Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: +VX/UdRLgw647wE4Kqie6zQUqQBDqhGSskTTAOHMKOA=
Subject key identifier: 62:17:26:87:74:83:17:9C:71:07:0A:C1:E8:30:14:8F:CB:35:96:F9
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 019A71B94977490B7ABB8E13EA010ACB830C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 113A
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: cvFGyGJRsZnEcRCD9JCy58T9gVo.roa (hash: Yp1oBHirBIDihtEHMnqKxr3/5zdpx0QZszheovk5A64=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: jsNKyFzKtM7AEPbH8ssjtm/1mAHbR4q10WKeAfGlm2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:49:77:49:0b:7a:bb:8e:13:ea:01:0a:cb:83:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=621726877483179c71070ac1e830148fcb3596f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:2f:b4:b5:66:84:91:4f:cb:c7:0b:ba:1f:
9d:8a:1b:e4:88:c2:73:6d:45:9b:81:6f:6b:78:ca:
4d:f6:47:b4:11:15:01:fd:4d:da:93:2b:d1:1f:ff:
24:73:7d:34:fd:16:f6:0f:7d:26:79:fe:ca:b5:40:
98:47:bc:8e:0c:ca:8a:1f:d4:a2:ba:ce:58:0e:d5:
da:39:04:0f:69:0b:84:a7:a1:dd:47:d7:47:b7:97:
cf:7e:34:e6:06:82:4c:b3:5f:b0:96:99:e3:da:a2:
b3:43:ac:89:c6:3a:4b:c0:3b:81:d0:21:94:ed:5d:
e1:fc:ac:cb:ba:d6:08:04:74:c0:87:09:8b:3b:7b:
2d:a0:43:8e:4c:a3:26:4e:48:07:71:11:d1:7b:2c:
a6:97:f1:31:2b:b5:83:3c:a6:7a:d7:42:a0:d1:69:
dd:37:9c:79:7d:6f:a7:5e:13:04:09:8d:1a:45:bf:
0d:f5:36:35:bd:49:82:a9:6d:f1:5d:69:a9:74:de:
08:b4:83:2b:39:d4:eb:08:76:ab:f2:5b:d3:90:7a:
b3:67:d1:18:2e:89:13:5d:28:7b:78:cd:8f:ff:41:
60:94:8d:2f:2e:fd:73:6f:c9:2d:c1:5c:cf:8a:93:
40:2a:76:46:88:37:1d:ea:b2:a5:80:f2:15:75:ce:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:26:87:74:83:17:9C:71:07:0A:C1:E8:30:14:8F:CB:35:96:F9
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3f:e3:3e:c7:f4:ba:71:fc:1c:c6:58:20:e7:97:df:38:d4:
c2:66:d4:5c:39:d2:97:2d:e1:7c:9a:52:c9:2d:98:a6:ba:83:
34:9d:9e:d2:9c:63:7c:02:d6:ff:8c:e5:3d:c8:3c:eb:a9:08:
4f:cc:fe:1f:f8:5c:b3:a8:9a:8a:c2:75:17:ba:93:3e:af:9b:
95:db:47:15:cc:aa:90:d2:25:61:4e:82:6e:42:dc:a1:be:29:
b7:2e:65:05:3c:d5:90:7c:7a:38:98:b4:8d:07:23:d9:7b:60:
03:0f:0c:26:54:ae:40:10:c7:c7:87:d4:d7:08:07:ab:fa:52:
a8:b2:3e:ae:25:64:71:9d:0b:7f:99:fe:77:c7:62:c1:f0:f0:
04:15:b8:29:10:f9:22:18:76:b1:b2:32:9b:e4:60:62:f7:da:
72:c3:3b:7e:2f:47:e7:21:55:93:c4:1c:8f:42:0d:ac:28:7f:
60:e2:56:ac:44:c3:f0:07:fa:50:df:f8:8c:b1:a8:b9:07:a2:
31:7a:6c:57:38:ca:0f:bb:9b:14:b8:df:2a:c9:3b:c1:72:a9:
4c:e6:4c:ef:41:0d:c2:bd:94:a3:a0:d6:db:60:68:2e:ab:cf:
83:d9:34:b8:8d:2f:74:f2:d2:1b:0a:77:04:de:72:16:d4:ac:
9b:69:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:57 2025 by rpki-client