Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: XMrMUGGPkUJkC7X8lofw7C5jjuqIVXpkCtIP5tMwvDc=
Subject key identifier: 87:5A:12:69:79:28:EB:98:10:54:80:F9:75:5F:E0:68:6E:A4:9C:8A
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019930B5E87C800E319977E0B9CAD39225AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 0FE7
Signing time: Tue 09 Sep 2025 23:00:51 +0000
Manifest this update: Tue 09 Sep 2025 23:00:51 +0000
Manifest next update: Wed 10 Sep 2025 23:00:51 +0000
Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=)
2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=)
3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: 9BtcRz98Hj3hEt9DeWH2C6ohKOEtghoU5o8z5a/0C7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:e8:7c:80:0e:31:99:77:e0:b9:ca:d3:92:25:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Sep 9 23:00:51 2025 GMT
Not After : Sep 10 23:00:51 2025 GMT
Subject: CN=875a12697928eb98105480f9755fe0686ea49c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:5b:61:2a:cd:45:64:b6:4e:34:3a:cf:b1:
13:df:3c:58:e6:04:3c:1a:96:87:77:fc:f1:f5:40:
0f:54:cb:76:41:bf:02:c3:70:62:63:f1:a5:44:95:
39:db:d5:43:d3:00:fc:ae:97:19:8b:45:a3:df:d5:
72:48:b2:0d:2e:ba:09:d7:c2:e1:87:6b:b5:e1:16:
d0:26:3e:d0:c2:f8:d4:fc:ac:90:66:c7:8a:1c:bf:
98:cc:7f:c1:77:3e:37:4a:ed:0a:90:b1:fd:63:b4:
e3:a7:55:44:48:c3:c8:64:8d:76:13:2a:72:a7:f4:
c0:09:26:d8:d7:ca:df:21:03:36:b2:b1:b9:f9:16:
cf:b0:45:24:a9:10:92:27:88:e6:a4:7c:2c:0c:c8:
71:bd:7e:5e:c2:47:cc:5b:15:50:e6:9b:54:a3:ef:
ca:4b:d8:99:4b:84:15:2c:85:cd:b6:23:a5:a4:ff:
56:d7:b5:84:73:c2:c8:27:a5:81:b3:b6:25:0d:dd:
e3:55:b2:49:63:99:a3:8c:31:5d:22:39:1e:33:d0:
a4:05:be:c9:c4:69:2c:df:76:65:c5:7f:45:89:1a:
af:ad:11:97:e7:46:54:d4:d8:55:66:a5:5e:ac:b3:
4b:7c:0f:95:d4:5f:8d:48:0c:b6:48:c0:da:73:ae:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:12:69:79:28:EB:98:10:54:80:F9:75:5F:E0:68:6E:A4:9C:8A
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:53:94:68:eb:32:f5:20:9a:81:d6:b0:25:f5:80:2e:33:70:
a7:a3:b5:94:be:ff:3b:c6:4a:a6:be:c0:8a:82:f2:34:21:e6:
80:3e:6a:07:7c:a7:fa:c0:53:42:c0:d2:90:7f:33:3a:cc:30:
2b:df:0b:32:34:33:9b:30:43:79:76:f2:9c:d5:ec:ea:2d:de:
56:b5:3f:3c:e8:fc:83:5d:37:75:3b:34:5f:69:23:b4:bc:42:
cb:76:05:21:79:82:a1:40:63:5c:0d:9a:16:67:b5:ed:2e:fa:
d4:08:75:49:da:57:40:70:b9:7d:8e:0d:b6:b6:ec:53:74:11:
1a:1b:b5:9a:f5:2a:7d:5a:9e:e1:77:d2:79:27:f4:41:a6:19:
6c:fb:ce:a6:5c:80:be:5a:8c:d6:f7:19:ff:62:30:47:8e:e8:
63:ac:ba:85:1b:19:cc:3e:d1:d5:75:79:6c:48:28:aa:c3:a1:
d0:00:e9:7d:4b:0f:ab:ce:65:da:cc:2f:a1:20:e5:64:98:54:
03:18:22:3f:4d:25:7b:56:4c:95:a7:a5:43:d1:6f:62:c2:02:
0e:e0:ce:cc:57:93:5c:78:20:b2:74:ed:69:f2:d4:12:72:32:
9c:32:61:70:41:ea:66:eb:ec:50:4a:85:12:23:50:35:44:d5:
37:b7:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:13:31 2025 by rpki-client