Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: ItIB3C0puQWTmsSSjAnyByTjw2Tr8HDzUmi1EIz3Fy0=
Subject key identifier: C1:53:FF:7E:95:EC:2C:DB:21:91:0A:70:04:E1:65:AD:BF:46:47:B5
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019A4EF5C474F2FC447F49047F1602857798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: lr74x+YwbpYX8J75DJrlGRA0g/EsBOojpIn0EIqRx80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c4:74:f2:fc:44:7f:49:04:7f:16:02:85:77:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=c153ff7e95ec2cdb21910a7004e165adbf4647b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:44:0e:af:9f:32:dc:d6:a2:81:7b:37:07:
c4:3e:1b:18:0d:80:83:20:46:32:07:a0:c5:c9:e7:
68:29:e2:d7:37:e9:78:63:23:a2:89:0c:e5:68:79:
af:aa:93:25:92:7a:c2:5b:1a:65:0d:4e:6d:e6:f8:
ba:de:35:f6:2f:90:ad:97:aa:a4:47:ff:b9:c8:b4:
22:09:20:5b:a2:ef:f7:69:6a:25:77:e6:db:ea:9d:
7e:60:3a:47:25:b1:2b:02:c4:8d:14:ea:49:d4:aa:
b9:20:37:fa:12:47:89:4b:7b:bd:3e:60:4e:d3:0c:
d1:a5:ad:02:46:34:1b:15:7c:00:cf:b8:a3:72:7e:
c3:a8:ec:4e:38:fa:2d:48:54:4a:cf:4e:ed:04:eb:
15:73:34:23:2f:90:c1:bd:91:0b:23:58:82:26:09:
a0:f3:08:09:f0:ef:16:10:d0:5a:71:7f:31:31:53:
dc:c1:bb:f8:22:4c:74:31:bf:29:94:71:73:89:d7:
92:2d:c9:d5:33:13:c7:cf:e1:74:ca:e4:cd:95:c3:
5d:50:08:6b:b1:0a:ec:88:a8:48:1a:fc:de:43:48:
a2:75:a1:c6:b3:2b:6d:07:33:6f:91:79:1e:7f:a3:
82:be:e7:40:b5:04:cf:1a:bf:b1:52:22:29:cb:b2:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:53:FF:7E:95:EC:2C:DB:21:91:0A:70:04:E1:65:AD:BF:46:47:B5
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:fe:a7:1b:01:40:fc:3c:c8:8d:59:04:ca:f6:75:1c:ad:
83:d8:25:2a:c5:a4:cd:46:18:eb:3a:cf:4a:d7:88:d0:e7:ed:
33:e8:f4:23:1d:e1:c3:fc:cc:33:2e:48:82:dc:05:d3:0c:a4:
a6:27:9a:40:ae:09:e6:b5:bf:95:90:a5:82:28:55:11:9c:4a:
89:ea:7a:54:b9:6c:c2:64:32:13:09:2f:b9:a4:40:18:2e:25:
39:55:eb:6a:ad:a0:96:57:c0:a9:d1:d5:eb:c1:9c:44:34:e0:
c5:c4:f5:9c:13:f3:8b:10:53:85:67:33:82:81:62:df:93:6c:
bc:3f:58:49:8c:85:47:ff:7f:0d:72:75:bc:24:04:0c:50:1f:
ae:c9:5b:3a:66:c1:60:18:77:4c:29:59:2a:13:1f:51:83:11:
32:69:f7:fb:9f:6f:ae:9d:e9:07:84:5d:77:8a:e6:56:42:95:
49:bc:42:8d:30:f7:47:96:e6:e0:78:34:1d:2e:da:9c:52:1c:
15:dd:ee:04:e5:0a:4e:75:96:d7:0e:46:00:aa:8d:aa:8c:15:
68:d5:2e:78:5e:1c:54:e4:12:03:a7:3f:fa:9a:25:54:63:36:
89:80:ac:b5:14:ce:b0:89:ad:c7:4b:fc:fe:80:02:ae:d1:4d:
0d:e8:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:47 2025 by rpki-client