Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: ywUh1UASIgsAIaPGFoZ+6d0wcmro0Rh+rqv8vQZn+zY=
Subject key identifier: CC:D7:84:2B:70:91:5D:33:35:67:49:72:41:9C:DF:6A:1D:E7:C8:DC
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01984C2F9F7DE9E0801A0B3B334931A3878E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 160B
Signing time: Sun 27 Jul 2025 14:00:46 +0000
Manifest this update: Sun 27 Jul 2025 14:00:46 +0000
Manifest next update: Mon 28 Jul 2025 14:00:46 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: W9PzhZrkbKsFDEA0Fj4xobFkLq7CHdwJ+TjAF1SX/8M=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:9f:7d:e9:e0:80:1a:0b:3b:33:49:31:a3:87:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jul 27 14:00:46 2025 GMT
Not After : Jul 28 14:00:46 2025 GMT
Subject: CN=ccd7842b70915d3335674972419cdf6a1de7c8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4f:74:66:9a:fa:da:90:64:b7:9d:2f:b4:6e:
20:83:dc:ca:88:c5:2a:04:3c:f4:23:d7:3c:0b:39:
e7:53:2f:9e:0b:8c:c1:62:fa:36:5e:2e:2e:24:ac:
69:5e:d5:ab:8f:e9:cd:38:f5:f8:34:67:c6:28:83:
8f:7e:ce:9c:b9:02:24:fb:6c:f5:fc:10:ef:0b:28:
fa:0a:e4:a4:3d:58:66:ca:74:bf:1a:6d:1c:dc:fd:
89:18:03:ba:43:50:4b:f8:79:cb:3f:36:f2:2a:f5:
ad:07:aa:98:b0:10:82:f0:3c:c2:fe:23:34:b9:42:
f4:41:dc:a5:09:ea:5e:43:8a:43:1f:71:de:50:32:
d6:65:47:8d:37:df:16:3b:a7:5a:17:8d:34:e6:f7:
82:67:64:90:4d:44:21:c7:8e:41:2a:29:49:07:11:
c4:fe:bf:80:29:7b:a4:bf:c5:70:97:fb:c4:e0:a6:
35:37:c3:bb:6e:c3:67:ab:1a:db:e7:e2:46:e8:41:
7a:20:5e:8d:57:a0:30:eb:f7:e1:80:f6:cc:db:f3:
07:be:69:dd:f7:60:ae:e0:63:a9:7a:64:2b:e0:8c:
44:13:5d:9d:90:15:28:81:92:ed:aa:d6:15:30:0a:
27:23:cd:de:3f:41:d7:ca:d0:0c:14:28:fd:c8:3f:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:84:2B:70:91:5D:33:35:67:49:72:41:9C:DF:6A:1D:E7:C8:DC
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b4:43:03:90:a5:2e:9c:37:72:65:a9:dc:aa:3d:42:f4:6e:
4e:a8:0d:64:a5:bb:9f:17:ca:f6:6f:19:e2:1b:bb:b5:43:aa:
3f:bc:ed:b4:bc:58:96:89:96:d6:e0:7d:85:45:8c:d5:18:5f:
00:90:56:94:5e:d7:a8:ce:01:25:48:cd:da:26:55:25:e2:74:
95:27:50:25:7f:5a:3d:89:e3:73:5b:7f:06:bb:04:92:4c:8b:
fb:00:19:53:43:ca:c3:ce:d2:e8:68:f6:54:2c:dc:4a:fe:54:
e4:20:c7:bb:9b:82:0c:92:eb:f4:bb:54:ec:a8:57:73:d3:2e:
d0:37:f2:b2:91:7d:19:ec:2c:4f:d9:2f:b8:99:0e:a2:9f:76:
ff:cc:db:07:b0:86:ca:fd:db:1f:36:bb:f3:ef:c2:af:3c:a0:
00:0f:a9:01:f9:fd:44:7d:2f:5b:d8:03:a8:54:f1:e0:83:07:
47:f2:8a:16:33:02:1f:e4:45:86:79:40:74:b9:d2:e5:4b:b5:
15:c2:61:3d:2c:73:c9:a8:22:24:b0:ba:35:8e:2b:03:c2:b0:
06:65:23:54:72:e4:f8:da:1c:05:60:7f:89:ac:90:35:c6:b1:
a2:bb:d2:55:cf:ca:fd:32:f1:41:5d:10:23:eb:13:e0:c1:60:
b3:f0:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:47:38 2025 by rpki-client