Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: O7jH4r4QI2dyn/7kYDotECghT/KT9tJ3UR88VKLWPPk=
Subject key identifier: B1:81:69:E3:C0:42:4F:53:5B:D2:7F:A4:4C:53:8A:D3:06:63:79:B9
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 0197778A3A19CF01D33DA611194BDA54D1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 14DE
Signing time: Mon 16 Jun 2025 07:00:36 +0000
Manifest this update: Mon 16 Jun 2025 07:00:36 +0000
Manifest next update: Tue 17 Jun 2025 07:00:36 +0000
Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: 4KmjiweoTlo9zNeDRm0hgqhtS/h9edQCg/DpjiDFq5o=)
3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:3a:19:cf:01:d3:3d:a6:11:19:4b:da:54:d1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Jun 16 07:00:36 2025 GMT
Not After : Jun 17 07:00:36 2025 GMT
Subject: CN=b18169e3c0424f535bd27fa44c538ad3066379b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:bb:15:e8:62:60:60:8a:78:29:b9:d0:66:
da:53:33:16:20:ec:ff:11:75:2b:a9:0b:f9:39:3a:
dc:b5:c6:e3:75:e3:8e:b4:78:16:db:60:e1:ab:d8:
a4:26:88:eb:f0:f8:bc:94:db:03:90:3a:43:46:89:
9e:72:51:1d:36:91:21:0d:32:0c:3f:96:7f:cc:ea:
0c:03:8c:0f:01:7e:10:2a:40:c1:e4:98:f6:7b:96:
6b:26:b6:63:25:5d:26:37:f6:19:ce:5d:46:a9:48:
c6:d0:a6:86:67:fe:09:81:63:32:08:94:ff:05:82:
d0:0a:de:1e:aa:2a:86:bf:b6:1b:61:a1:6b:16:1f:
d3:7f:9e:1e:6f:d2:e3:77:6d:c6:59:3b:09:d8:07:
7b:79:a9:eb:26:49:0c:83:f9:d7:37:67:35:b2:54:
bb:fa:e5:db:c7:58:f2:3f:3e:60:8e:6e:fb:b9:dd:
a5:5d:8c:bd:35:8a:d5:f0:5a:4f:7d:d0:3c:19:32:
e0:82:2b:ef:e1:38:8e:73:d8:7f:b1:6c:c6:8d:a2:
b9:c6:ba:2e:9b:6a:c1:6a:f1:d1:95:b5:d0:3d:ff:
ba:4b:7f:be:19:3c:ce:3f:f4:71:22:79:ac:40:23:
e6:e8:e4:53:94:c6:1b:64:de:ed:75:9c:aa:3e:0e:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:81:69:E3:C0:42:4F:53:5B:D2:7F:A4:4C:53:8A:D3:06:63:79:B9
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ed:6f:06:d1:28:6e:cd:4e:20:a6:ee:5d:79:ac:9e:fe:fe:
a1:b2:5a:a5:37:ef:c7:b9:1c:a7:7b:56:3d:bc:3f:0e:51:2e:
8e:94:2a:1f:90:e4:f7:61:b4:41:fb:7a:76:f6:8b:fc:5d:17:
a4:ab:bf:b0:9d:4e:57:17:44:ce:b3:7e:19:8a:67:b8:31:5e:
cb:1f:63:fa:1c:67:98:de:b7:0a:34:f4:c3:b0:2e:ea:7a:cc:
a4:a8:aa:d3:be:56:5a:26:27:36:5b:05:6d:6a:93:41:1a:85:
75:09:bc:4d:38:1f:78:47:e5:90:8a:c4:f5:10:a8:49:aa:4b:
9a:43:4a:14:d6:3b:81:67:8b:06:bd:2a:23:d6:28:94:f4:1e:
86:d2:b5:fc:91:c4:f8:e0:29:a7:37:fb:e9:05:6b:86:49:d9:
78:18:05:24:e3:cf:b4:4f:cd:0d:81:92:e3:d7:64:5c:10:90:
86:ca:79:75:4d:c3:82:9d:8a:94:d8:26:ce:bd:4b:69:bf:d6:
cd:8b:3d:45:e7:ce:6b:34:01:80:8c:fb:60:86:9f:0b:d4:bd:
72:5e:11:dc:a9:60:83:af:34:0a:17:6b:9a:e2:f0:f6:9c:f5:
5c:fa:f3:c4:06:b3:f2:fb:e6:1b:7e:c3:10:e8:12:6c:43:e4:
54:a2:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:47 2025 by rpki-client