Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: 35/U+A6NtR/jca8KdsARkC3zAI3ZmxWVxbMJ60uD9jA=
Subject key identifier: 2E:C8:85:EE:21:70:03:A6:69:FB:FE:D7:62:CA:EE:FC:79:1A:B6:5F
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 019931C888CA8C801C1AE7A8BE7C41AD0670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 15C3
Signing time: Wed 10 Sep 2025 04:00:49 +0000
Manifest this update: Wed 10 Sep 2025 04:00:49 +0000
Manifest next update: Thu 11 Sep 2025 04:00:49 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: 8z9/Pe2DmgZgQmUNOVoZzFHkP4RNvb6u0Y230kKalY4=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:88:ca:8c:80:1c:1a:e7:a8:be:7c:41:ad:06:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Sep 10 04:00:49 2025 GMT
Not After : Sep 11 04:00:49 2025 GMT
Subject: CN=2ec885ee217003a669fbfed762caeefc791ab65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:70:08:91:8a:ba:31:40:b4:32:79:bc:fe:
8e:5c:87:f2:f7:94:22:17:18:e4:4d:9d:b5:71:ef:
df:37:96:b9:5d:25:8c:06:44:6d:35:1b:de:d9:b3:
09:23:0a:e2:47:33:cf:70:9b:ac:da:73:ba:0f:e7:
dd:b4:3d:49:06:c6:80:5e:c4:14:d3:06:a2:b9:c0:
25:7a:69:f9:4a:4d:d3:12:79:cc:82:96:49:a4:a2:
78:46:dc:c7:fc:2d:cf:73:5e:cd:d1:95:17:fc:ae:
6a:00:28:43:20:60:72:0e:11:f2:d2:b2:24:17:e3:
cf:ef:cd:cc:23:be:95:c6:20:f3:8f:b7:35:bd:ee:
98:d6:95:23:8e:d4:69:c5:e1:75:b9:e4:14:41:c6:
21:c5:2d:44:61:28:ff:58:0d:82:2e:a2:25:b0:18:
37:76:9f:7b:89:d9:e7:f9:88:60:2e:81:03:04:dc:
ad:41:6c:70:dd:3e:d1:aa:0d:b3:33:91:e8:f8:7b:
3e:eb:5b:76:8b:d5:16:99:96:ba:4b:ae:b8:24:f4:
dd:75:c9:0b:39:f8:63:96:b5:a2:fb:53:ca:98:28:
c9:bd:99:b9:f9:45:bc:48:14:ed:b7:6a:3a:9d:78:
d4:87:2c:00:4c:e1:45:c9:89:00:bd:fd:01:bb:63:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C8:85:EE:21:70:03:A6:69:FB:FE:D7:62:CA:EE:FC:79:1A:B6:5F
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9a:38:77:48:c0:9b:59:2f:c6:78:31:d1:0e:72:14:5c:25:
26:fe:6b:d9:80:76:52:4a:a9:65:79:17:b8:3d:13:c7:ff:3b:
b9:7c:a8:c0:16:37:4a:69:24:86:83:fa:a8:e7:06:b2:4f:4b:
7e:7a:d7:61:a7:2f:9d:7f:8b:ea:59:7e:7c:74:c2:81:18:7f:
b6:f1:da:f0:7e:3a:d7:a1:b3:b4:22:91:7b:58:4c:e6:80:d0:
d9:c4:dc:0c:27:66:36:ce:d8:95:42:6b:8a:7d:2e:32:ea:90:
35:57:d7:78:c6:38:f6:80:e0:1b:11:24:e1:9a:7c:05:a5:70:
36:c6:fa:b9:00:2f:63:ff:09:f5:ff:93:5f:6e:6e:68:bb:67:
2f:81:04:96:07:93:79:cd:32:be:75:99:9f:2f:d1:67:93:54:
9e:b4:fb:0a:ca:02:ec:9a:37:e1:97:0d:b3:ba:14:3e:be:09:
70:ed:4b:f7:86:90:ec:c2:7c:b2:98:5c:8c:aa:ab:8c:ec:ad:
45:58:30:a7:86:b9:c2:31:b1:b1:2d:9f:b3:c3:3b:11:7e:70:
f0:f3:c2:b9:69:86:22:66:cd:72:db:db:3b:8f:a7:29:04:a9:
1d:1d:8b:88:9f:87:ae:2e:5c:9b:96:ae:d6:4c:01:7f:fa:ae:
78:c5:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:57:46 2025 by rpki-client