Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json)
Hash identifier: mOOMupcP+8NzeQR78WZ2WLYfWtqhYJAE3pwD1CNoi/g=
Subject key identifier: 9D:FE:44:CB:00:DD:33:21:5D:DE:43:90:6B:1D:54:D0:DA:E9:28:8A
Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Certificate serial: 01984A40F5B759AD14E507565D9DAD51B635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
Manifest number: 1480
Signing time: Sun 27 Jul 2025 05:00:27 +0000
Manifest this update: Sun 27 Jul 2025 05:00:27 +0000
Manifest next update: Mon 28 Jul 2025 05:00:27 +0000
Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: SEL6z15x0UDGUgQlCvtn9L1+I0a89feq1nE82EWOGBs=)
2: nP21AC5prEFloL4b-rvpds4zVIk.roa (hash: uwmza4+iHSYo9L5fLNkaMpr9S0IJA2DNF48xVtFHmFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f5:b7:59:ad:14:e5:07:56:5d:9d:ad:51:b6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Validity
Not Before: Jul 27 05:00:27 2025 GMT
Not After : Jul 28 05:00:27 2025 GMT
Subject: CN=9dfe44cb00dd33215dde43906b1d54d0dae9288a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:c1:c2:6d:73:76:93:88:1f:1e:b8:55:01:
ff:6f:2c:58:69:db:9d:97:64:d4:f8:73:3d:cf:2f:
19:3d:b2:f9:55:3d:cd:f1:e5:ea:fb:9f:52:7e:0e:
8e:4d:1c:f5:b8:59:66:c1:0d:c0:69:16:6c:cb:2b:
11:4f:b7:a4:d0:0d:05:7b:87:ae:df:4c:ee:be:bc:
cb:1a:8b:1b:6c:c0:63:55:cb:70:d7:07:65:c9:da:
a5:dc:c3:11:71:c6:b2:3a:1a:7c:c3:8b:90:6a:69:
e1:61:a5:90:a0:38:26:a3:2a:f6:9b:37:53:e6:63:
69:10:1e:82:4e:5f:b8:98:77:12:45:c0:f2:0a:fa:
70:4f:df:80:a9:05:d6:25:09:04:88:3d:d0:2b:f9:
29:e8:3c:cd:53:40:05:19:a0:23:c5:c6:ac:3d:fd:
d2:ad:b5:c8:77:dc:df:82:c2:7f:1f:f1:3c:e1:e5:
89:df:55:b4:23:d5:7f:7a:30:0d:47:30:d8:89:bf:
a7:41:36:38:80:dd:3c:7f:37:28:d6:30:e4:60:b9:
76:e3:9a:73:53:d2:7a:6d:22:29:e5:c8:f7:4b:92:
2e:83:c7:e4:c5:92:c3:fe:d9:a0:d4:1a:49:45:7f:
86:ec:91:de:02:b7:81:25:5b:b9:7a:3c:b4:f8:ed:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:44:CB:00:DD:33:21:5D:DE:43:90:6B:1D:54:D0:DA:E9:28:8A
X509v3 Authority Key Identifier:
keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8d:78:2c:9b:97:93:b9:fa:9d:ad:32:3f:a9:d1:1b:d8:71:
af:0b:86:7f:22:78:ce:c9:19:79:35:68:d6:5a:a3:20:df:20:
34:46:bd:62:f6:c6:28:48:8a:f9:f6:63:04:29:85:de:8f:92:
83:38:82:67:84:28:60:43:d1:8e:4d:92:8c:f3:18:8b:a6:d7:
2d:da:02:52:8c:dc:a7:7d:33:ab:62:9c:80:87:12:f0:50:31:
2a:eb:63:b8:38:50:ac:45:7c:63:31:9e:f0:40:46:00:27:a6:
aa:35:82:14:9f:ec:24:0d:2f:10:40:e7:8d:82:6b:7d:af:66:
6f:6d:f0:d2:1e:ff:b1:cb:f3:9c:22:b8:73:a7:44:fd:f9:31:
c1:e4:32:eb:18:59:03:37:55:10:16:ad:9a:61:16:05:fd:35:
bc:56:29:ac:6c:8f:c2:7a:be:42:a5:45:ea:80:6e:c4:7b:16:
30:47:f4:44:99:dd:24:0a:e8:2a:95:81:5f:69:a8:c6:e9:84:
b1:28:c3:7e:02:60:f7:eb:96:af:08:a8:ca:90:8c:18:ad:d1:
2f:b5:85:65:83:be:b6:9c:d4:ba:1e:d8:77:a6:04:97:de:a0:
fd:c9:c0:7d:41:d3:17:f2:c8:5a:4a:0a:19:62:67:5f:45:1d:
13:63:47:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQPW3Wa0U5QdWXZ2tUbY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZThkMDg5MDlkMTg1YWY0MWQwYTBjM2JlNWVhMjhjMzUy
ZjAyMjYwHhcNMjUwNzI3MDUwMDI3WhcNMjUwNzI4MDUwMDI3WjAzMTEwLwYDVQQD
Eyg5ZGZlNDRjYjAwZGQzMzIxNWRkZTQzOTA2YjFkNTRkMGRhZTkyODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3rBwm1zdpOIHx64VQH/byxYadud
l2TU+HM9zy8ZPbL5VT3N8eXq+59Sfg6OTRz1uFlmwQ3AaRZsyysRT7ek0A0Fe4eu
30zuvrzLGosbbMBjVctw1wdlydql3MMRccayOhp8w4uQamnhYaWQoDgmoyr2mzdT
5mNpEB6CTl+4mHcSRcDyCvpwT9+AqQXWJQkEiD3QK/kp6DzNU0AFGaAjxcasPf3S
rbXId9zfgsJ/H/E84eWJ31W0I9V/ejANRzDYib+nQTY4gN08fzco1jDkYLl245pz
U9J6bSIp5cj3S5Iug8fkxZLD/tmg1BpJRX+G7JHeAreBJVu5ejy0+O1s5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3+RMsA3TMhXd5DkGsdVNDa6SiKMB8GA1UdIwQY
MBaAFEro0IkJ0YWvQdCgw75eoow1LwImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUt
OTQyNTg1NmVjNTQyLzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUtOTQyNTg1NmVjNTQy
LzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY14LJuX
k7n6na0yP6nRG9hxrwuGfyJ4zskZeTVo1lqjIN8gNEa9YvbGKEiK+fZjBCmF3o+S
gziCZ4QoYEPRjk2SjPMYi6bXLdoCUozcp30zq2KcgIcS8FAxKutjuDhQrEV8YzGe
8EBGACemqjWCFJ/sJA0vEEDnjYJrfa9mb23w0h7/scvznCK4c6dE/fkxweQy6xhZ
AzdVEBatmmEWBf01vFYprGyPwnq+QqVF6oBuxHsWMEf0RJndJAroKpWBX2moxumE
sSjDfgJg9+uWrwioypCMGK3RL7WFZYO+tpzUuh7Yd6YEl96g/cnAfUHTF/LIWkoK
GWJnX0UdE2NHrg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:39:29 2025 by rpki-client