Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: 97qhDqX4Kwo9HzITo8AAYcf2arVmr2v5me0cPrPWQMs=
Subject key identifier: 1C:21:E4:77:48:ED:E4:5F:57:19:DB:98:51:BD:45:5B:D5:C1:71:17
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 019A71EEECC69452B842EFE16A33F1C6B47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: EOh/kG2+EDO4JsKMoL/Cz3Ykzplpesy6PtciT53O6JE=)
2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ec:c6:94:52:b8:42:ef:e1:6a:33:f1:c6:b4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=1c21e47748ede45f5719db9851bd455bd5c17117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:0c:d2:3e:d4:59:e7:d1:eb:34:cd:e8:4a:
2c:16:72:71:1b:a0:2b:82:ff:91:7a:12:c9:51:e3:
67:fd:1c:a3:28:12:19:16:51:a2:23:90:89:f4:b3:
8d:36:00:33:2d:cc:92:88:62:38:8d:5e:1b:6f:96:
9f:80:24:ab:8d:c3:df:28:54:cf:c6:67:c7:10:24:
8a:c2:c1:a7:f9:25:2b:03:1c:ae:e2:ad:7a:eb:ba:
66:84:88:1a:a0:44:0b:15:0c:ce:d1:ba:0e:f6:c5:
2c:ec:3a:68:95:ad:e1:cf:4e:a4:a6:73:64:84:2c:
cb:fa:9f:a6:b0:00:0d:cb:22:56:12:24:b0:4b:dc:
59:96:24:01:25:5e:48:6c:20:6f:ee:d8:f6:50:e6:
78:86:9f:1a:c2:fc:cb:95:e1:e6:bf:63:7d:6e:15:
2b:1d:e6:24:4d:11:ea:50:05:7c:f6:98:2e:87:99:
cb:8b:09:ed:f8:d0:5c:6b:48:c9:9b:93:25:a4:33:
d9:19:f7:52:a5:78:c3:d0:3f:bd:95:f2:fa:c3:e3:
19:5d:80:85:98:fb:9d:b2:4e:3b:48:b4:71:4a:78:
a1:b0:58:66:77:d4:a0:6f:f0:33:a9:07:7c:66:46:
58:bf:55:e3:61:e5:66:f9:18:7b:3f:d4:fe:e3:dc:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:E4:77:48:ED:E4:5F:57:19:DB:98:51:BD:45:5B:D5:C1:71:17
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:89:b9:03:34:f6:cd:32:93:56:de:34:87:a4:39:27:a2:3a:
80:2f:c8:da:53:15:cc:0e:e9:99:7a:d3:7f:b7:3a:3f:70:5f:
0c:f6:e1:8a:d1:f9:24:66:e5:3e:7d:5e:ff:8b:00:da:59:d7:
4c:69:c4:fb:e0:32:44:8c:ae:dc:48:79:bf:85:9a:0b:a0:7b:
e8:2d:c8:a2:37:3d:c0:83:c1:01:78:97:57:cb:1f:69:32:af:
16:bf:00:e8:7e:fe:db:af:74:f9:1d:b3:95:ec:48:ce:ea:f1:
0f:a4:37:ac:31:1e:66:64:99:d3:2b:80:eb:9b:a4:5d:60:d3:
85:85:ba:63:03:0b:78:0e:4f:33:2b:ff:f3:21:92:f3:09:cd:
0c:8f:9f:1a:c8:dd:5f:bb:5d:aa:39:96:97:a2:cf:af:de:2d:
28:12:f7:e0:96:0f:ad:7b:30:ca:b2:61:30:99:d6:f9:4a:f7:
aa:70:61:41:40:5c:1a:0b:53:90:4b:ee:a6:0d:29:99:92:b0:
43:55:02:85:2b:ae:b2:8e:a8:00:4a:f0:e5:2a:7e:33:32:02:
9d:d1:ce:5c:45:cf:15:7b:54:4b:51:e4:c7:d2:d0:fe:db:ad:
59:c2:b9:cc:32:43:3e:19:ff:c5:88:59:36:62:de:22:9a:bb:
ee:31:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:38 2025 by rpki-client