Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: Oif1aRXqQ/gwmis2iwSebwY8btPdFiRt/W1wwK2Q0mE=
Subject key identifier: C8:AF:3F:11:59:1C:3D:F0:67:24:26:A4:02:FB:45:34:C5:A2:D1:5A
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 0198443EB2DCAA4EE5F4A01C195B9BE08617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 130F
Signing time: Sat 26 Jul 2025 01:00:16 +0000
Manifest this update: Sat 26 Jul 2025 01:00:16 +0000
Manifest next update: Sun 27 Jul 2025 01:00:16 +0000
Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=)
2: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: 7viut0gWwNzWcUDY3P5W4fbix3n97S0OSEYk/2Ox8bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:b2:dc:aa:4e:e5:f4:a0:1c:19:5b:9b:e0:86:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Jul 26 01:00:16 2025 GMT
Not After : Jul 27 01:00:16 2025 GMT
Subject: CN=c8af3f11591c3df0672426a402fb4534c5a2d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:c5:bf:a5:5f:e7:1c:cc:a3:03:ff:48:74:
fb:73:c7:ab:e1:fa:27:10:92:18:9a:7f:02:96:46:
6f:7d:0a:36:df:0f:b3:77:dc:6f:7d:27:4d:f4:1c:
d8:8a:00:9f:32:f5:33:d1:cb:ba:ba:3c:af:85:00:
15:c0:31:c3:d6:12:5c:3b:0f:5d:b5:36:f4:4d:1c:
f3:6d:71:3e:47:1e:1c:90:ae:77:3a:62:1f:95:94:
fa:2c:2a:2c:08:e0:27:aa:44:b9:a7:da:49:f8:83:
a6:16:3b:56:d8:69:aa:67:39:2d:88:5e:24:4b:15:
45:da:35:49:84:5a:86:bc:e8:37:65:53:43:0b:2e:
ed:3e:51:83:c3:b4:b0:94:74:b6:59:f1:76:29:ad:
17:27:4d:72:66:20:54:30:6e:0c:6a:0f:71:b8:d1:
95:de:dd:dd:d4:ef:9b:8e:d8:c8:5c:57:8e:18:17:
7b:f5:38:48:d4:fe:99:a8:34:ce:d0:d1:93:61:c4:
9f:f4:a2:5a:6b:6a:20:ce:90:ae:22:02:f0:90:bc:
0d:78:02:f9:94:03:e1:85:cb:0f:83:11:99:cf:99:
65:e9:be:50:f6:b2:e1:94:4f:89:00:7a:74:75:68:
7e:49:83:62:d8:46:c5:97:b5:27:d4:6d:79:d4:04:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:3F:11:59:1C:3D:F0:67:24:26:A4:02:FB:45:34:C5:A2:D1:5A
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:24:42:02:7c:c1:b1:a3:27:ff:8e:e2:ac:df:72:2b:af:fe:
57:63:b8:48:24:85:90:82:6c:24:d4:dc:b9:8c:21:fe:4b:b8:
88:cc:8a:f8:d1:5b:67:3b:04:7b:14:c9:b8:2d:91:93:f1:38:
7c:d0:1e:88:7c:42:99:60:ce:0b:56:7d:b9:bc:4d:ac:3d:a6:
b7:68:45:f3:75:8f:37:5b:a5:47:ef:f0:93:f2:83:22:2a:03:
df:aa:91:f1:7b:da:7f:72:d6:2b:6e:68:f8:0d:1d:2a:b9:f9:
f4:b0:c6:60:1b:f7:a1:02:f9:ce:d7:8b:7b:bc:cc:62:b2:a4:
25:f8:0d:b7:f2:b4:c3:49:ef:e5:e6:85:c2:e5:7a:f4:37:53:
cf:2d:72:0e:3c:a4:5f:fd:f7:96:f4:19:37:ab:d4:c2:7e:a4:
f4:87:7b:b9:6a:d9:52:2f:75:ca:b3:61:43:d1:93:7e:79:3b:
4e:6f:d5:1b:4d:ce:81:bd:83:a1:de:89:97:b7:53:08:2b:ce:
1b:96:66:29:39:af:95:bf:25:1b:5d:a3:cb:3d:7e:d0:eb:c8:
45:3e:79:df:99:de:dd:f1:ad:83:2c:55:c4:63:fe:fd:f8:44:
3c:80:47:1a:06:c0:e9:8e:38:1a:be:68:8a:be:f7:0a:5b:04:
d9:6a:6d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:46 2025 by rpki-client