Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier: V2P6EHHGQOUKvNHUr01O9NRmuePVyiIZDgoMv72bf20=
Subject key identifier: 03:0F:CF:08:C2:74:B1:08:52:07:EA:5E:3B:61:40:48:A8:8D:ED:8B
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 019A4D3CDA3E881818B6A47E8AB42253EDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number: 13D1
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: 5UoFLpQtoNWTRnd2IrHt1zDXCnU.roa (hash: mdK5sii+dlLtOUzntgin3VSmrrSF7YmdacNAlKzg9pg=)
2: MZ_QBnViUEyC8ZRFkedX8Rv5Crs.roa (hash: XyD021GY+KiQ98JM0NY1iLl+QMVF+YOoCbUCeu964IY=)
3: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: UpCfLb8Zkqd+WXX1lSTwrOElRV9AZ2yjCG2ghOCSSr8=)
4: inYhmF6eIH31cCbSimSwHmklnkM.roa (hash: Z7JVezrkgt/wUelYsw9uGal8TdsJiFhrzbB2ZBBaAzE=)
5: oWp27mBOrz7MXkN3QVP_5A9gnvU.roa (hash: /+rul4/RODDQhUqBM7ZwYOoIISVCxzBmGSNg7RYrmUA=)
6: og5qYEWen63bomOC6zKV2-iRJG8.roa (hash: PKfcuKBaAgdkTGnezARQJkmyOyp3oz6QpSYP3CmFp+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:da:3e:88:18:18:b6:a4:7e:8a:b4:22:53:ed:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=030fcf08c274b1085207ea5e3b614048a88ded8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:d3:9b:19:42:8c:a8:05:00:22:89:81:4e:
10:21:57:41:c1:73:ae:40:2b:66:6b:73:3c:94:dd:
26:25:fe:dc:09:61:fb:da:18:16:d0:79:65:c0:2d:
7f:e5:2f:9f:ce:9e:5a:f1:f9:04:dd:8a:67:6e:a3:
8d:87:d4:7d:01:47:ab:b8:7a:4a:47:12:79:6e:e4:
67:cc:f9:54:2f:bf:fa:ec:89:8c:b4:56:97:8e:54:
b2:69:d6:3b:b3:1b:c7:f2:8b:bb:e5:97:1f:41:b9:
8e:ba:1f:81:6e:70:72:d8:e3:94:d1:89:50:89:4c:
ed:3e:71:a0:ef:bd:98:c4:5c:c2:f6:d1:e5:39:53:
e6:52:7f:c9:de:80:64:3b:c1:66:3c:58:01:7e:9a:
f6:26:80:6c:7e:58:99:e7:63:92:2b:d7:59:4a:94:
25:6e:e5:ce:b1:f8:0a:7e:1e:f8:06:30:ad:b2:c1:
c0:07:02:2b:af:9f:68:f1:cf:da:09:f7:39:ea:fb:
68:c4:3b:bb:bf:30:fa:73:7d:60:32:77:79:88:29:
69:1a:0a:7b:d7:cc:c8:cc:97:6a:9b:96:1d:fa:1f:
c6:01:3c:80:0d:10:80:53:97:fe:a5:59:87:52:61:
9e:90:e4:8b:34:99:1e:51:c9:08:37:cc:76:99:c9:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0F:CF:08:C2:74:B1:08:52:07:EA:5E:3B:61:40:48:A8:8D:ED:8B
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e4:18:e4:51:77:1c:f6:1e:aa:cd:44:e5:26:3e:5d:fa:a4:
c6:83:de:28:aa:e1:90:da:b8:45:b6:5d:fb:dd:85:59:0e:ec:
3d:c8:4a:b4:57:86:87:6d:fe:db:a6:fb:ec:d2:d9:ff:80:c5:
6b:f2:4b:bc:96:f6:57:2a:94:00:aa:78:a9:87:e3:c6:dd:46:
b9:d1:bc:a9:f1:c1:34:7b:4a:c0:72:12:3c:51:7b:60:9d:dd:
63:35:2d:7f:29:b8:39:d2:13:f0:f2:b7:05:ec:a0:f6:be:ab:
13:5a:88:3b:ba:cb:8c:78:9f:6a:d1:7a:e5:a1:fc:86:db:45:
e8:c3:2e:ce:17:58:33:4f:47:b8:0f:24:ca:27:4f:9b:b5:c6:
8f:98:4e:0a:c4:53:f2:88:dc:12:48:36:b3:84:c8:73:98:ef:
e3:e2:d4:17:8a:26:84:c2:cf:55:8f:06:32:4d:cb:73:af:5a:
13:15:a0:b8:00:d0:54:5b:48:6d:12:4c:27:98:a3:51:42:b5:
a1:97:87:b5:d1:4a:d6:d7:08:2b:80:46:56:1d:db:07:5f:58:
77:9d:15:99:d9:bc:9b:ac:9f:69:b3:0f:b9:b0:65:6b:63:e0:
f4:fb:1a:51:27:f8:9e:0a:33:21:31:96:25:ef:5d:9f:14:fe:
60:7b:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:24 2025 by rpki-client