Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
File: ss0DX6sYpLeCYURWP2DniYpO8PE.mft (raw, json)
Hash identifier: UiNJJE9fquXoKbukhFka5ZqZtHesFsw3ywy79/y6QsU=
Subject key identifier: 6D:54:9D:1E:BE:AC:99:59:7E:1D:DA:0E:3B:26:7C:F3:8A:23:77:FB
Authority key identifier: B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
Certificate issuer: /CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Certificate serial: 01988A3326A41060E0526B502B5891B9EC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
Manifest number: 113F
Signing time: Fri 08 Aug 2025 15:01:04 +0000
Manifest this update: Fri 08 Aug 2025 15:01:04 +0000
Manifest next update: Sat 09 Aug 2025 15:01:04 +0000
Files and hashes: 1: 8ioI1P3WjfVGZeocJzXjV25zEAM.roa (hash: R5/GZ5yigab2BnvLmrfCDXR0klk9Au0FN2fkvOAY+V4=)
2: ss0DX6sYpLeCYURWP2DniYpO8PE.crl (hash: hDLTSXReUmHXZqe1Rh6TANNov6IlH22OIp1Rts/wFNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:26:a4:10:60:e0:52:6b:50:2b:58:91:b9:ec:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Validity
Not Before: Aug 8 15:01:04 2025 GMT
Not After : Aug 9 15:01:04 2025 GMT
Subject: CN=6d549d1ebeac99597e1dda0e3b267cf38a2377fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f5:91:3d:8f:1c:5e:9c:6c:af:1b:b2:7a:37:
c9:ce:4c:5f:c1:56:4b:fb:c3:db:07:a4:ef:4a:dd:
c7:16:bb:95:3e:72:77:2b:cd:f3:19:5e:76:14:c2:
89:4a:3f:8f:36:b7:7c:a7:df:bc:9d:fe:d9:ee:e9:
6e:7b:6d:bf:99:45:cb:00:8b:cb:4d:31:9b:09:bc:
21:c7:5f:76:7f:b8:73:bb:46:59:c0:05:6a:97:d2:
d6:55:98:90:a8:a4:9f:c9:39:5a:eb:e3:d0:98:d0:
22:d8:b7:28:6a:5f:0a:9a:3f:82:7f:50:c9:41:d3:
52:88:2e:2d:5a:ba:e6:84:b3:80:5e:ce:83:35:5a:
04:d6:b1:1f:ce:e2:c5:43:bc:bf:50:49:3a:59:b1:
b1:22:aa:f6:50:1c:1f:dd:8c:13:08:9c:79:1a:b7:
a6:15:34:d7:f9:d7:36:21:2c:8b:f0:99:d6:70:49:
61:43:56:36:04:be:ec:1c:72:98:2c:ba:75:58:04:
b6:60:49:14:7a:39:5a:17:ba:2a:ad:67:89:b1:0d:
ad:21:a0:a4:f5:ea:86:c2:d3:72:5c:2d:f5:08:4d:
8f:85:60:4a:11:a4:a8:60:85:e0:46:96:fc:40:a0:
4e:ee:96:69:3d:ce:3c:a2:90:51:f7:24:6f:8c:6b:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:9D:1E:BE:AC:99:59:7E:1D:DA:0E:3B:26:7C:F3:8A:23:77:FB
X509v3 Authority Key Identifier:
keyid:B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1b:0c:37:8b:92:0f:91:a2:4a:a8:1e:28:ec:e0:65:19:a9:
6e:fc:f3:34:62:20:ef:ff:29:4a:fb:65:fe:47:ed:45:03:c9:
7a:93:31:c7:6d:3d:82:4c:ee:71:d0:bb:14:f4:02:1f:5f:cd:
45:66:f8:da:89:50:c3:33:b7:2a:d0:53:92:2a:c2:82:20:53:
44:84:66:46:5f:9e:74:94:f1:39:93:dc:72:a4:c4:c6:53:2e:
3c:44:1a:db:3a:cf:8f:eb:66:e3:ca:29:92:85:9c:83:87:84:
d5:51:d0:d5:3f:35:68:d5:fc:51:1e:f7:2c:3f:fa:64:21:6b:
20:73:0c:be:d7:37:d8:96:e1:fd:63:f6:5e:42:9b:c3:0f:7e:
7f:6f:e2:41:4b:5a:5c:1e:d5:59:61:1d:07:2e:cf:fa:2c:0a:
48:92:06:e7:f9:2c:4f:45:f3:ed:43:bc:5f:1e:c7:05:56:36:
51:78:94:82:d6:f1:a1:9c:cc:b7:2c:d4:ae:78:14:47:bc:da:
a0:08:2a:89:d8:6c:eb:84:6b:12:1e:57:96:bc:55:b0:11:09:
c2:57:b8:79:dc:7e:1f:c9:80:85:f5:f3:47:21:0b:eb:a1:95:
75:0b:2a:03:40:eb:05:0b:6d:e9:3d:99:e5:2b:54:3c:3b:84:
a3:4a:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:42 2025 by rpki-client