Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: Rxp9LZTDQ1oWozQvNFTICtr0+ZDx135kW5NJjQM1I2E=
Subject key identifier: 9C:11:CB:25:BE:F2:2E:3E:D3:27:3C:6E:82:91:CF:DE:C0:05:4A:1D
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 01984B5523FFA5D8CF4CEE86ECF03CD43D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:02:06 +0000
Manifest this update: Sun 27 Jul 2025 10:02:06 +0000
Manifest next update: Mon 28 Jul 2025 10:02:06 +0000
Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: ai8UkhgKhj5s5Qd4Bzv+xbtgFEeBuxsKlR/mqncVJZw=)
3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:23:ff:a5:d8:cf:4c:ee:86:ec:f0:3c:d4:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Jul 27 10:02:06 2025 GMT
Not After : Jul 28 10:02:06 2025 GMT
Subject: CN=9c11cb25bef22e3ed3273c6e8291cfdec0054a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:63:4a:f6:f0:86:19:96:85:cc:4b:c6:cd:
bd:78:1c:27:2f:ec:44:9b:ab:b0:1d:d0:50:73:0e:
08:26:97:b7:06:8c:77:2d:81:b2:74:4b:c5:ae:08:
15:ce:a4:cc:92:86:9f:be:6f:30:54:5f:fc:5c:d0:
99:02:9b:bb:b8:35:e9:14:d5:5c:b0:78:8e:18:ae:
a4:6a:38:54:ed:c4:31:f3:bf:e1:d0:dc:3e:c5:dd:
94:79:22:ec:65:12:29:c7:22:67:f4:89:f5:cb:d3:
0e:90:e5:55:35:07:36:e9:ba:2d:af:b5:e0:b7:b8:
cc:a6:c7:49:dc:ce:41:e7:46:6e:9c:4b:94:32:9d:
1b:55:f8:f3:55:78:7e:9f:38:1a:b0:88:fc:7e:9d:
e0:20:d9:36:23:a9:0a:ec:aa:b6:bd:66:e4:fc:33:
c1:8d:39:2a:15:15:77:1e:f5:a4:7b:bd:0f:cf:a0:
e5:6b:3b:70:38:f8:7a:c9:9f:4e:7f:a9:ab:f4:93:
f7:b8:73:8e:b7:a8:3a:ab:9d:5b:10:56:74:0c:6c:
a9:21:22:ae:bd:4d:7f:fb:4a:1d:4d:5a:0f:96:21:
15:5a:f4:10:2f:f8:a1:6b:4b:b3:f5:b3:2b:72:ff:
31:ff:9a:9b:f1:9f:9a:25:eb:f1:06:7c:21:58:61:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:CB:25:BE:F2:2E:3E:D3:27:3C:6E:82:91:CF:DE:C0:05:4A:1D
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b0:49:64:35:d0:b0:ae:ff:b0:b8:ed:06:d0:e5:80:8e:7b:
dc:b0:57:82:f2:cd:6b:db:b9:e5:55:7f:1c:4e:5a:37:45:01:
07:81:fd:0c:93:5b:03:6f:4f:d4:85:6b:3c:01:46:5e:f4:1c:
97:98:37:dc:a9:00:59:3a:ce:96:64:10:31:7c:9d:0f:85:c3:
00:41:7b:06:98:fa:ec:29:47:88:59:e7:d7:71:f3:b4:9c:51:
12:88:d3:77:7e:a4:cb:57:1d:03:a2:08:0a:6a:5b:90:fa:48:
51:44:a6:b9:7a:15:7e:90:79:ed:ee:0a:1a:c6:71:e9:18:30:
c8:8e:df:3e:e9:69:85:34:74:c2:f8:1d:45:2e:cb:60:2a:78:
5f:de:33:d6:0c:b5:28:0d:55:1c:00:83:a9:e3:32:45:c0:79:
df:ed:d0:68:fe:44:ae:4d:51:04:f2:61:48:83:72:e8:99:0d:
8c:24:7f:94:77:4c:eb:ff:be:33:ad:b3:c5:91:7e:b1:e9:44:
e9:4b:d5:ef:83:97:42:8f:16:50:2b:46:06:1e:42:01:c6:57:
ca:09:3a:0b:f4:9a:3b:69:7e:b6:c6:e0:cf:c1:34:96:71:f6:
70:0d:ee:23:93:a1:78:73:22:68:98:fb:0d:4c:60:89:52:a3:
60:3a:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:20:00 2025 by rpki-client