Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier: sM2rt3pH9OLExzRYJ9A58ZaPAzLYKTR3QQ9wWk+wkt0=
Subject key identifier: 9F:C5:B4:16:B7:21:12:C6:C6:C7:9E:AF:FB:54:68:22:89:DF:F3:9D
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer: /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial: 019922FACC0152D45BE9DFF9B7307D55A526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number: 15F2
Signing time: Sun 07 Sep 2025 07:01:25 +0000
Manifest this update: Sun 07 Sep 2025 07:01:25 +0000
Manifest next update: Mon 08 Sep 2025 07:01:25 +0000
Files and hashes: 1: F8n_Svao3XVMTZ9Sm-3QBaNvm1s.roa (hash: jXQFrBti/A7a3NKEgrbBnXx/tbixG/ctP16QJsp1XeE=)
2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: ORiG6kkA5+weD0sQZN5nUZCczxOvF52mFSLN/STahiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:cc:01:52:d4:5b:e9:df:f9:b7:30:7d:55:a5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Validity
Not Before: Sep 7 07:01:25 2025 GMT
Not After : Sep 8 07:01:25 2025 GMT
Subject: CN=9fc5b416b72112c6c6c79eaffb54682289dff39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:63:9e:57:e3:76:ae:e2:30:c6:f6:29:a5:
c6:b2:2a:bb:d3:52:ed:d5:4d:de:e9:c3:11:af:dd:
80:53:35:4b:7f:03:d0:48:ea:93:a9:7d:49:f4:94:
91:7a:4e:51:61:af:89:16:bd:db:f7:aa:1b:19:a2:
6b:a2:5f:3b:9c:3c:e7:d7:a7:ea:a7:b1:59:0f:19:
89:1c:a0:35:96:5c:66:19:fc:af:ec:09:77:8e:a4:
0b:bd:ba:3b:a3:d7:2f:01:47:7b:66:41:16:fb:fe:
a9:1a:6b:63:7d:cf:d7:3e:8c:55:34:7b:a0:bc:85:
8f:22:aa:fc:83:58:8f:cb:d5:ff:a4:9f:70:0c:86:
33:28:9f:c4:71:00:ea:e4:91:08:dd:c3:7a:6f:51:
0c:44:90:f4:b9:2a:10:4e:da:8b:85:cc:ff:3d:c1:
2e:16:f5:ca:eb:a1:75:54:f5:66:fb:da:29:6e:5d:
2e:78:cf:6d:fa:70:6c:1f:95:0f:c5:7f:f0:65:7c:
f0:ea:7e:c3:77:2d:bb:ff:1a:0c:c5:3b:94:9a:56:
79:66:45:ab:ce:42:fa:9d:5a:75:ec:51:b6:66:a4:
e6:d5:0c:97:7d:9a:ca:ac:6e:57:d2:7a:1a:a2:26:
43:ab:6c:dc:a7:3d:bf:32:61:cc:b8:dc:96:a6:3b:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C5:B4:16:B7:21:12:C6:C6:C7:9E:AF:FB:54:68:22:89:DF:F3:9D
X509v3 Authority Key Identifier:
keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:45:b6:91:78:2e:d0:21:74:7a:1e:e1:06:e0:14:72:9f:9d:
13:a6:c1:14:17:ca:2c:1e:4f:97:13:17:33:ca:bf:db:1d:1a:
83:2d:6a:b8:ab:d8:04:cf:f2:7f:af:92:69:32:1f:95:4d:4c:
b6:a2:5f:45:d1:de:a7:ec:67:68:95:52:7c:ae:c7:db:03:67:
22:ec:b6:0d:9f:f9:92:9d:17:18:66:c5:0f:33:59:e0:59:d0:
a9:a4:9e:61:74:cb:d3:92:31:70:92:f3:34:93:6a:f3:a5:ea:
39:7a:eb:eb:6f:45:7f:50:92:de:c9:34:a3:17:de:69:ed:c8:
15:01:d9:16:40:47:3d:43:29:da:3b:8e:c2:d6:b6:df:2f:88:
0d:64:a8:c6:61:cc:64:ad:02:27:26:e8:b3:66:34:05:bc:81:
97:00:3c:0f:29:a4:89:a4:de:57:b1:0f:a4:c7:22:5f:aa:f9:
d1:a3:fd:fe:7b:97:99:36:a8:10:60:18:32:8e:bb:2a:41:94:
0a:bc:73:cd:46:65:3c:69:e1:86:0b:0f:ed:36:10:ff:88:7c:
f9:33:8c:e5:e8:0a:ca:19:fc:25:4e:99:96:d0:49:b9:f6:98:
b6:ee:51:95:27:1b:fa:ef:d9:fa:28:26:31:0b:6b:be:3b:3c:
56:42:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:19 2025 by rpki-client