Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier: pUvLgo4VnIRu8cT9x2PVzKFHx8s3eMs1OczOSs8ZZrY=
Subject key identifier: A7:35:C0:B2:4A:3E:CA:95:30:74:46:E9:8A:60:26:32:9B:F0:6B:AF
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 0199228CA7604D6A0647766A7AA9D2E3F5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number: 11EE
Signing time: Sun 07 Sep 2025 05:01:07 +0000
Manifest this update: Sun 07 Sep 2025 05:01:07 +0000
Manifest next update: Mon 08 Sep 2025 05:01:07 +0000
Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: G11/qFL52S1RfEpE00AiouvVlRLWkdRigTSibtZgMHk=)
2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a7:60:4d:6a:06:47:76:6a:7a:a9:d2:e3:f5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Sep 7 05:01:07 2025 GMT
Not After : Sep 8 05:01:07 2025 GMT
Subject: CN=a735c0b24a3eca95307446e98a6026329bf06baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:a8:f6:a8:f2:f4:7c:a1:f3:03:bf:1f:3b:
b9:79:da:ce:24:f7:d1:db:2b:09:97:f4:db:d8:45:
3c:0b:aa:75:1c:0d:51:4e:72:ce:d8:db:7e:32:22:
b9:c1:33:d1:21:e7:dc:0e:ff:84:d7:fd:f7:a6:79:
59:d0:86:03:e1:c6:7b:86:ff:c3:57:60:d4:48:d2:
75:8f:fa:23:01:e7:cd:4e:67:db:d9:c1:5d:48:84:
5e:7c:02:d1:0c:6a:ed:d4:ec:96:fc:dc:e3:28:29:
90:ad:35:93:f4:83:02:a0:c2:42:f7:6c:84:cb:da:
e6:5a:02:2a:57:d2:f2:5c:54:92:29:01:64:72:eb:
f2:90:20:fc:09:76:70:61:6f:cd:70:7a:3a:f6:4b:
c3:26:27:5b:a8:14:18:6a:ac:c4:0b:81:f2:7c:a5:
06:ca:37:ca:45:1e:6e:5c:a2:30:fa:a8:86:33:c2:
c3:8b:ca:c6:72:05:32:ff:31:93:be:bb:80:9c:7e:
7d:13:85:38:ca:72:cf:97:bd:8e:57:7c:bb:7d:63:
bd:31:47:3d:4c:f5:4e:c4:c3:9e:5a:28:8a:44:08:
0f:64:e4:ab:58:08:23:39:d6:7a:f5:d8:bf:24:16:
ee:9f:80:35:24:9f:2a:ca:9e:23:4a:2f:10:ae:f0:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:C0:B2:4A:3E:CA:95:30:74:46:E9:8A:60:26:32:9B:F0:6B:AF
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cc:26:83:ac:02:a4:96:ea:7d:c4:e5:4d:74:ee:09:26:c9:
b1:e6:92:a6:9c:b0:fc:ea:f7:dc:ec:4b:13:cb:14:bd:f2:09:
f6:6f:58:25:66:b1:e5:cd:b4:8d:44:49:41:45:b0:13:79:f8:
e3:d3:a1:4e:fa:e8:67:12:bb:4b:95:7f:38:a1:09:f2:cc:c0:
18:d5:70:e8:c0:89:2d:9d:b0:74:e4:c7:20:3c:b8:78:9e:a6:
23:49:c9:1b:88:8d:fb:5b:e2:d7:29:89:e5:e0:3a:72:e2:c4:
0b:7c:4f:1a:b9:6a:69:0a:d2:40:8d:e3:bb:74:11:26:5f:33:
4d:e1:16:f7:bc:b5:39:ba:92:63:c9:75:21:90:2c:f1:19:2b:
f5:ae:f4:ad:97:b0:98:d2:27:cf:be:06:0e:eb:f6:48:a8:0f:
e6:cc:fe:4c:1b:9d:d2:23:24:2c:71:50:10:15:ba:f6:9e:08:
0b:0c:d2:93:ec:22:20:25:c5:76:c5:66:a4:d6:83:26:cf:7b:
6e:0f:fe:fb:39:c7:9e:3c:b6:63:65:95:49:62:c8:d3:91:84:
c7:84:c5:8c:0b:fd:95:79:f7:8c:4b:48:ac:c4:b8:77:c5:60:
ae:d3:7b:d0:43:82:ca:7b:a6:34:0f:fe:e1:8f:f6:1e:ce:1f:
a2:b3:c1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijKdgTWoGR3ZqeqnS4/XsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGE4NTY1Mjc2YjRhMjUxYmE1NzNkZDZkNWY1Zjg3ODIz
OGViZDIwHhcNMjUwOTA3MDUwMTA3WhcNMjUwOTA4MDUwMTA3WjAzMTEwLwYDVQQD
EyhhNzM1YzBiMjRhM2VjYTk1MzA3NDQ2ZTk4YTYwMjYzMjliZjA2YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO6o9qjy9Hyh8wO/Hzu5edrOJPfR
2ysJl/Tb2EU8C6p1HA1RTnLO2Nt+MiK5wTPRIefcDv+E1/33pnlZ0IYD4cZ7hv/D
V2DUSNJ1j/ojAefNTmfb2cFdSIRefALRDGrt1OyW/NzjKCmQrTWT9IMCoMJC92yE
y9rmWgIqV9LyXFSSKQFkcuvykCD8CXZwYW/NcHo69kvDJidbqBQYaqzEC4HyfKUG
yjfKRR5uXKIw+qiGM8LDi8rGcgUy/zGTvruAnH59E4U4ynLPl72OV3y7fWO9MUc9
TPVOxMOeWiiKRAgPZOSrWAgjOdZ69di/JBbun4A1JJ8qyp4jSi8QrvBR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKc1wLJKPsqVMHRG6YpgJjKb8GuvMB8GA1UdIwQY
MBaAFElKhWUna0olG6Vz3W1fX4eCOOvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYt
YzZkOWY5MTViZDhiLzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYtYzZkOWY5MTViZDhi
LzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMwmg6wC
pJbqfcTlTXTuCSbJseaSppyw/Or33OxLE8sUvfIJ9m9YJWax5c20jURJQUWwE3n4
49OhTvroZxK7S5V/OKEJ8szAGNVw6MCJLZ2wdOTHIDy4eJ6mI0nJG4iN+1vi1ymJ
5eA6cuLEC3xPGrlqaQrSQI3ju3QRJl8zTeEW97y1ObqSY8l1IZAs8Rkr9a70rZew
mNInz74GDuv2SKgP5sz+TBud0iMkLHFQEBW69p4ICwzSk+wiICXFdsVmpNaDJs97
bg/++znHnjy2Y2WVSWLI05GEx4TFjAv9lXn3jEtIrMS4d8VgrtN70EOCynumNA/+
4Y/2Hs4forPBIw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:08 2025 by rpki-client