Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: TkN/dxe/Nc3aTqBYZWmJ5dqsJBgeK7CtnbJ8xlr9Oi4=
Subject key identifier: A2:F0:B2:2E:EC:CA:EA:9E:0A:5B:5A:1B:BE:78:17:F9:D9:6C:24:76
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 0199221E89545338578E57CF421D616ABABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 1604
Signing time: Sun 07 Sep 2025 03:00:50 +0000
Manifest this update: Sun 07 Sep 2025 03:00:50 +0000
Manifest next update: Mon 08 Sep 2025 03:00:50 +0000
Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: 6kHx0XhnHyUfqS+cLbOSMqXULnNquIwhTiv3TBt6/2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:89:54:53:38:57:8e:57:cf:42:1d:61:6a:ba:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Sep 7 03:00:50 2025 GMT
Not After : Sep 8 03:00:50 2025 GMT
Subject: CN=a2f0b22eeccaea9e0a5b5a1bbe7817f9d96c2476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:fc:cd:80:d0:ad:78:79:74:47:44:7c:bd:
ff:bf:4a:8a:22:54:68:d5:0c:3e:19:6b:34:49:ab:
3e:38:89:ad:c7:ef:28:58:e5:03:38:94:47:2c:88:
2c:a1:b2:a1:a7:8b:6d:88:41:b2:30:6e:79:c2:a6:
04:b4:50:ec:72:82:e0:68:24:70:36:79:d3:fa:51:
23:df:c2:1e:4b:cb:be:93:30:70:8d:cb:31:94:fb:
aa:57:d0:94:56:51:79:ca:d3:25:90:a0:1c:56:1e:
8a:1a:b3:a1:d3:15:4e:b8:b3:41:ca:11:d9:c7:f9:
9c:76:ab:9d:26:7d:fa:e6:e2:a9:ea:81:c2:71:cd:
44:47:d5:a1:9c:81:b5:2a:8e:52:52:6f:70:22:3c:
46:5c:18:e3:3a:f6:bd:a5:f4:9a:d2:ea:9e:cc:c0:
cb:7d:7b:31:0a:7f:87:49:a3:b1:b0:e4:a8:25:6c:
5b:1e:3d:fe:9b:81:ce:65:89:4b:4d:94:de:ca:b5:
ca:79:4e:55:33:99:16:b4:67:74:b1:ef:21:ed:5c:
8c:3c:4c:fe:4f:3d:d3:04:e6:eb:bf:26:32:79:b2:
78:97:d1:ae:8e:46:af:a0:a1:fe:de:70:14:32:88:
e8:9d:40:c3:08:61:9c:48:a2:92:33:9a:53:2d:71:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F0:B2:2E:EC:CA:EA:9E:0A:5B:5A:1B:BE:78:17:F9:D9:6C:24:76
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:43:67:10:3e:57:54:66:16:d6:0d:62:ea:9b:7e:38:c1:9f:
3b:2e:56:c8:4d:04:4e:b3:85:e5:ac:87:a2:47:5b:79:d4:22:
69:c1:6f:53:02:2e:6b:85:d6:29:3f:8d:7e:e8:d8:49:fd:19:
b8:ba:23:85:d4:87:d5:ae:14:f3:32:b2:6e:67:70:1a:4f:eb:
00:f9:94:c6:de:7d:09:f1:3c:b2:55:c9:f7:5b:a1:9e:43:bb:
f5:6d:7c:4b:2f:46:9c:03:6f:d9:ff:9b:f5:e4:80:41:e2:24:
2c:8b:9f:c0:80:9f:04:db:64:46:49:4e:2d:4d:77:05:7b:d5:
07:dd:3f:7d:ee:02:e9:ec:02:80:63:ef:08:df:58:a7:1c:7b:
a8:96:40:b4:d1:f8:ed:2a:2c:fa:5e:cc:a5:1d:75:21:29:6f:
d5:e3:99:58:74:2d:96:c5:36:6f:1d:ca:f3:04:76:b9:76:bf:
27:a6:5d:60:62:9d:91:38:9d:7a:54:f1:8b:ae:58:9f:b9:a5:
2c:d8:c0:92:95:65:e8:a0:ad:0e:9c:78:9d:49:fa:de:45:86:
c6:7d:38:36:2f:72:2a:f6:a9:8e:07:cb:a3:03:71:b4:4f:c6:
f7:77:ad:62:54:63:80:f0:ee:b7:8d:9d:e7:44:b7:28:98:09:
13:9f:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:16 2025 by rpki-client