Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: nWQHpZo1U46h1zZx0LT7zS16j/+/MA8+iiSMqAPcNQk=
Subject key identifier: 29:8D:2C:5A:6D:A8:9D:C4:15:ED:C0:9D:5B:5F:A7:D4:1E:39:35:3E
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 019A70DC67A85E938956DE447BDE8F1B7954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0E1A
Signing time: Tue 11 Nov 2025 03:01:23 +0000
Manifest this update: Tue 11 Nov 2025 03:01:23 +0000
Manifest next update: Wed 12 Nov 2025 03:01:23 +0000
Files and hashes: 1: BB5_8BhJDTnxTKWGMNqj5oXCwds.roa (hash: LuNPA32mjFH0EXTfiP4dDNt0mH4g6yoGsaPQD7tGC9s=)
2: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: OGO2iQ+r3wmz85cuCyEpi3zEmoCzGuX/EnHyQI+Lndw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:67:a8:5e:93:89:56:de:44:7b:de:8f:1b:79:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Nov 11 03:01:23 2025 GMT
Not After : Nov 12 03:01:23 2025 GMT
Subject: CN=298d2c5a6da89dc415edc09d5b5fa7d41e39353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:88:6a:5c:9f:78:72:bd:7b:f6:09:15:47:5a:
a8:5b:ec:df:34:72:65:9f:35:52:06:09:86:ed:f4:
19:3f:a6:73:6b:a4:b0:25:ef:5d:2c:f6:66:05:64:
72:35:7b:96:70:e4:0d:a8:e0:ae:b0:f3:4b:15:6a:
93:0a:9c:24:78:a7:fc:28:70:5c:c5:a2:0c:ae:d0:
42:22:a1:7f:a1:bc:96:24:6c:df:9c:dd:9a:89:8c:
34:2e:83:97:7b:ba:f7:f8:b2:f3:6a:e3:a7:7e:90:
d1:93:dc:e2:3b:fa:97:bc:00:cb:c2:e5:be:49:67:
94:7b:e3:26:41:d9:9e:df:dd:d2:14:7a:64:f4:31:
e8:0f:f2:e9:13:0e:c8:25:45:c7:f9:68:49:d0:01:
d9:0e:1a:a5:f3:6c:b1:fe:8d:76:95:e0:12:2e:83:
44:d0:9f:ba:44:29:41:49:9c:a3:35:cd:50:50:36:
92:d5:94:17:54:c4:e0:60:7e:f3:c7:c0:41:0c:2b:
d1:de:d4:43:2f:76:4d:c5:7c:80:9f:fc:ca:1d:3f:
a5:43:db:b2:20:e3:1b:42:d7:6d:5e:cd:c6:d2:fc:
d2:0b:4b:37:e9:2b:5d:ad:12:9d:83:ac:74:ed:80:
88:a3:71:7c:63:0d:a7:8c:27:21:f4:27:a4:f6:f2:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8D:2C:5A:6D:A8:9D:C4:15:ED:C0:9D:5B:5F:A7:D4:1E:39:35:3E
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5e:10:5b:5d:45:18:aa:78:a6:e9:cd:fa:74:71:03:38:d6:
cf:89:b2:19:21:92:8f:09:89:c6:16:6f:23:98:82:b5:cd:ec:
b6:c2:2e:68:ff:c4:e0:a7:d8:2b:04:61:3c:7d:13:78:99:be:
df:55:e9:4e:10:4a:f1:a0:99:70:40:6d:48:ec:51:d4:39:03:
f5:a7:cd:a5:ea:0e:b5:d8:b6:cf:13:db:3e:01:c9:61:15:2d:
3e:e3:8f:00:4a:6d:f1:8e:78:1d:1e:88:b5:84:18:1b:37:65:
47:e4:7c:fb:79:f4:b8:ae:a5:2f:89:24:cc:61:a1:66:c4:ad:
bf:fc:93:26:b4:4e:ff:ad:8e:68:82:a9:dc:3d:24:8f:00:90:
b9:10:92:f7:f6:92:b9:5f:7e:a0:56:26:bc:63:7b:ee:2a:69:
c3:7f:26:a4:6a:aa:c5:15:2c:b2:92:03:85:68:f7:06:e5:90:
1f:42:fa:8e:0d:78:c1:71:96:a0:70:b3:9c:f5:d5:1b:2d:d5:
4e:8f:fe:b9:16:7f:fe:36:27:65:3c:34:67:a8:e3:68:60:be:
fc:91:0c:0c:88:a3:72:8c:d4:28:00:c2:8a:35:75:fb:d7:cc:
84:a9:bd:0d:f9:eb:2e:9b:62:7a:e6:bf:f1:a6:f6:3d:3d:b9:
52:c4:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:06 2025 by rpki-client