Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: b5n8FN8fAgG/JcqoTlajgD20MrLMLxcMk43mWxlwDL0=
Subject key identifier: E6:1B:80:8A:15:DD:06:1D:1C:91:7E:5F:F9:16:33:90:63:22:D7:AA
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 019A24E5ACEC0F8E3017B7866A212A7B9291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0AFB
Signing time: Mon 27 Oct 2025 09:00:22 +0000
Manifest this update: Mon 27 Oct 2025 09:00:22 +0000
Manifest next update: Tue 28 Oct 2025 09:00:22 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: KKFC7ws/lT8S9fx/rgsiWMFXaSAc4HOiy6QnmBPWRKM=)
2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:ac:ec:0f:8e:30:17:b7:86:6a:21:2a:7b:92:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Oct 27 09:00:22 2025 GMT
Not After : Oct 28 09:00:22 2025 GMT
Subject: CN=e61b808a15dd061d1c917e5ff91633906322d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:eb:6a:5e:ef:95:6a:0d:63:bc:5e:8d:30:
10:8a:f5:25:f0:5d:68:a3:b0:bd:f1:4c:c5:8d:7e:
32:ad:2d:c1:16:8c:5b:ad:da:b6:b2:c9:96:07:7c:
84:a0:b8:cf:a1:49:ab:77:0d:62:79:89:52:5a:68:
a5:66:24:e1:85:0d:e6:49:82:39:d6:62:ee:a8:a9:
4c:50:2a:d1:09:90:8e:7f:0c:39:32:f6:06:be:f9:
5b:60:8c:28:1a:bb:49:a4:61:a0:c7:4e:45:c5:e3:
36:a7:99:b5:a8:a8:48:ee:d1:43:ef:3d:ba:87:0d:
ca:19:7a:84:a6:ad:42:eb:27:49:1d:d4:09:fe:5b:
1e:b1:6e:dd:7f:c0:fa:ed:e7:1f:74:e7:c4:e1:3c:
e6:bb:fa:a3:98:77:40:65:5d:e3:2e:2c:c1:ab:de:
1a:ac:6b:01:86:26:b3:04:25:fb:3e:a3:c6:a8:da:
7c:08:60:33:75:e1:da:4e:3b:86:2d:f8:41:65:42:
1d:31:f6:08:28:cd:ef:5d:a7:3a:79:cb:a6:bc:73:
cd:b0:df:9d:5b:48:81:78:51:03:cf:df:77:3d:f5:
ab:79:88:b8:0a:ac:dd:50:f0:76:60:d5:45:67:15:
41:61:71:c3:80:48:dd:aa:6a:84:52:24:a6:a3:dd:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:80:8A:15:DD:06:1D:1C:91:7E:5F:F9:16:33:90:63:22:D7:AA
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3a:5a:4b:41:39:af:61:2c:ac:80:53:45:fd:2d:1f:ec:ba:
f4:3a:f2:aa:1a:8e:4e:1d:5e:1a:cb:30:fa:a9:01:e8:53:29:
a1:b8:f1:ae:71:2e:a6:a8:7d:bd:09:30:db:d5:89:93:1b:d1:
7e:04:1e:a5:a6:04:70:b0:f6:40:1f:b7:92:1b:1e:cf:96:26:
99:75:82:6e:c9:05:12:41:68:f3:98:3d:d8:bd:f7:4c:4e:45:
48:2d:8f:cf:2d:a1:82:d0:7e:1c:66:e5:45:a8:25:08:b8:66:
a4:7f:c7:38:c3:89:90:2b:4e:77:9f:52:6b:58:2f:2a:44:59:
a0:ac:e2:a1:60:65:62:e2:50:58:6b:68:cc:4f:57:bf:96:f4:
3e:28:b2:18:14:14:6f:cd:0a:07:0a:10:04:36:af:16:13:40:
d4:27:5f:92:ca:77:90:91:fa:a1:64:ec:25:65:db:28:5a:bc:
e5:43:cc:34:f3:73:d4:d4:ea:52:26:5d:5f:79:df:16:79:04:
ac:d9:3b:2d:60:61:95:d0:a8:a2:6b:da:8f:10:f8:e2:8e:8e:
fe:71:10:1a:88:a6:26:a5:0c:16:89:da:de:a3:fb:d2:4b:71:
38:5f:64:70:47:07:1d:b2:1a:21:f4:4d:df:1e:bd:9d:56:a1:
5f:49:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:08:35 2025 by rpki-client