Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: o3NufqpMt1wYIwK2UB1imTW+vCZYRWqwgUtnmavtvmk=
Subject key identifier: A3:B9:A2:52:F2:0C:0F:ED:AF:74:46:82:27:9C:E8:F6:20:DC:FD:3E
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 01984965B34D71F6908638B5486B4F6AD01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:00:58 +0000
Manifest this update: Sun 27 Jul 2025 01:00:58 +0000
Manifest next update: Mon 28 Jul 2025 01:00:58 +0000
Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: NcXtiqZaJ4cGICZTILCHgWI63Uq1gTkyamAPwEDmJ4E=)
3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b3:4d:71:f6:90:86:38:b5:48:6b:4f:6a:d0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jul 27 01:00:58 2025 GMT
Not After : Jul 28 01:00:58 2025 GMT
Subject: CN=a3b9a252f20c0fedaf744682279ce8f620dcfd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:db:5c:80:e4:61:96:1c:7e:ee:18:46:f9:
9e:23:38:80:e2:d9:67:98:44:34:8d:ac:f8:92:13:
27:04:c5:0c:79:87:17:00:e5:71:40:81:aa:70:d2:
66:f1:ab:53:55:58:c9:c9:33:49:4c:b4:2d:77:b2:
ca:64:84:61:c3:fd:8b:8b:3c:ce:e8:8c:c4:65:5f:
1a:84:32:1b:f4:81:b3:97:d6:f7:3a:06:71:77:86:
3d:37:db:e5:c4:08:fb:1b:ae:ef:2e:11:58:a5:d2:
c7:37:37:19:59:b9:5a:43:8f:d6:fd:ac:1b:43:79:
f5:b9:1f:10:ca:73:54:bd:14:b3:69:bb:bb:3c:76:
e2:49:48:de:c9:51:bf:a4:e6:ab:0d:77:2d:44:25:
76:f7:17:f7:d2:26:9c:e8:8c:39:3e:17:81:c8:ad:
bc:ef:f0:4a:89:64:7a:d3:1f:77:fa:a4:92:ca:30:
86:83:13:cd:e9:96:3b:c2:3a:92:2d:4f:b7:52:d4:
e4:c4:e5:cf:36:2b:fc:c1:d7:d2:28:78:74:5e:43:
63:3b:3c:a0:5e:ae:89:04:22:2d:7d:1f:5e:3a:d7:
d1:8a:8d:9f:43:13:b0:29:37:01:bf:7c:fa:03:7a:
45:cf:0d:53:41:2a:a5:72:4d:fc:ad:80:48:1b:74:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B9:A2:52:F2:0C:0F:ED:AF:74:46:82:27:9C:E8:F6:20:DC:FD:3E
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7a:2d:d7:11:d8:f3:76:4d:63:44:c4:7d:57:84:7a:6e:24:
65:77:58:88:1d:0b:ad:24:59:7f:4d:e6:ef:4f:4f:6d:a3:a8:
49:c3:ff:09:fb:5e:ab:7d:76:6a:ba:63:04:f0:ef:ac:90:13:
0c:09:46:2a:e5:8f:fa:85:95:b6:4b:13:9c:e7:b0:e4:0d:d8:
c2:97:e9:b1:c2:71:a2:26:8c:c5:95:1f:e4:42:a1:63:78:22:
4b:7d:6d:93:d9:6c:22:54:97:ac:be:65:87:ee:a7:82:01:4d:
e1:ed:62:ea:b7:e5:d1:79:24:ca:c5:03:9a:89:45:8b:dc:48:
a0:35:1a:54:2a:f6:e3:63:af:f3:5a:43:8e:85:d2:9d:45:22:
95:36:73:62:17:b3:55:78:31:ee:92:69:5d:bf:70:85:ff:79:
75:0e:7f:ba:bc:f0:d7:99:ba:10:0c:d9:e6:9f:bc:67:ba:fc:
1b:7f:57:3a:69:02:f2:e8:c7:f2:2c:10:8e:66:5e:f2:42:49:
0a:4e:a2:b9:08:e5:e5:b8:03:60:cf:f9:03:b8:2e:50:ec:14:
18:5d:c8:43:c4:21:59:6a:06:d9:5f:c2:bb:e1:8b:9c:71:7d:
27:8c:9c:0a:7f:30:71:96:1e:80:11:a1:07:ca:76:20:3a:e0:
4a:df:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:48:15 2025 by rpki-client