Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: 1HO6sZhCNLygdmP9+LV0SNJJym6QVvCrQ2vr2FlQ8ls=
Subject key identifier: 63:FC:22:26:EB:68:E2:E2:1C:DB:61:0F:23:65:E3:21:8E:83:71:06
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 0197485533BEBF65249EA39F858D1DBE037F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 03:00:32 +0000
Manifest this update: Sat 07 Jun 2025 03:00:32 +0000
Manifest next update: Sun 08 Jun 2025 03:00:32 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: n9vOLDVMJHDQbRjmIvMk00IH9OElgMr2hfgBtxYqL+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:33:be:bf:65:24:9e:a3:9f:85:8d:1d:be:03:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Jun 7 03:00:32 2025 GMT
Not After : Jun 8 03:00:32 2025 GMT
Subject: CN=63fc2226eb68e2e21cdb610f2365e3218e837106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:6c:8e:55:27:1e:00:b5:ab:02:7e:54:bd:
41:7f:ad:59:94:13:98:46:22:01:37:21:ae:aa:56:
76:51:45:de:3c:d8:2c:b3:4c:ac:14:e4:bf:c8:9d:
46:77:64:3b:2d:4f:32:78:b2:f1:56:38:0b:b9:1d:
19:7d:6f:03:c5:2e:6d:4e:4e:e0:6e:fb:db:28:95:
7b:a3:37:df:a8:02:f2:0d:26:1f:b9:f2:af:8c:80:
22:bf:4b:4c:a0:dc:56:c0:b4:6c:a4:1a:dd:1b:19:
ee:ad:5b:60:6f:c3:ba:b7:fa:a4:e8:ec:ae:46:d0:
86:86:81:6e:a9:05:7b:95:9d:f7:4d:5e:0a:b3:2a:
09:13:62:6a:6c:85:c4:a4:3d:23:40:fb:8c:87:a1:
26:1d:57:84:1a:61:4f:fa:6f:66:2b:75:b9:5b:b7:
81:e7:a7:b4:d4:ea:98:c9:19:11:20:4c:72:61:e8:
48:42:67:27:f3:d3:17:3c:56:61:d3:51:90:9b:b7:
be:5f:f3:d4:74:b3:10:1d:2c:b0:0b:77:b7:a2:44:
59:89:ea:bc:54:6c:5d:d1:58:c1:39:86:d1:66:69:
35:52:05:3f:8d:b6:0c:e8:09:7e:69:2f:93:90:8a:
42:72:89:05:d6:9b:81:56:f9:2b:7d:51:64:23:ec:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:22:26:EB:68:E2:E2:1C:DB:61:0F:23:65:E3:21:8E:83:71:06
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:3b:4c:4f:70:dc:1c:ae:e5:5e:d1:8a:32:8b:da:19:04:
b6:d2:79:8a:c1:75:4a:aa:a3:54:54:54:78:6c:ec:41:ad:44:
92:35:c9:2e:9b:f2:0d:64:ea:d2:43:76:4f:7c:49:49:8b:e0:
41:02:4f:bc:ef:d7:8b:7b:eb:91:74:3e:ba:f4:28:cd:ad:e6:
37:a0:30:a5:9a:59:f8:d9:6d:4f:cd:49:d1:3b:31:83:72:02:
2e:c6:69:d4:2f:8a:24:e0:7b:9e:4c:11:e7:90:e0:39:36:66:
93:5d:e6:35:3f:70:87:b0:70:47:ce:53:d8:b3:30:6b:a6:58:
5e:7b:27:50:a3:fb:dc:da:5d:89:c9:7f:a1:f4:49:59:d1:e0:
b6:89:68:67:2b:06:bf:27:9b:42:19:30:f0:56:d3:5d:83:b6:
d8:7d:fd:c2:47:d3:01:b9:d2:9d:e3:ba:14:d2:27:91:0a:63:
04:3c:c7:c4:c7:45:ce:f0:f8:72:81:38:57:d7:eb:08:92:6f:
a8:7c:44:c1:18:84:93:ee:b6:2d:7f:d4:fe:f4:7d:61:66:c4:
94:69:b3:51:cb:f1:92:33:22:34:39:97:1a:3e:1f:0b:14:53:
3b:1c:0a:bc:c1:7f:a1:55:2c:9f:75:45:be:eb:18:8a:af:a4:
c9:56:12:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVTO+v2UknqOfhY0dvgN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYzJiYzBlM2U1OTMzMmY0YmUyYzU4ZmYyNWExODYxZjVm
ZGU4MTkwHhcNMjUwNjA3MDMwMDMyWhcNMjUwNjA4MDMwMDMyWjAzMTEwLwYDVQQD
Eyg2M2ZjMjIyNmViNjhlMmUyMWNkYjYxMGYyMzY1ZTMyMThlODM3MTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQBsjlUnHgC1qwJ+VL1Bf61ZlBOY
RiIBNyGuqlZ2UUXePNgss0ysFOS/yJ1Gd2Q7LU8yeLLxVjgLuR0ZfW8DxS5tTk7g
bvvbKJV7ozffqALyDSYfufKvjIAiv0tMoNxWwLRspBrdGxnurVtgb8O6t/qk6Oyu
RtCGhoFuqQV7lZ33TV4KsyoJE2JqbIXEpD0jQPuMh6EmHVeEGmFP+m9mK3W5W7eB
56e01OqYyRkRIExyYehIQmcn89MXPFZh01GQm7e+X/PUdLMQHSywC3e3okRZieq8
VGxd0VjBOYbRZmk1UgU/jbYM6Al+aS+TkIpCcokF1puBVvkrfVFkI+xxLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP8IibraOLiHNthDyNl4yGOg3EGMB8GA1UdIwQY
MBaAFErCvA4+WTMvS+LFj/JaGGH1/egZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYt
ODA3M2RjZTA5NjI4LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYtODA3M2RjZTA5NjI4
LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7g7TE9w
3Byu5V7RijKL2hkEttJ5isF1SqqjVFRUeGzsQa1EkjXJLpvyDWTq0kN2T3xJSYvg
QQJPvO/Xi3vrkXQ+uvQoza3mN6AwpZpZ+NltT81J0Tsxg3ICLsZp1C+KJOB7nkwR
55DgOTZmk13mNT9wh7BwR85T2LMwa6ZYXnsnUKP73Npdicl/ofRJWdHgtoloZysG
vyebQhkw8FbTXYO22H39wkfTAbnSneO6FNInkQpjBDzHxMdFzvD4coE4V9frCJJv
qHxEwRiEk+62LX/U/vR9YWbElGmzUcvxkjMiNDmXGj4fCxRTOxwKvMF/oVUsn3VF
vusYiq+kyVYSHg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:13 2025 by rpki-client