Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: Kcu0TlJGIhxy+3Nhql3SMe2pUPLM6n2AOqry2yQdqHY=
Subject key identifier: 59:27:76:EB:8E:03:D4:C1:B1:02:F5:49:91:C2:EB:E2:1E:9B:65:FA
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 019A4DAAA3B869DE018E19D2DC514EE97FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0E95
Signing time: Tue 04 Nov 2025 07:00:19 +0000
Manifest this update: Tue 04 Nov 2025 07:00:19 +0000
Manifest next update: Wed 05 Nov 2025 07:00:19 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: RnE80WB722LW6A/Kx7JJoXiy6s+W6LuGxJju4+Pmm7o=)
2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a3:b8:69:de:01:8e:19:d2:dc:51:4e:e9:7f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Nov 4 07:00:19 2025 GMT
Not After : Nov 5 07:00:19 2025 GMT
Subject: CN=592776eb8e03d4c1b102f54991c2ebe21e9b65fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:46:e9:57:91:bf:00:d1:e4:4b:a0:9d:21:
47:9f:ea:44:40:b9:d8:55:6a:63:18:3f:4f:ab:6d:
8d:84:8f:21:4d:57:f2:bf:1d:41:6c:a5:15:d6:7a:
1b:ba:32:6f:ad:25:0e:13:86:67:23:84:c2:59:eb:
04:8e:f0:fc:ed:b2:56:05:a0:95:de:7e:c5:4f:78:
bb:b3:e6:a5:d9:c4:8e:b9:11:f3:77:00:ea:fc:28:
48:5e:91:b7:32:8a:54:6d:72:e2:e5:29:f1:9c:9d:
ed:16:4d:46:a4:90:e1:9c:1e:70:b9:0c:a0:cf:a5:
45:67:51:35:98:d5:3b:b7:d8:f4:83:48:a1:86:f4:
6f:58:de:4c:ba:f1:14:0f:52:54:dc:db:8e:f5:ee:
99:3d:da:c3:0a:70:78:2e:11:a7:96:1b:cb:15:ad:
e7:32:1b:76:4f:d5:bb:74:eb:80:eb:b2:5b:a7:65:
16:3d:d0:3a:f4:bc:1a:e3:f4:d3:22:19:33:d9:de:
b2:56:05:92:d8:4f:3c:b5:7a:ef:31:bd:f7:41:74:
2e:9d:df:f6:1e:29:71:d3:ac:93:24:00:26:18:e7:
0f:a4:ce:d3:3e:35:48:46:b9:77:5d:ca:81:55:1e:
e4:75:ea:b9:43:cb:cc:53:9a:51:67:d8:c3:2e:58:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:76:EB:8E:03:D4:C1:B1:02:F5:49:91:C2:EB:E2:1E:9B:65:FA
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f7:57:4b:20:69:6e:79:39:ea:cf:a2:74:f8:c0:e7:ad:38:
be:ab:66:93:d2:83:64:26:d0:44:29:4c:9f:b6:40:04:ec:45:
43:0e:54:d7:42:aa:2f:65:23:64:1f:b3:f5:11:31:eb:fd:32:
97:26:c9:0e:ad:4c:9a:b9:f9:ce:2f:c6:f6:98:cc:d7:cf:44:
7d:6d:3a:2b:d7:ea:eb:57:e0:31:53:d7:1d:23:c9:71:84:fb:
85:c3:b6:2f:e9:0b:9d:08:e5:2d:45:71:6c:12:94:ca:0f:df:
d6:30:53:5b:dc:31:e1:6e:e9:6f:96:27:19:73:20:19:ed:b5:
26:99:f3:75:6f:fd:95:ee:d4:3a:50:af:d9:c7:7e:57:c3:22:
3d:bd:6a:a7:ca:d5:51:7b:9a:c1:19:f0:69:07:5a:61:52:9a:
73:5c:42:fc:93:1f:e0:f7:bf:cb:fb:dc:ca:e2:74:39:7e:00:
5f:9a:af:fe:7c:45:c7:5b:9d:66:25:f7:d0:22:63:2c:45:dc:
dc:6b:d6:ff:df:0c:3d:b0:03:65:f8:83:15:21:92:b2:d8:89:
be:19:2f:c1:d7:7c:dc:19:39:7e:83:12:f9:6a:0d:dd:da:7f:
fa:9e:2f:27:6c:de:32:68:7f:26:5b:7c:36:c8:4b:f6:bc:cb:
31:0c:fd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:57 2025 by rpki-client