Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
File: ss0DX6sYpLeCYURWP2DniYpO8PE.mft (raw, json)
Hash identifier: MMPS/5rxzpGMpd8ck7PydObajGKSc/adryaqg7ZoCaY=
Subject key identifier: 85:B9:29:E1:17:B1:FB:BD:73:6F:9F:91:94:76:BC:CE:82:15:9F:4B
Authority key identifier: B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
Certificate issuer: /CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Certificate serial: 019A50076E12BBC74CFA0D754084D20714D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
Manifest number: 122A
Signing time: Tue 04 Nov 2025 18:00:55 +0000
Manifest this update: Tue 04 Nov 2025 18:00:55 +0000
Manifest next update: Wed 05 Nov 2025 18:00:55 +0000
Files and hashes: 1: 8ioI1P3WjfVGZeocJzXjV25zEAM.roa (hash: R5/GZ5yigab2BnvLmrfCDXR0klk9Au0FN2fkvOAY+V4=)
2: ss0DX6sYpLeCYURWP2DniYpO8PE.crl (hash: asF7etTFG7OBhSXRafoPZB5K3oc5uedZ48GjOd32h2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:6e:12:bb:c7:4c:fa:0d:75:40:84:d2:07:14:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Validity
Not Before: Nov 4 18:00:55 2025 GMT
Not After : Nov 5 18:00:55 2025 GMT
Subject: CN=85b929e117b1fbbd736f9f919476bcce82159f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:76:c4:16:42:b4:43:6e:8d:66:cf:2c:9c:
ef:3d:69:8b:59:d8:31:f7:68:23:6c:82:4e:2e:bc:
cf:57:0f:fa:2e:7a:54:df:34:80:b9:22:ef:b4:25:
a7:50:84:bd:5f:66:cf:d3:4e:4f:ed:22:02:84:66:
ef:ad:0b:25:ff:9d:c2:d2:54:f9:8f:01:9d:f3:83:
c9:13:b6:ca:33:fb:5a:9e:9c:47:96:39:d2:52:2f:
d7:e9:d8:1a:cf:1a:c6:bf:f2:ea:f4:d3:79:6f:aa:
0d:21:15:cc:e9:28:01:c9:08:7a:11:56:0e:22:4d:
7b:b7:31:76:36:3a:f1:d9:3e:7b:b8:4d:b2:46:13:
23:5f:b6:99:ae:d9:cc:65:5d:90:8e:30:c0:22:b7:
e7:d2:46:58:ec:79:4b:86:92:0c:47:53:d7:30:e0:
12:9e:e3:8b:e6:46:7d:25:d7:cf:1b:f0:01:71:cd:
13:62:3a:f9:58:fb:ba:98:45:fe:03:df:8a:05:3a:
ce:16:c2:f3:95:56:1e:6d:ac:83:b6:1f:2f:da:1b:
46:37:7b:70:8a:04:e2:fe:c4:fd:0c:56:27:85:bd:
c5:6b:4d:b6:71:9b:e8:ca:fd:67:13:1e:f1:62:84:
47:36:a2:12:4f:98:0c:af:cd:0f:9e:89:a1:47:d8:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:29:E1:17:B1:FB:BD:73:6F:9F:91:94:76:BC:CE:82:15:9F:4B
X509v3 Authority Key Identifier:
keyid:B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:05:72:da:26:4f:92:49:16:29:3e:1f:89:02:65:5e:8e:f6:
9a:b1:14:66:a3:26:57:17:22:b2:a7:a2:59:93:98:8b:46:d9:
8d:81:fa:1c:15:11:56:2f:6c:9b:7f:1e:25:17:04:57:37:29:
e3:f2:d5:7c:06:e4:a9:8e:ff:25:31:27:26:18:ca:b1:2a:7b:
c2:b3:e4:5b:33:ea:3b:9f:e7:a0:e7:18:f4:75:b1:7a:3d:bd:
e7:02:95:ef:21:0b:15:e9:01:1e:53:d8:67:03:1e:61:8d:d1:
f4:ed:55:5f:2c:ba:4e:7f:99:65:b2:d2:f5:94:a9:68:dc:bb:
a3:dc:b4:5c:22:c1:2c:10:12:81:a7:67:4f:09:41:4b:72:30:
0f:88:db:1a:b6:3c:ca:3d:bd:61:f9:81:e5:d7:8a:27:99:a1:
14:df:33:62:e1:56:d4:0e:2c:6d:79:d3:71:df:ec:d4:a0:d3:
c5:50:49:8b:ae:da:7f:ea:2b:30:2b:0e:a6:ad:a1:b2:6b:e2:
e8:12:e9:7f:49:0f:4d:e2:3c:9a:56:3c:72:73:f5:b0:c0:e8:
b9:f7:0c:83:98:8d:bd:0b:7c:8f:cb:c0:7a:ef:46:53:e2:ee:
2b:ed:76:91:5b:87:36:3d:d4:ed:0c:40:82:49:cb:18:d8:9b:
f4:65:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:37 2025 by rpki-client