Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier: 9t2p6dJJ1FGFk4nM+ynqHpXWa8stAqm+2/arZ5Mzh/s=
Subject key identifier: 69:4D:DF:F3:18:4A:70:7B:B9:09:CD:85:C6:9F:AD:5F:EE:D7:73:69
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer: /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial: 019A7112A0FB24C23CD99A1C46E616322027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number: 169F
Signing time: Tue 11 Nov 2025 04:00:37 +0000
Manifest this update: Tue 11 Nov 2025 04:00:37 +0000
Manifest next update: Wed 12 Nov 2025 04:00:37 +0000
Files and hashes: 1: F8n_Svao3XVMTZ9Sm-3QBaNvm1s.roa (hash: jXQFrBti/A7a3NKEgrbBnXx/tbixG/ctP16QJsp1XeE=)
2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: 6FzchEMUNJ0D6RejKT+MoIZFPp8Y0PtiHTU/fp6m+j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a0:fb:24:c2:3c:d9:9a:1c:46:e6:16:32:20:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Validity
Not Before: Nov 11 04:00:37 2025 GMT
Not After : Nov 12 04:00:37 2025 GMT
Subject: CN=694ddff3184a707bb909cd85c69fad5feed77369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:db:8c:23:ae:6b:c2:a3:69:d7:9a:17:bf:
18:00:df:77:c7:ef:e2:31:ec:c3:5d:20:fa:ef:08:
7d:eb:41:1d:d0:fc:1b:58:e0:24:80:84:ac:4e:91:
2d:53:01:ea:b6:02:be:1e:e2:f0:5e:bd:88:00:17:
a5:7f:aa:bd:6f:c9:a8:75:41:1b:99:8e:b9:86:ae:
da:98:ad:08:84:bc:e9:11:18:40:a4:47:03:7a:65:
21:75:ab:5b:c7:a2:cd:37:66:49:6d:fc:fb:47:19:
01:d5:51:23:c6:22:bc:44:9f:83:62:c6:e3:29:99:
83:78:86:45:80:16:4d:b0:cd:51:3f:c8:74:ba:2b:
dc:e4:65:2b:c6:1e:c8:ce:b6:60:54:2a:22:8c:29:
d3:5b:54:ab:3f:12:ff:de:a5:34:a4:14:92:1b:e0:
57:17:4c:13:c3:c4:ef:f0:37:be:5e:8e:96:e2:21:
0c:b7:fa:72:f5:5b:d5:fa:21:37:12:fd:9f:1e:67:
27:a2:d0:a8:5a:d7:e3:03:5a:cf:37:7a:c5:7c:b0:
b5:57:b1:94:54:15:0f:fd:4c:c3:db:0a:ab:af:0b:
16:91:cc:b3:dc:44:fe:12:b9:8b:6c:11:cf:6a:a8:
85:69:90:ae:ac:6e:2b:c4:bb:76:c3:ca:4d:1c:b6:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4D:DF:F3:18:4A:70:7B:B9:09:CD:85:C6:9F:AD:5F:EE:D7:73:69
X509v3 Authority Key Identifier:
keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:6e:48:6d:c2:da:1e:58:01:85:65:2e:40:3a:85:9b:38:
4a:39:62:77:91:bb:4d:c9:da:0f:6b:4e:f6:0a:84:e9:d2:b2:
a6:35:0f:83:85:33:ba:de:f5:ee:ce:16:d8:35:71:81:08:9c:
90:f7:e0:f7:31:f2:db:0d:15:61:fb:a6:68:72:12:09:1e:a3:
24:ce:92:b5:b7:07:c9:b3:05:49:14:25:87:bc:12:b1:35:59:
6f:15:86:c3:44:27:c6:77:f3:d3:0a:36:c0:2c:d8:fe:e2:3f:
ba:1c:c8:ee:d2:e1:fc:5b:7c:d8:c3:2b:39:e8:5b:99:6c:2e:
10:e2:d5:f2:96:88:9c:76:5e:01:06:40:6c:30:58:9e:1b:d1:
6c:ee:65:40:80:f2:ef:3c:a8:0f:0a:4b:bc:cb:34:a6:c1:aa:
a3:70:9f:8f:43:c5:c0:51:c5:a5:2f:0c:ef:ba:20:e2:9b:9d:
ce:8b:67:1d:a4:8e:53:1f:03:b3:f0:a6:da:7c:6d:8f:98:4c:
04:22:56:e1:9f:3a:98:05:a2:9a:6e:84:93:8d:5f:55:c4:89:
04:88:d1:57:22:cb:01:20:57:ce:ec:9c:4a:85:bf:73:0e:bb:
52:e8:70:6d:67:e9:9d:00:04:9f:d7:8c:e2:b9:8c:1f:53:39:
04:8c:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:04 2025 by rpki-client