Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: tZCxmT3YhV0Y893o8p3JH92pjy9YT/Dw8lyOXpd3TsU=
Subject key identifier: 3B:DD:0C:B5:CE:E6:AB:BC:F5:23:62:D8:4D:08:F1:0A:38:56:DD:35
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019A1A61E03B29804442B211AEF64DF1432F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 1060
Signing time: Sat 25 Oct 2025 08:00:13 +0000
Manifest this update: Sat 25 Oct 2025 08:00:13 +0000
Manifest next update: Sun 26 Oct 2025 08:00:13 +0000
Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=)
2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=)
3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: rxvaEN1qBF53GHFDNN/m/a2i4RRufPzTWHr0v2cZVcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:61:e0:3b:29:80:44:42:b2:11:ae:f6:4d:f1:43:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Oct 25 08:00:13 2025 GMT
Not After : Oct 26 08:00:13 2025 GMT
Subject: CN=3bdd0cb5cee6abbcf52362d84d08f10a3856dd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:b9:0e:28:91:14:ee:ab:c7:62:02:1c:44:
5c:79:14:09:80:28:a7:7a:1d:eb:a8:99:ba:24:6e:
3d:53:10:c9:05:b8:13:f2:72:65:da:71:38:34:3f:
4d:a9:ff:4b:e8:e4:e7:be:2d:13:93:c8:58:67:32:
ef:60:90:11:47:f6:2f:a7:2b:e4:b5:ef:81:4a:76:
87:fa:3b:e0:de:1e:c9:60:dc:dd:88:94:4f:96:9f:
9b:38:29:64:15:c0:52:09:f1:56:3e:10:18:10:98:
1e:d8:08:02:6a:58:0e:60:c5:10:ca:bf:7c:0d:40:
64:97:ae:5f:51:0d:26:d3:21:18:df:51:b2:18:08:
8f:9a:09:3d:2d:98:a4:41:85:80:4b:75:a9:97:66:
33:b5:f8:da:ec:5b:39:e0:00:1b:8f:c7:97:98:4f:
5a:54:0a:1b:ab:ef:12:00:33:4d:37:6d:ed:72:93:
31:d0:ee:f8:b3:87:97:01:de:fc:5e:79:bd:34:47:
f6:24:80:39:00:97:f3:f8:dd:37:61:a6:ad:6a:ad:
0b:cf:7c:67:4a:44:89:9c:fe:9c:56:9c:09:d0:4c:
39:bf:b9:32:a2:dd:36:78:c5:2a:30:ca:f9:e7:74:
81:d0:82:8c:a7:1b:b3:e2:76:28:d0:98:0b:f8:52:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:0C:B5:CE:E6:AB:BC:F5:23:62:D8:4D:08:F1:0A:38:56:DD:35
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:83:1a:47:53:6c:c0:18:13:21:1a:0a:2b:3d:8e:c2:34:d6:
38:56:74:40:d3:ca:65:a9:e9:89:7b:10:7c:ba:db:9e:d3:69:
8c:de:e7:cb:7f:9e:bd:71:a2:81:30:20:93:ae:47:65:16:4e:
21:84:dd:b4:9c:34:96:52:a9:83:0c:4e:e1:80:4d:8a:06:90:
78:b0:98:d6:89:db:fc:69:ae:b0:39:ec:48:ec:59:7d:49:13:
33:66:13:43:17:ad:6a:12:ae:e3:a2:87:10:f9:e8:f1:31:c7:
43:5f:84:7a:04:b1:ab:7d:8b:94:24:f2:88:9e:aa:a6:d3:e5:
50:9f:fd:61:ec:0a:9f:bd:9a:46:54:10:60:dd:b1:66:df:f4:
5c:b1:be:27:0d:38:f9:f5:23:11:88:0f:a8:82:c0:12:7c:29:
91:1c:54:7b:ac:9f:1d:ee:a0:9c:3e:f2:fa:c7:a2:69:3c:e7:
e9:9c:62:e0:fa:a3:10:30:77:90:1f:e9:09:aa:b8:81:6e:55:
44:c8:28:2c:7d:dd:2a:68:15:f5:e0:19:9c:6e:ea:fd:e1:2b:
f4:9c:02:f2:6a:9e:ec:f5:56:97:f9:1c:73:0e:d1:9f:61:b3:
63:6a:80:15:c9:61:a1:21:62:1e:b3:70:de:40:b5:6f:f1:e5:
25:fd:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:27:22 2025 by rpki-client