Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: zFD2FnUFkzRzbwSJmTHAXFKcllhT5TIw/E/r0wHPU/A=
Subject key identifier: 1B:7D:3F:B2:F0:0B:4B:59:29:F1:80:EB:23:35:14:B5:AC:A1:73:7C
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019A2A4424AE9B8431EF0CC5F2EEFD77247F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 10:01:40 +0000
Manifest this update: Tue 28 Oct 2025 10:01:40 +0000
Manifest next update: Wed 29 Oct 2025 10:01:40 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: MTS4bTi1pykJbEdgGp2LOJ87+evpkB9kMUl4A9MSTt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:24:ae:9b:84:31:ef:0c:c5:f2:ee:fd:77:24:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Oct 28 10:01:40 2025 GMT
Not After : Oct 29 10:01:40 2025 GMT
Subject: CN=1b7d3fb2f00b4b5929f180eb233514b5aca1737c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:ea:ec:35:ce:9f:7d:50:f1:15:f7:3e:94:
39:40:23:1b:4e:35:13:a5:91:d1:79:01:29:b6:dd:
86:3e:8d:fc:ac:19:94:1a:9c:00:71:c6:8f:8c:56:
a9:34:1e:9d:a6:d3:ba:d5:ce:69:7e:9d:ef:f4:dd:
46:2a:12:87:c3:ac:2b:c6:03:82:9c:86:c8:3a:08:
a1:a4:b0:03:bb:5d:98:58:60:77:0a:60:d0:8f:9f:
dc:2c:ec:30:d5:b4:9b:4e:34:74:d6:b3:6b:c0:50:
8b:51:87:77:70:15:c9:45:1b:08:ba:48:b7:b3:63:
4f:6f:8f:91:d8:a3:34:62:03:1e:8b:53:ec:4b:ee:
c9:af:f2:82:d5:23:21:69:c7:e6:62:e7:1c:c8:a2:
62:b4:ae:60:9c:df:31:e2:be:c9:af:55:1b:64:aa:
4e:af:2c:2e:1a:c7:b5:af:c5:37:9c:7f:30:09:6e:
61:14:7e:03:7b:8c:f4:fd:bf:2b:87:3d:96:84:02:
37:ee:dd:ca:9a:75:ab:54:54:ef:0b:8d:18:31:19:
b9:dc:35:8d:49:16:9f:60:32:e9:d5:b4:81:0e:2a:
59:a1:eb:d4:85:cd:c8:fa:88:3a:62:f1:6d:fc:a2:
da:98:72:0f:77:f2:49:5a:86:1a:9e:3f:b0:ec:7b:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:3F:B2:F0:0B:4B:59:29:F1:80:EB:23:35:14:B5:AC:A1:73:7C
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:6e:3c:8a:3e:67:ba:52:a3:30:8a:91:45:a7:8a:f6:48:
79:ef:e9:2c:1f:20:79:cc:dd:38:33:e9:2a:f7:64:15:c0:c4:
fe:cd:27:7b:7e:76:3f:3d:d2:20:c8:5e:5c:02:d6:f2:14:cf:
bc:11:70:82:41:f8:19:ed:d3:ff:2d:0f:dc:3e:a3:67:e6:4a:
25:57:21:b5:db:7d:94:3b:b7:8a:2d:31:a4:a3:99:7b:c2:84:
b6:c3:10:2c:a5:e0:f4:e8:da:11:85:f7:2e:52:49:da:c0:7f:
09:11:bf:f8:43:d9:98:32:16:82:77:92:79:1c:ab:f1:96:f2:
3b:d1:ba:5a:73:a4:da:e2:7b:bc:e7:b7:8f:03:3c:0c:91:cd:
66:e0:df:f8:fb:8b:53:82:6d:8b:44:63:ce:9b:bd:11:cc:ce:
5c:dc:a4:98:01:4f:ef:d9:ee:44:e2:b5:34:13:6c:b6:e6:6b:
86:6c:7d:b9:0e:e6:05:19:58:fc:81:5e:4f:dd:de:7b:31:5f:
16:83:8f:d8:a1:f6:d2:2a:72:bd:4c:07:74:e4:37:5e:29:b5:
d0:db:b9:19:63:95:fd:2e:28:7f:f0:03:54:19:03:67:2f:33:
12:4e:75:9d:49:0f:20:1d:33:a8:cd:82:f0:3f:d3:54:40:23:
2a:a5:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 18:44:54 2025 by rpki-client