Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: 4DLIR2ny/pKixJjJ49POKK3p8IJhr+0M5GpfUkEV9UY=
Subject key identifier: D5:7C:C3:C0:03:48:86:44:50:66:61:FD:D0:2B:73:32:17:59:C9:D1
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019750B38609F21B950B4AD3DED543B576AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0C62
Signing time: Sun 08 Jun 2025 18:00:31 +0000
Manifest this update: Sun 08 Jun 2025 18:00:31 +0000
Manifest next update: Mon 09 Jun 2025 18:00:31 +0000
Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=)
2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: 2whWEQFFRNNFoctoZ7C4QAaak9Xg9HtoOSyCtSZjxDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:86:09:f2:1b:95:0b:4a:d3:de:d5:43:b5:76:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jun 8 18:00:31 2025 GMT
Not After : Jun 9 18:00:31 2025 GMT
Subject: CN=d57cc3c003488644506661fdd02b73321759c9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c4:66:c7:1a:75:43:14:36:ed:06:61:8b:f5:
a0:27:9d:86:8e:19:8f:11:d0:1c:e2:a3:8f:ab:70:
04:e8:17:63:d0:df:16:83:14:a2:e8:99:65:89:5e:
ad:85:f3:63:62:b7:3a:eb:bb:8d:c6:ef:5a:d3:80:
34:41:6a:46:82:cf:38:a4:5d:40:a5:42:db:c1:2d:
37:9b:78:3b:c9:82:13:b6:18:a1:a4:24:e6:29:dd:
e0:82:66:f5:87:75:e0:42:55:21:70:f1:f6:3c:a1:
04:c1:ab:63:17:bd:84:ca:24:7f:56:da:2f:8b:d7:
e1:55:dc:a4:1b:5d:d3:00:2c:b2:05:09:f7:06:d9:
83:40:57:80:ff:41:e0:05:d8:ec:50:35:88:23:10:
a1:af:83:dc:9e:a6:f3:ab:28:af:0c:65:99:da:11:
13:2a:b4:17:3e:1b:e7:06:0a:5a:76:b1:2d:35:99:
cd:c0:0a:ff:55:ac:9a:5f:0f:54:e3:24:48:b5:b9:
a6:ca:53:47:f8:b8:a8:27:e5:93:92:12:19:c7:62:
87:72:34:fe:8c:ca:e8:16:15:08:a8:93:9e:c4:16:
34:ec:4f:c0:ce:d7:0d:19:42:71:64:51:a5:19:53:
99:4c:71:e4:bd:63:37:f2:ad:26:60:e6:80:25:c2:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:C3:C0:03:48:86:44:50:66:61:FD:D0:2B:73:32:17:59:C9:D1
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fd:43:28:56:22:f3:79:a9:b6:7b:af:23:cd:ae:93:d4:3e:
23:d3:f4:3e:74:8e:f9:ad:2c:57:87:33:c8:2b:4e:40:72:83:
7f:60:91:32:33:c6:ea:fa:1f:cf:8a:73:e4:4d:dd:49:50:67:
36:ca:bb:87:67:17:1b:c3:08:59:c0:36:e2:d1:9b:c5:98:64:
3e:56:81:b9:aa:02:fd:33:5c:e4:60:ec:c2:8d:06:23:0f:86:
73:32:59:f9:2f:3b:73:62:e6:58:32:29:93:e0:4c:80:1b:4c:
80:bf:3b:aa:78:2a:60:49:f3:9b:23:f9:00:f4:60:20:8d:cd:
4e:74:fa:d5:fe:5d:f2:8c:44:ef:b5:f3:ac:09:ee:11:ed:4d:
3e:30:93:e0:b0:ed:b0:32:ef:26:e4:7f:a2:b1:39:c7:b9:10:
6f:24:16:95:48:0e:f0:9d:f7:80:7b:e3:15:82:07:6e:0c:e1:
13:97:82:85:2a:67:ae:4f:ac:aa:b1:44:dd:ee:6e:e2:98:06:
a0:ce:c0:93:7d:e4:2f:f0:af:d2:48:00:b6:8f:da:17:5a:89:
3d:0b:f9:10:a0:70:0f:89:05:f1:97:b4:6a:82:e9:d8:de:03:
8b:17:b6:79:28:b2:b2:57:f7:19:8a:1c:4a:5a:f1:f0:f1:47:
ce:fb:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:44 2025 by rpki-client