Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: iPfKtgpMUAeqpkmZIaDBqrzDneybsKjuKbSHVBRJw9Y=
Subject key identifier: 03:78:8F:71:D5:12:75:4D:2E:D8:F2:F9:FA:6D:38:C3:D4:41:5D:C5
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019936EFC5AD383EB4A59D55B34043BCBE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 04:01:47 +0000
Manifest this update: Thu 11 Sep 2025 04:01:47 +0000
Manifest next update: Fri 12 Sep 2025 04:01:47 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: in2uKLemFDF7MukO8C050uK/ktXyxeOnyptXrlz1B4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:c5:ad:38:3e:b4:a5:9d:55:b3:40:43:bc:be:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Sep 11 04:01:47 2025 GMT
Not After : Sep 12 04:01:47 2025 GMT
Subject: CN=03788f71d512754d2ed8f2f9fa6d38c3d4415dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:5c:b4:77:cc:84:25:3c:2f:dc:b3:a9:40:
db:bd:41:52:53:15:22:76:b7:db:17:ce:88:17:ae:
6c:55:9f:10:c4:ea:6e:8f:84:b5:6a:ed:3c:b9:0f:
bb:2d:c1:28:47:95:d4:1b:21:75:50:21:bd:1c:4b:
f4:78:f3:b2:85:9d:a9:e9:1b:66:c9:8b:70:1c:a2:
0a:f5:77:ff:51:70:73:a3:89:b9:ea:23:69:ee:61:
78:fd:2c:d2:c2:49:26:1e:4c:f5:f4:10:b2:48:52:
38:90:98:c2:3d:d5:3a:58:55:15:7b:3f:ae:4c:ce:
ff:2d:9a:e7:de:77:51:34:bd:53:5a:23:eb:f1:8d:
79:f5:c3:2b:fc:c2:97:5a:25:57:06:69:4b:c0:48:
37:f2:64:93:47:6f:3b:04:1e:05:f3:53:11:77:e3:
7f:b3:5a:c9:55:af:c1:e5:d5:17:fd:60:9a:1d:da:
a2:2d:ce:20:d5:51:5a:8d:21:62:01:4b:3d:df:db:
91:b8:df:c1:b2:fb:a0:c1:1b:c0:09:4a:1b:d9:33:
40:50:83:16:50:50:df:25:ae:a2:29:e4:62:5b:77:
db:2a:4b:9c:f5:65:03:71:04:f6:42:b6:7d:a6:b6:
82:4a:6d:58:81:8a:b6:7d:97:cd:97:f9:89:5d:4b:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:8F:71:D5:12:75:4D:2E:D8:F2:F9:FA:6D:38:C3:D4:41:5D:C5
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:49:b2:63:09:05:ed:16:98:ed:fa:f8:49:58:95:73:eb:05:
36:30:28:9e:8d:2c:81:1b:b6:3b:6d:93:09:39:a7:e8:cc:35:
89:4a:eb:19:0c:e7:c2:a1:eb:f5:e8:22:47:09:9f:0c:5b:db:
f7:37:bc:1c:78:6d:86:33:11:75:3a:2d:3e:36:62:15:5e:66:
2a:87:a9:1e:92:c8:d7:cd:e6:00:ea:5e:e7:4f:a0:ef:38:6f:
50:6b:a2:de:11:d0:79:02:b7:42:dc:a4:7c:f8:33:44:55:0a:
1e:7c:83:a9:71:39:a2:d3:2e:b4:d7:a6:44:3a:02:bb:46:e2:
87:d6:12:68:4c:11:bf:1b:b4:34:5c:67:0b:97:8e:ce:5d:82:
9b:4e:e0:95:f8:88:d5:2c:3b:d1:7a:49:74:43:56:6b:26:1a:
d2:c0:a1:29:cf:94:61:8d:d0:bb:5c:66:c8:68:01:0d:1c:04:
07:2f:5f:35:85:8d:63:d8:81:9e:f4:27:6d:76:45:a8:66:bd:
fd:54:4c:22:b9:5f:4c:ac:a5:a7:48:c4:86:ac:a5:3a:17:99:
5f:f1:d5:60:48:17:4d:55:d4:c3:2c:e6:2a:37:b0:7b:1b:a2:
a9:dd:0f:2a:e7:d9:95:2c:f7:61:1f:5c:fe:4b:ba:4a:93:b8:
ae:b4:45:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:12:13 2025 by rpki-client