Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: ADH5IbC4Kvj8fqna53YAQBWs1TbWPFVt2co0zJwddHE=
Subject key identifier: 03:71:4C:F1:10:F9:89:38:FD:2B:93:B2:CB:81:3B:61:52:8C:CA:10
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 019A1D630830377C533799497E4D6F6F5DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 163D
Signing time: Sat 25 Oct 2025 22:00:20 +0000
Manifest this update: Sat 25 Oct 2025 22:00:20 +0000
Manifest next update: Sun 26 Oct 2025 22:00:20 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: HhlgVspy+8T5STEu8Vw1y+moKoF4VWoI7WG70w66rT0=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:08:30:37:7c:53:37:99:49:7e:4d:6f:6f:5d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Oct 25 22:00:20 2025 GMT
Not After : Oct 26 22:00:20 2025 GMT
Subject: CN=03714cf110f98938fd2b93b2cb813b61528cca10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:33:4d:ea:00:95:06:64:44:e8:82:3f:9d:
6d:b1:b4:18:0b:a8:1d:06:c3:7e:2f:99:f0:ab:fb:
38:c5:1e:68:3c:3e:92:84:62:5b:25:57:96:c8:6f:
c4:57:65:18:83:f0:44:bb:ee:91:1d:8e:7c:bb:dc:
4b:e3:ef:59:73:aa:0b:7b:26:1b:6e:0b:be:b8:79:
7e:6f:7b:55:24:c0:77:6b:d8:1a:81:e5:6b:15:b9:
40:c8:84:e8:b3:94:92:85:9d:b9:d1:40:01:ef:3b:
e6:f6:31:f4:40:8a:65:17:f5:4f:14:8d:0e:86:3c:
cf:0a:f7:3b:d9:8a:f0:d0:94:ee:c9:02:62:03:a1:
da:c6:f8:cf:fd:e4:f9:74:89:1f:cc:54:cc:53:de:
45:94:d3:58:f8:74:0f:af:a6:ee:dc:eb:2d:ca:d1:
d9:cc:49:e3:eb:03:70:de:bb:75:18:01:99:44:0e:
27:93:42:a1:69:57:bb:6a:49:1a:94:35:bb:80:5c:
76:ef:42:5b:d8:75:b5:4b:0d:18:03:4e:16:73:19:
7d:5f:4f:66:10:6e:a7:f4:c3:1b:e0:28:6d:92:3d:
4b:e6:09:51:40:7f:98:3f:da:43:47:14:dc:2f:3f:
80:8c:c3:2e:b1:98:28:e7:3e:1b:d3:04:49:f9:84:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:4C:F1:10:F9:89:38:FD:2B:93:B2:CB:81:3B:61:52:8C:CA:10
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:60:9f:61:c2:48:50:87:05:48:37:b9:be:d7:ff:34:3e:d3:
1b:cf:f3:bb:5f:66:69:d0:68:54:cc:ba:7d:a5:60:a8:49:6c:
dc:63:35:fd:00:b3:61:63:c6:d5:02:82:44:4f:39:96:ab:fb:
1e:5e:34:89:93:00:7f:f9:de:6a:67:73:bc:33:f8:61:31:a8:
b5:85:66:7b:62:d8:0a:83:ac:09:a9:75:1b:ba:f3:06:26:4f:
21:fe:c7:f4:b4:40:8a:8e:ef:57:47:11:cf:e8:66:ff:1c:c6:
95:e1:a7:51:05:29:a4:72:ce:5f:8e:38:77:65:f1:76:ac:7e:
79:d8:c1:a4:d6:76:61:c4:3a:d5:8c:c9:f8:55:ad:4b:64:fc:
ca:a5:5d:a2:f1:d5:a3:65:2a:f4:4d:53:6a:b3:ce:d7:02:a5:
8c:c9:63:c4:a9:a9:04:57:c3:be:44:c6:39:7a:69:24:8c:49:
9d:e0:6b:93:74:72:81:1e:21:b1:52:96:93:04:36:6a:71:09:
c5:9a:00:33:16:5f:d6:c2:6f:6a:f7:46:87:1b:1c:d0:76:21:
f2:ce:3a:f7:19:d5:cb:38:ef:e5:ac:cf:6e:77:dd:6f:7e:03:
06:cc:87:ea:18:c5:70:5b:5a:2f:d2:07:49:3d:df:e4:e5:fa:
5d:6f:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:32:41 2025 by rpki-client