Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: 8nnCyRDnPH90vhTm0TvdoBJZ8+Xk1wDxObq20GoHAV8=
Subject key identifier: DE:89:9E:66:1F:4C:93:98:4E:A7:8B:29:84:05:7F:92:C4:9E:15:42
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 019893A39FE2BA99C7983A84C98CE0FF78DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0DB0
Signing time: Sun 10 Aug 2025 11:00:30 +0000
Manifest this update: Sun 10 Aug 2025 11:00:30 +0000
Manifest next update: Mon 11 Aug 2025 11:00:30 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: BMg+mp+gNU28uoUqzPLV7V42qeK7CzOaCXyey3B964Q=)
2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:9f:e2:ba:99:c7:98:3a:84:c9:8c:e0:ff:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Aug 10 11:00:30 2025 GMT
Not After : Aug 11 11:00:30 2025 GMT
Subject: CN=de899e661f4c93984ea78b2984057f92c49e1542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b3:bb:03:7b:06:21:52:87:08:d6:ba:73:3d:
90:82:a3:91:a8:cb:c5:92:e5:7c:3e:9a:a1:e0:c1:
e8:ef:da:0b:10:f3:d8:91:2d:82:c7:25:78:13:e3:
a4:c4:4e:72:d1:4a:61:93:27:38:dc:bc:02:6b:26:
95:53:11:53:3f:34:73:32:ec:fc:f4:76:2e:7c:2c:
1d:2e:cc:ab:ba:b6:2f:dd:2f:b4:0c:ef:bf:15:48:
a8:1e:eb:5d:06:47:c2:a9:62:69:01:fc:ac:6d:99:
3c:cf:8b:f4:d6:20:17:2a:e5:49:a5:83:58:0c:85:
06:d8:72:b1:1a:2a:03:87:00:9d:d3:c0:04:aa:5d:
ef:07:79:b1:d5:96:f0:a7:f8:24:b7:bb:d3:94:7d:
c3:6e:0c:4b:63:30:c6:07:35:3e:8c:7a:8c:86:e1:
f5:44:c3:2b:43:26:9e:5f:27:dd:55:fc:7f:7d:56:
24:f9:5c:82:93:9d:c9:f5:24:14:8c:8a:01:fe:f4:
5e:20:88:23:64:41:88:0e:83:50:ae:6e:7d:3e:49:
5c:d8:69:bb:d3:82:96:6b:39:c1:a5:5d:21:5e:9f:
f3:eb:2b:7e:98:f3:08:1e:1a:54:d5:d1:47:56:50:
35:b3:47:57:ee:85:c5:d9:c9:c8:7d:e7:e9:14:36:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:9E:66:1F:4C:93:98:4E:A7:8B:29:84:05:7F:92:C4:9E:15:42
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5e:86:52:7e:bd:71:c0:ac:29:6a:e9:05:5d:a3:d2:93:b0:
1e:fd:6f:49:e8:62:3c:55:52:46:32:70:8d:5e:d8:9e:b3:5c:
49:ec:68:06:d5:ed:3c:a9:2e:c3:cf:74:a2:ed:9c:cb:ea:f3:
40:e2:5b:b7:d8:0f:00:5f:0a:0a:1d:92:d1:aa:af:75:ef:34:
fe:69:68:ba:68:1c:b7:8e:ce:27:74:43:fd:5b:16:30:22:31:
70:2c:38:cf:b5:2e:5f:fc:c3:58:e0:5f:55:bb:02:f5:ff:c0:
ea:16:b3:cb:3d:d9:4e:75:96:7f:f7:77:c8:c9:89:3f:51:c8:
1c:be:9e:8d:da:58:cc:f6:ff:c2:6a:40:6a:ce:c9:f6:48:77:
ff:c7:71:45:d7:53:82:1a:ed:09:b3:c9:60:03:a0:af:ed:58:
47:42:9f:71:2b:e2:9b:b7:99:1c:a9:03:10:bc:75:8f:cd:54:
5a:83:b1:d6:6f:6e:38:2f:6c:38:10:87:fc:2a:31:ff:0a:82:
d6:b1:d9:91:44:c9:86:c3:12:8b:9e:61:d1:c1:62:51:0d:e0:
f5:96:59:a8:4d:37:07:d6:06:2b:81:4e:30:ec:8b:ba:54:91:
97:8f:ed:dd:be:62:87:0b:17:c8:9f:bf:90:10:a9:43:03:7d:
68:48:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:08 2025 by rpki-client