Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: LnhQCLStmsk8Oi3DKuROM9VOWpxSubq3h333tNjbJbA=
Subject key identifier: E2:13:01:9B:55:EB:AB:6C:95:4F:81:70:B1:7E:95:B1:E8:68:C5:EC
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 01988BB3887F4E00EFCC9C42A3190BB989DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 156D
Signing time: Fri 08 Aug 2025 22:00:55 +0000
Manifest this update: Fri 08 Aug 2025 22:00:55 +0000
Manifest next update: Sat 09 Aug 2025 22:00:55 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: vbgayJAsrWa5J2vRre/ZXwWREyNaGO/5G/PILIML3Rs=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:88:7f:4e:00:ef:cc:9c:42:a3:19:0b:b9:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Aug 8 22:00:55 2025 GMT
Not After : Aug 9 22:00:55 2025 GMT
Subject: CN=e213019b55ebab6c954f8170b17e95b1e868c5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:a3:10:b6:51:66:17:37:40:2b:ad:6c:ec:
2b:42:80:24:1a:5e:11:5b:6c:5b:4e:aa:fe:d0:ec:
50:9a:be:c5:00:43:11:af:f6:f6:e2:24:24:54:25:
6e:9a:50:f3:61:c9:f0:63:d2:01:39:a4:1d:02:22:
b5:78:02:2c:df:d5:a0:d3:9b:e6:65:70:55:cd:a1:
e2:95:a2:d9:c9:73:dd:8f:33:19:91:07:82:19:95:
c7:b8:36:a9:a2:7c:06:f8:55:a2:e6:62:c7:a3:ec:
78:35:0b:54:1b:8f:53:b7:e3:34:b9:11:af:3c:21:
5a:d8:9d:31:31:2c:66:2d:3e:1b:f9:b2:21:d9:d8:
4a:57:3e:fc:ee:91:33:3f:79:87:09:43:5a:b9:34:
d8:1b:a6:fb:a3:e5:7f:ac:a1:e6:f6:a2:7e:69:bd:
da:fa:18:81:f0:83:5a:65:6e:00:4e:37:6b:c0:83:
1d:0d:d3:07:da:07:7c:e9:d5:3a:f4:02:19:96:bf:
f9:d9:5b:71:c9:59:47:64:8e:12:2b:ec:43:03:c3:
9f:4e:50:a1:60:44:67:68:ef:53:dd:ba:af:7e:31:
01:19:45:1d:b1:9e:c3:6a:95:03:45:e9:4f:2a:8c:
7d:3d:f1:ad:3d:0a:d0:0e:86:98:6f:81:f9:24:29:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:01:9B:55:EB:AB:6C:95:4F:81:70:B1:7E:95:B1:E8:68:C5:EC
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:24:2d:6f:90:f6:ff:0c:bb:33:be:49:4c:7b:72:cc:0a:85:
3a:30:d6:49:89:18:6d:c1:21:20:18:77:8a:42:b1:42:f9:04:
47:8e:97:ad:c5:b5:43:28:6e:9a:1d:5e:45:41:ab:23:03:ae:
c3:b1:ab:73:e1:84:a0:62:28:c5:21:15:50:0b:86:11:e4:22:
6b:fd:dc:f9:1a:24:1d:14:84:84:aa:c2:d4:53:15:00:3e:e3:
23:ca:31:5f:9d:d5:7b:2e:31:99:12:99:97:33:de:3b:2d:ff:
8a:df:13:9c:c2:06:19:75:92:66:e3:ba:d2:c1:5c:1a:e0:3d:
c6:8e:94:45:f0:00:13:97:a4:7c:84:07:c0:ef:18:36:32:98:
6c:ef:18:05:b3:4a:32:7a:51:7f:10:95:64:37:59:c4:23:2f:
cc:ce:73:17:59:25:f0:b6:73:aa:7c:66:b8:9b:43:54:e1:b8:
1c:ee:92:84:0f:74:91:67:c3:a4:aa:94:c4:c0:62:87:99:d8:
3a:03:ce:a3:bb:d9:9b:2d:62:0d:d0:5a:eb:43:52:bc:87:35:
a0:7a:47:42:fc:bd:d5:06:8f:7c:b4:47:ae:1f:fa:25:cf:27:
34:09:24:aa:79:f2:d4:b8:dd:43:fd:81:0a:f3:e8:4a:24:9f:
e8:48:00:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs4h/TgDvzJxCoxkLuYnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhY2VmNDVmYmIwZjI2OTMwYWViODMzY2Y3OWZjNDFlMjJj
YTkyMzUwHhcNMjUwODA4MjIwMDU1WhcNMjUwODA5MjIwMDU1WjAzMTEwLwYDVQQD
EyhlMjEzMDE5YjU1ZWJhYjZjOTU0ZjgxNzBiMTdlOTViMWU4NjhjNWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWKjELZRZhc3QCutbOwrQoAkGl4R
W2xbTqr+0OxQmr7FAEMRr/b24iQkVCVumlDzYcnwY9IBOaQdAiK1eAIs39Wg05vm
ZXBVzaHilaLZyXPdjzMZkQeCGZXHuDaponwG+FWi5mLHo+x4NQtUG49Tt+M0uRGv
PCFa2J0xMSxmLT4b+bIh2dhKVz787pEzP3mHCUNauTTYG6b7o+V/rKHm9qJ+ab3a
+hiB8INaZW4ATjdrwIMdDdMH2gd86dU69AIZlr/52VtxyVlHZI4SK+xDA8OfTlCh
YERnaO9T3bqvfjEBGUUdsZ7DapUDRelPKox9PfGtPQrQDoaYb4H5JCk7LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOITAZtV66tslU+BcLF+lbHoaMXsMB8GA1UdIwQY
MBaAFErO9F+7DyaTCuuDPPefxB4iypI1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUt
MDZmNzI5MGRjNDRhLzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUtMDZmNzI5MGRjNDRh
LzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiQtb5D2
/wy7M75JTHtyzAqFOjDWSYkYbcEhIBh3ikKxQvkER46XrcW1Qyhumh1eRUGrIwOu
w7Grc+GEoGIoxSEVUAuGEeQia/3c+RokHRSEhKrC1FMVAD7jI8oxX53Vey4xmRKZ
lzPeOy3/it8TnMIGGXWSZuO60sFcGuA9xo6URfAAE5ekfIQHwO8YNjKYbO8YBbNK
MnpRfxCVZDdZxCMvzM5zF1kl8LZzqnxmuJtDVOG4HO6ShA90kWfDpKqUxMBih5nY
OgPOo7vZmy1iDdBa60NSvIc1oHpHQvy91QaPfLRHrh/6Jc8nNAkkqnny1LjdQ/2B
CvPoSiSf6EgACA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:00 2025 by rpki-client