Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier: ZAAnAKWkguO0mA1iovEL1hvP242v8prqXKYYWlNd3ms=
Subject key identifier: 3B:6D:9F:21:0C:26:D1:7E:0F:AA:48:BC:4E:33:7A:A0:B9:1B:32:AB
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 01974967DCE80C1AC0F147DEE9375DC4A70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number: 10F9
Signing time: Sat 07 Jun 2025 08:00:32 +0000
Manifest this update: Sat 07 Jun 2025 08:00:32 +0000
Manifest next update: Sun 08 Jun 2025 08:00:32 +0000
Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: C6xWjep8+XWKayCZe52SbO7cEZYK3VKDOExSJS7jAgI=)
2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:dc:e8:0c:1a:c0:f1:47:de:e9:37:5d:c4:a7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Jun 7 08:00:32 2025 GMT
Not After : Jun 8 08:00:32 2025 GMT
Subject: CN=3b6d9f210c26d17e0faa48bc4e337aa0b91b32ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:02:e0:f2:d2:49:bb:83:4a:03:25:45:e1:
8e:c3:52:59:03:ab:6c:1e:78:dd:dd:4b:ba:32:4b:
66:00:a6:42:a8:1d:9e:ee:fd:1a:be:d7:a2:ab:36:
fc:1e:b0:d4:7f:2d:2b:73:24:4b:80:fd:c7:cc:8b:
30:ac:97:b4:0b:a3:ef:d0:a4:0c:d9:aa:23:ca:10:
66:27:e7:28:e6:b4:bf:86:35:97:34:6f:8b:08:d9:
f1:89:4f:1d:3d:05:cf:89:2a:6c:03:3b:13:e0:8c:
60:60:29:ba:c4:c8:ea:3b:66:16:55:95:b9:ae:71:
59:fd:67:88:62:30:2a:d2:b7:44:10:13:a9:f1:51:
ae:5a:e5:5c:31:20:f9:12:1a:97:87:87:52:69:58:
f7:35:ef:ac:c8:cd:29:2e:96:1d:6e:0d:88:67:3f:
c1:5d:c8:b9:40:e2:43:be:ae:19:d6:78:6d:7d:1f:
4d:83:c4:00:8d:b1:49:b9:a0:6b:0f:ac:ca:32:17:
c1:9b:0b:1e:71:fa:21:9f:cc:e6:27:ae:c3:24:5f:
6e:a9:9e:cd:f3:3e:98:2c:93:b5:03:7e:a3:ca:36:
f5:dd:af:6c:d4:75:ed:55:dd:89:a6:89:77:aa:97:
e5:6b:a8:2f:19:4c:ec:c6:eb:78:97:fa:db:30:8f:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6D:9F:21:0C:26:D1:7E:0F:AA:48:BC:4E:33:7A:A0:B9:1B:32:AB
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a3:d0:a4:ff:3d:9f:7d:fd:ab:3d:30:02:3d:e1:fb:72:3f:
1c:6d:09:7f:13:07:31:d7:fa:24:c3:cf:ce:e9:a8:8f:74:2d:
63:a5:32:8b:93:12:c0:7d:6b:23:2b:d9:33:73:f1:8c:fa:47:
fb:bb:d2:e7:19:8c:73:bd:17:07:e6:2f:cc:fe:c4:95:c6:0a:
36:72:5c:ae:fb:db:42:a5:74:7d:ee:6b:8c:7b:86:c4:1d:9a:
5a:59:7d:3d:c3:12:81:ce:ce:4c:aa:a9:f5:73:35:ff:08:5e:
1b:9b:0b:7d:77:bc:22:b0:df:0a:37:c5:eb:cd:7d:89:c5:32:
6a:81:2b:e8:a4:4e:4e:0a:ab:4d:88:ff:86:39:a8:89:5f:70:
d2:43:04:ba:b2:ad:3f:e2:fb:9c:dc:8c:f5:58:a4:bf:c1:1f:
3b:0d:b7:a6:ef:d8:02:83:7d:a9:66:b0:e8:e4:05:86:30:9b:
f1:da:69:50:d7:b8:b5:c7:81:88:44:43:36:bb:a4:4e:61:e2:
1a:bd:20:ef:a8:8a:da:16:9c:a6:6c:71:d9:bf:29:7b:c5:be:
69:96:e6:dd:23:87:cb:da:6c:3f:4a:39:78:21:79:71:91:6e:
c5:59:b7:f1:ba:43:97:c9:97:fc:5b:66:67:fc:70:d8:49:54:
f0:3c:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:12:58 2025 by rpki-client