Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: 6bLn3qIZCMkUqEC/D6QjDTcBaDD5cGBWy+vGhzshH00=
Subject key identifier: B8:BF:9C:47:A7:DF:16:FF:7B:9A:45:ED:E1:FD:A5:83:D1:C3:BE:21
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 01984B547D703278FD794948B494D6531E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 05AC
Signing time: Sun 27 Jul 2025 10:01:25 +0000
Manifest this update: Sun 27 Jul 2025 10:01:25 +0000
Manifest next update: Mon 28 Jul 2025 10:01:25 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: Ro1uwKz+SFaQMSDC+i23H6wVtqvGBACPx5eRBhloq/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:7d:70:32:78:fd:79:49:48:b4:94:d6:53:1e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Jul 27 10:01:25 2025 GMT
Not After : Jul 28 10:01:25 2025 GMT
Subject: CN=b8bf9c47a7df16ff7b9a45ede1fda583d1c3be21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:a1:49:2b:a7:35:3f:25:03:42:94:10:e8:
c9:51:6c:e0:ca:4f:b4:f3:4e:7b:29:18:db:8e:98:
0a:f1:e8:d3:48:80:b5:75:20:c9:11:a3:d5:ec:ce:
3e:de:19:93:bc:a1:03:46:94:e2:49:4b:24:14:15:
0e:cc:b0:0f:95:29:27:8b:3d:18:d8:fd:ad:e1:08:
c1:29:c0:2f:6f:f0:23:07:5f:83:42:ee:9e:b9:a3:
ff:ed:94:52:f3:d5:11:7d:6a:9e:da:3f:9c:ae:e7:
27:7d:8a:d5:2c:63:1f:19:46:db:97:de:ae:79:ae:
90:ff:00:63:21:11:cf:88:2d:90:02:ac:ac:ae:7c:
11:0e:86:50:6a:d8:cf:cb:c8:6f:0c:8e:ea:f3:d9:
f3:79:46:de:02:1e:2c:8e:c3:6a:79:fd:bb:8d:fc:
b3:d0:bd:be:d7:4e:1f:02:5c:10:a4:e6:a6:1d:21:
fc:26:c4:75:e9:58:58:83:97:82:d7:49:8e:02:1f:
2b:a5:78:fe:5f:0e:f4:02:d1:f6:6d:f7:f6:9f:ae:
89:ad:e0:21:50:e2:9a:69:a6:d6:06:cd:54:a7:05:
21:93:91:14:e6:a9:b4:3a:9d:cb:e2:72:5f:3d:86:
51:33:ef:22:ec:bf:e1:52:73:4f:38:ce:73:b4:13:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:9C:47:A7:DF:16:FF:7B:9A:45:ED:E1:FD:A5:83:D1:C3:BE:21
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:17:f2:c1:d7:01:e2:b5:44:14:76:e1:30:1d:8c:97:e2:81:
5d:00:2f:71:4f:90:8a:4b:10:39:ea:ef:15:53:0c:c3:ec:6c:
be:de:a0:45:0b:56:e3:de:9a:f0:9b:3d:84:16:f0:db:5c:48:
6c:d8:d5:76:90:24:31:c1:e1:4b:0f:0f:ba:93:5e:b0:ed:eb:
f6:a4:ad:22:b4:af:93:a3:ef:93:c2:e8:1e:06:84:08:da:d5:
b0:27:3d:92:3b:09:31:eb:ce:9f:88:26:ab:58:6d:91:7f:b0:
58:6a:ea:90:ce:5a:a6:85:92:68:17:c9:46:59:ff:2d:ba:83:
ac:3a:ee:db:e3:f0:12:b4:5d:35:19:23:7f:6b:53:d5:dd:55:
ac:54:84:59:5c:d3:68:63:72:fb:d2:6d:6c:ce:3e:a2:a8:b2:
be:f7:29:17:de:6c:a2:43:bf:de:38:f6:01:92:99:2b:1b:21:
6d:2a:98:a5:05:3b:78:d3:52:60:e5:5e:94:59:b1:0e:b4:85:
8b:65:f8:20:b1:32:c9:48:14:97:f4:4f:4e:aa:75:7c:f2:85:
27:b7:be:a9:ee:25:54:c7:a4:94:c9:5a:7f:99:88:2f:d4:5f:
55:b3:7a:3f:71:54:e8:d2:27:41:0f:ca:8e:68:26:68:89:b4:
78:60:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:09:51 2025 by rpki-client