Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: C6rBIu49Vt5qCORJTV9i48BDuBBmxufVP3NZSx2FLZc=
Subject key identifier: 95:08:BD:26:81:49:AF:1F:F5:2D:A9:11:D9:A0:5E:91:2A:0F:34:87
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 0198537BB151B8AB51FAFCAE2844F91C185F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0A0A
Signing time: Tue 29 Jul 2025 00:01:11 +0000
Manifest this update: Tue 29 Jul 2025 00:01:11 +0000
Manifest next update: Wed 30 Jul 2025 00:01:11 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: aurV1bulIvD4RZhUAAdtDRFcky5aQy2jqSLMXX9vyBY=)
2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:b1:51:b8:ab:51:fa:fc:ae:28:44:f9:1c:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Jul 29 00:01:11 2025 GMT
Not After : Jul 30 00:01:11 2025 GMT
Subject: CN=9508bd268149af1ff52da911d9a05e912a0f3487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:e6:d1:73:89:52:62:1c:67:97:64:8a:e4:
0e:fb:46:11:9f:35:03:18:27:cf:10:63:09:22:f0:
29:9a:af:e2:61:94:33:d4:f4:36:ab:f1:43:87:5a:
2c:fb:ca:24:c8:75:d8:9c:b1:9f:78:59:78:68:dc:
b1:56:c6:0b:4d:66:15:0c:73:1d:12:82:fd:8a:06:
6d:5c:b1:f3:57:6b:ba:72:67:68:79:a3:d8:c6:60:
ec:90:c7:24:18:84:77:63:8b:77:e9:04:49:50:41:
9f:a7:8a:02:65:1d:7d:7e:6e:89:78:b3:33:e3:b4:
7d:ef:b4:d2:c1:4a:e4:9a:04:3f:5f:74:bb:64:60:
21:a0:0e:7c:c2:0b:c7:14:d2:e9:00:e1:04:1f:d7:
4e:83:87:1f:17:c3:82:84:05:8e:b4:e5:56:0b:cd:
9f:e4:e4:6c:4d:48:b8:c1:8f:9c:5e:b5:90:76:d7:
28:66:8b:c5:65:fd:43:59:08:13:e5:05:7c:7d:53:
1f:ef:8f:ee:55:24:c7:01:15:4c:4b:a3:f7:75:4b:
bc:0b:f3:6d:72:55:2b:a5:ed:84:82:31:70:be:50:
dd:bc:6e:1d:bd:0f:ae:a7:3d:98:dd:3a:95:6f:31:
71:b2:72:2e:9e:81:64:e2:a9:f0:94:e3:0a:6d:f2:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:08:BD:26:81:49:AF:1F:F5:2D:A9:11:D9:A0:5E:91:2A:0F:34:87
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4d:87:07:05:ea:21:85:87:41:4f:54:14:ac:78:17:7f:ce:
08:f6:87:9a:51:c4:07:7e:b2:60:d1:76:06:76:13:61:ec:58:
4a:1f:9d:50:c1:49:c7:4a:5f:8f:46:e3:35:cd:8f:33:d1:01:
e3:24:93:02:87:97:21:71:ea:c4:0e:55:44:2f:cf:94:b5:1c:
f3:8e:a2:56:71:0b:db:8a:11:7b:d4:a6:77:d8:8a:f4:07:0f:
5a:3c:84:be:f5:68:d8:1a:2e:41:95:0e:10:57:f8:8e:79:87:
58:51:9e:4b:78:04:38:60:69:34:11:aa:76:28:aa:34:99:aa:
2c:69:aa:08:26:a4:11:fb:a8:60:9b:34:3c:29:1f:31:24:65:
e7:9f:b7:68:c6:16:f8:3c:c8:37:c2:5d:c9:e4:5d:9b:cc:de:
9a:cd:49:61:01:c5:d7:49:35:97:c6:0e:4a:7e:92:a6:7b:2f:
7b:fd:52:26:24:82:e0:be:a8:3f:6a:18:01:44:7d:2a:0a:42:
63:67:06:22:c8:aa:5b:8b:e4:77:3b:93:b5:90:0d:57:32:20:
0f:20:34:3c:6e:d6:b6:37:ba:d0:eb:7f:bc:ec:60:6c:e6:95:
fe:68:fc:00:f1:ab:aa:df:73:23:7f:54:4d:f0:58:c0:05:9b:
85:51:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:33 2025 by rpki-client