
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier: 9zDha6BHLuIEu9hvCGKzrKMhmb3TDNLzSbfapjrXF0Q=
Subject key identifier: 03:71:66:27:48:DD:FF:33:51:65:24:60:B8:FC:FC:34:92:92:F9:0A
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 01987B645946DCF25DAFA8B594FECC37590F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number: 12D9
Signing time: Tue 05 Aug 2025 18:00:30 +0000
Manifest this update: Tue 05 Aug 2025 18:00:30 +0000
Manifest next update: Wed 06 Aug 2025 18:00:30 +0000
Files and hashes: 1: M9VOPO1QfWRnU4hQ9QVXASg96jA.roa (hash: irJVQjaxHBdQQuBZR03utwnIZQAJVfzNYFhhJleKRbg=)
2: MZ_QBnViUEyC8ZRFkedX8Rv5Crs.roa (hash: XyD021GY+KiQ98JM0NY1iLl+QMVF+YOoCbUCeu964IY=)
3: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: +qFEjbmDztN8Ygb0wohe0SvJNj4NbPVlDxcH95t+Yt4=)
4: inYhmF6eIH31cCbSimSwHmklnkM.roa (hash: Z7JVezrkgt/wUelYsw9uGal8TdsJiFhrzbB2ZBBaAzE=)
5: j7YI-J0X44AIcGGjM3OjAhRSkQQ.roa (hash: xDsq4uI95OYOOu+dzOOxnWVECC94izAnKHOzUfE2IBU=)
6: og5qYEWen63bomOC6zKV2-iRJG8.roa (hash: PKfcuKBaAgdkTGnezARQJkmyOyp3oz6QpSYP3CmFp+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:64:59:46:dc:f2:5d:af:a8:b5:94:fe:cc:37:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Aug 5 18:00:30 2025 GMT
Not After : Aug 6 18:00:30 2025 GMT
Subject: CN=0371662748ddff3351652460b8fcfc349292f90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:f8:47:93:17:17:7f:b3:9b:ac:e5:e3:49:
05:c5:8f:98:95:a3:7a:bd:ae:38:44:26:9b:37:97:
5e:46:30:6b:18:f7:17:11:98:d0:9e:87:9d:08:6b:
13:73:d1:74:19:89:1c:71:f6:a7:05:c8:d0:38:13:
62:4a:d3:3c:69:64:b8:a1:51:b2:53:fe:2f:22:72:
52:1e:e8:c5:8d:ac:f1:92:d1:bf:ed:48:2c:5a:9a:
3a:64:6c:c4:74:8b:bf:19:14:4c:5c:a8:5a:19:ea:
54:cf:2d:70:80:d1:d5:33:3e:13:b0:58:a3:b2:d4:
d4:87:b2:35:2f:1b:bd:a0:4f:a1:15:f2:52:fc:49:
00:a7:50:8f:97:47:c4:ed:64:81:0d:1a:fd:ef:7e:
c9:f8:11:3a:34:3d:c2:3f:c3:22:7b:a6:f8:5c:06:
e8:0a:23:94:3e:34:b3:ad:25:d6:94:22:1b:67:58:
1a:f4:75:ad:cf:75:fc:ab:9c:11:11:01:64:01:a3:
a9:2a:e9:7e:72:c2:cf:c9:a9:d4:82:ed:7b:21:cd:
de:b6:1a:80:71:ad:43:12:20:b8:fc:a5:bd:64:93:
b5:73:c6:df:88:8b:f6:03:45:85:f5:4f:57:9d:49:
ef:95:71:13:4f:44:45:97:e0:24:45:87:59:2e:95:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:66:27:48:DD:FF:33:51:65:24:60:B8:FC:FC:34:92:92:F9:0A
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a7:b4:72:7d:13:26:67:a4:08:d0:77:ad:61:3f:76:3c:59:
7b:6c:20:46:d2:93:05:aa:ea:0c:49:29:82:25:94:42:58:8c:
82:88:db:10:b1:3a:73:db:8e:63:18:ba:da:cb:9c:18:58:f5:
b9:37:39:d4:f8:77:d9:79:89:fd:5e:7e:b1:3e:91:8b:c9:6b:
d3:b4:74:a2:db:4e:66:e3:dd:55:5f:85:37:ec:ce:d9:ba:58:
02:2e:ef:38:c4:fd:d0:a2:c4:8f:7b:83:31:eb:11:24:f8:c6:
0f:74:f8:e0:c4:e8:4f:59:b0:85:45:41:2e:4c:86:7d:67:3e:
1d:31:dc:8f:20:59:b8:0d:a8:2a:50:37:31:e1:a9:1f:db:17:
ee:20:95:e2:9c:25:fb:7d:82:36:f3:9e:e8:e0:2f:a1:ca:78:
1c:2b:b1:4f:18:c5:05:6d:9c:3b:77:22:a7:76:f5:dd:39:b0:
6e:23:76:2a:53:53:84:62:f4:e6:38:13:e4:c4:c8:b5:bf:f6:
3b:69:2a:22:42:7d:1e:44:9c:e3:fb:3a:04:b2:91:2a:04:8e:
f6:64:53:c9:f6:54:88:60:60:29:0c:44:b2:00:3a:30:45:f9:
7a:b0:ba:13:e7:3e:c1:31:49:56:61:72:85:90:22:03:d5:01:
3e:c0:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:19 2025 by rpki-client