Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: BdhKatNKeVdk03QrBZbpxCnxoira4hJQczs2PYnh08Q=
Subject key identifier: 25:61:FA:9D:A2:C5:CD:97:B9:41:D9:96:CF:87:D2:4D:A1:7B:4B:9E
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 0199239FB9108C09159F2B7BC4719DA28BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 155E
Signing time: Sun 07 Sep 2025 10:01:34 +0000
Manifest this update: Sun 07 Sep 2025 10:01:34 +0000
Manifest next update: Mon 08 Sep 2025 10:01:34 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: /RKqR3nMZX9TMg4VImLhp4vEGQQp2EZzQPfQwTHzi0M=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b9:10:8c:09:15:9f:2b:7b:c4:71:9d:a2:8b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Sep 7 10:01:34 2025 GMT
Not After : Sep 8 10:01:34 2025 GMT
Subject: CN=2561fa9da2c5cd97b941d996cf87d24da17b4b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:fc:77:3a:c2:54:51:df:3a:e0:fd:cb:27:
a4:97:c9:1e:3f:97:a9:0e:85:dc:32:cd:83:8c:61:
3d:c9:fe:06:c1:2b:3f:b1:a0:81:5d:ed:64:25:76:
76:5e:7d:65:94:40:10:eb:cc:d6:f9:f3:ee:34:fd:
74:6d:7d:ab:21:83:a5:06:5b:cf:8d:89:63:f1:59:
82:90:5c:43:2b:8a:a8:e2:cf:4e:90:d9:95:f6:8f:
12:d0:11:90:c0:40:c1:93:94:9b:12:c0:2e:9e:81:
23:ac:b8:6d:bb:63:cb:b3:81:f2:a0:18:37:ef:3a:
55:70:ab:17:1f:c7:50:fc:b7:20:2a:0d:94:3f:0a:
ab:b9:3a:9c:9b:8d:bf:2c:53:8f:7a:cf:b4:5f:45:
26:a6:d1:68:91:21:17:f2:d7:59:c1:3b:f0:8a:49:
3a:08:bc:b7:ad:28:c4:f8:4f:89:cb:aa:da:e8:e0:
b9:04:44:7c:70:c8:06:48:37:51:5a:3b:b0:e9:9d:
3b:67:4a:56:fd:ce:b3:80:a2:2f:29:6e:48:6b:93:
4d:85:46:36:b4:1b:ce:48:f1:bc:3c:9e:9b:e9:ae:
11:ac:1b:06:4d:b3:37:77:f8:d1:5a:56:0e:ff:1d:
19:c5:5c:d1:f3:bf:e1:9c:c7:4f:b4:6b:f8:7a:92:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:FA:9D:A2:C5:CD:97:B9:41:D9:96:CF:87:D2:4D:A1:7B:4B:9E
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e3:65:d6:d3:56:83:26:bf:63:f5:88:bc:ca:bc:36:a9:b0:
31:30:70:7a:dd:91:c7:5d:6e:0f:df:c3:ea:a0:f0:8e:35:25:
76:9f:b9:b5:02:ff:d2:ec:01:2a:a9:63:03:cd:30:16:dd:a3:
c3:b0:b5:ad:1b:dc:6e:e9:b8:52:10:db:2c:f2:c2:a5:c3:7e:
3a:ae:22:d7:f8:70:83:b0:1a:c5:d3:82:39:d1:fb:6c:e3:8b:
bf:02:18:80:df:5e:a0:6f:46:5b:3c:a6:90:d4:f5:21:15:fc:
ea:f3:c6:b2:94:8c:f4:59:99:72:d6:60:89:dd:6f:91:63:74:
31:44:52:12:35:c5:47:6a:65:3d:ac:b0:82:ba:59:24:ae:82:
d4:dc:bb:68:0d:21:c6:39:b0:34:22:8c:04:d9:af:a4:52:f4:
32:cf:3d:a5:71:9e:d1:4f:61:9b:68:3f:89:bb:e3:79:59:b8:
74:80:16:33:a9:2b:a7:81:ca:f3:37:f2:25:45:48:e2:1e:55:
6b:70:87:47:ed:9f:89:9c:ce:e3:68:1a:ca:24:4b:b7:87:a0:
b9:65:25:9e:b0:c4:bd:94:c4:f1:98:5e:88:01:64:6b:90:a3:
36:c1:87:ae:27:a5:cc:98:18:17:af:37:45:ad:65:52:3d:36:
04:f4:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:36:45 2025 by rpki-client