77:70:3d:49:7f:7f:0b:4f:ed:5e:e4:99:bc:e4:b1:14:
b1:5f:bc:95:5e:84:3e:7a:8b:1f:eb:3c:d3:8e:cb:e3:14:a9:
34:5a:4f:17:5c:53:b7:3b:ab:b0:51:42:33:26:1c:26:39:bc:
75:c6:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:28 2025 by rpki-client