Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: yJbQ6U3kQC61ya3ONvTUmChySX/BrWK4pjg6+eBCzIQ=
Subject key identifier: 9C:D1:01:12:7C:B3:DB:86:B4:92:0E:9F:54:2B:ED:61:FB:17:61:90
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 019849D2F1CD77B6ADE8ED2BCAEFBF8BBD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 03:00:17 +0000
Manifest this update: Sun 27 Jul 2025 03:00:17 +0000
Manifest next update: Mon 28 Jul 2025 03:00:17 +0000
Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=)
2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=)
3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=)
4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: HGxUXw1vpwhMnx/AZhU1Iw7FE1V+iNo7DmK0AEpwLlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f1:cd:77:b6:ad:e8:ed:2b:ca:ef:bf:8b:bd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Jul 27 03:00:17 2025 GMT
Not After : Jul 28 03:00:17 2025 GMT
Subject: CN=9cd101127cb3db86b4920e9f542bed61fb176190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:c9:b1:c1:cc:eb:3c:74:9d:68:2d:37:af:
1a:bd:fc:30:4a:ea:ed:76:3d:80:df:d5:e4:37:9b:
ed:42:cf:54:0e:be:b9:ca:8e:7d:1b:8f:ac:7a:af:
f2:f8:0b:71:dd:ea:24:8e:f4:71:c7:38:bb:12:95:
7e:37:40:ab:20:3e:fb:33:82:6f:f4:92:eb:96:0f:
8e:9e:9c:5b:a8:31:8a:bc:44:68:04:4a:66:fd:82:
49:22:9f:e6:3a:58:d9:36:4e:bf:73:a3:58:74:b3:
46:42:1c:dd:fe:10:fc:7e:ee:12:be:b4:ea:f7:37:
7c:30:62:9f:f2:e8:9d:c0:78:b4:a6:0b:df:c3:93:
43:96:26:e9:43:cc:5c:5a:ca:2c:84:01:55:9f:59:
35:07:ba:fc:97:84:e2:c8:31:d6:cc:0c:36:6b:3a:
c6:e9:15:62:bf:e4:f6:82:35:76:06:db:2c:f0:be:
e8:02:ab:30:72:24:52:2e:a7:d6:99:df:32:5e:d4:
78:57:bc:50:31:d1:0a:e7:30:f8:da:40:5f:42:80:
8b:63:a1:cb:71:bf:0f:2e:9f:d9:fd:e1:42:46:82:
ec:07:33:cc:0d:61:0c:3f:06:d7:dc:66:2d:72:87:
64:f6:f0:e7:c0:b0:7a:ff:64:6a:18:f3:a4:60:46:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D1:01:12:7C:B3:DB:86:B4:92:0E:9F:54:2B:ED:61:FB:17:61:90
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:58:a7:bb:3c:39:51:ab:f7:91:a4:a5:e8:63:8b:b7:4e:04:
b3:49:af:e3:da:62:4f:ac:3c:68:e6:ae:85:1d:1c:18:35:76:
83:8b:11:60:ba:af:2c:08:fc:91:41:95:f9:c8:f9:be:07:37:
40:fb:81:dc:89:dd:2f:ca:29:b7:59:be:30:9c:e5:35:18:55:
71:d9:c3:e3:70:76:c1:20:5f:66:ba:49:b2:4a:39:6c:ce:62:
b6:32:7e:9d:76:ae:96:dc:aa:60:1a:e1:89:42:e1:d5:4c:da:
be:0c:0c:39:fd:9e:02:af:d4:b1:cd:c0:43:ef:5c:07:74:ef:
3b:b5:3a:7c:96:dd:75:db:c6:62:3e:1a:98:98:c7:92:73:98:
7c:a8:74:94:8e:49:75:f8:f0:b9:54:4f:af:8c:69:c1:83:b3:
88:7d:c7:3d:94:72:74:9f:9d:84:c8:78:b5:b0:e0:7c:f5:61:
08:37:96:cd:18:ac:32:8c:db:4a:43:1c:04:cb:2a:8e:45:49:
60:48:f9:dd:a0:fd:f7:05:1e:b5:88:12:d1:cd:9c:3a:3c:07:
ed:90:63:0e:fe:09:89:09:3f:79:1a:49:0f:d2:9f:45:b3:22:
4e:54:98:d6:38:fd:f8:f5:2a:69:81:6e:17:ef:be:d2:9c:08:
08:69:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:31 2025 by rpki-client