Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier: cGsNFLWqGK/ocAGqZbo3dOm1Z2hxp0MwFseFtp4Zv28=
Subject key identifier: 6F:19:A2:F2:01:C7:7D:72:9F:46:8B:F0:8F:F8:13:12:93:FC:8B:80
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 019A293008D8AF968DB9C76B8F1DF9CE22F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number: 1276
Signing time: Tue 28 Oct 2025 05:00:05 +0000
Manifest this update: Tue 28 Oct 2025 05:00:05 +0000
Manifest next update: Wed 29 Oct 2025 05:00:05 +0000
Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: ax7X3txZhYh7CW+7Xx6fy0ebZTe9AGC8RotcB8ISGrg=)
2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:08:d8:af:96:8d:b9:c7:6b:8f:1d:f9:ce:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Oct 28 05:00:05 2025 GMT
Not After : Oct 29 05:00:05 2025 GMT
Subject: CN=6f19a2f201c77d729f468bf08ff8131293fc8b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:79:77:81:10:25:7a:b3:14:68:ac:5b:02:
fe:8e:95:e0:00:d5:62:80:fa:ff:27:ee:f8:40:e6:
32:c3:26:2c:55:58:5d:87:56:3f:70:41:29:6d:10:
56:84:05:9c:f6:50:17:16:cc:71:9b:81:fd:6f:e5:
cd:49:5e:f2:79:14:e8:9c:be:c6:a1:e1:98:94:5a:
1f:9c:1b:33:c4:7d:33:ac:72:a9:a4:58:1f:1a:4f:
c0:d0:0d:5b:bc:7f:9c:2e:5a:95:76:9f:a9:c8:a4:
ac:b3:b9:2b:e1:43:a4:7c:c6:76:bd:eb:5c:19:14:
ff:b6:3e:39:60:e2:5f:23:e2:37:38:22:81:67:a3:
85:30:23:cb:d4:6d:98:d4:9f:9a:c7:c1:ce:ad:b8:
d2:fc:28:68:00:9e:62:a2:0d:f8:fb:37:8e:2f:5f:
f1:4b:a4:28:4b:f5:da:b2:18:75:35:fd:c4:fd:d9:
e3:f4:31:3c:7b:68:c2:25:49:a4:fc:5a:c5:1c:5f:
75:8c:46:bf:f7:69:7e:49:96:d2:9a:01:39:30:e8:
2e:1b:c1:3b:81:c0:83:0a:19:29:cf:bf:e7:c1:e2:
c2:65:44:dc:94:fb:84:be:c4:72:08:b7:80:8a:8e:
01:c5:cf:c9:4c:a3:89:00:b6:92:24:ea:65:6d:47:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:19:A2:F2:01:C7:7D:72:9F:46:8B:F0:8F:F8:13:12:93:FC:8B:80
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7d:b0:f2:5f:b8:94:5c:57:d6:29:a9:32:92:3b:b6:3e:d6:
64:c0:a4:56:91:ce:1d:d5:a1:9a:2e:c2:80:a4:b0:6c:65:ae:
ee:3f:20:cc:51:96:26:fb:a2:67:68:bd:50:65:9f:43:2d:8b:
d8:df:fb:b5:70:08:97:71:5a:e8:64:11:5d:00:9b:7e:1b:76:
71:00:c0:1d:54:00:2b:ab:2a:1f:d5:36:a7:76:5d:05:25:a8:
c8:1c:e4:00:da:23:d8:dd:93:2b:87:c0:98:e6:40:08:26:8c:
84:8d:fa:40:27:1f:43:44:c2:83:88:b4:d8:97:5d:8d:cd:b1:
08:0a:b0:52:41:11:65:24:c8:7c:b0:0b:47:b0:e6:e3:33:1b:
b8:54:f6:53:77:4c:53:b4:76:07:d1:f8:9c:fe:a0:09:89:6c:
b7:98:04:0f:90:ed:99:e3:44:a9:53:95:d8:93:41:70:0b:19:
86:89:0a:10:e4:75:82:d8:9f:ed:b1:b4:f3:de:7e:fd:fc:29:
a3:6d:4f:9d:63:b7:99:17:14:84:06:aa:b0:81:f8:70:35:20:
50:d0:d2:e6:97:12:b4:1e:6d:84:db:f7:34:a4:87:aa:a0:fb:
91:90:fe:8e:d7:e8:43:84:df:8d:2a:73:e6:1f:0e:d4:39:ec:
ae:bc:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:28:00 2025 by rpki-client