Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File: SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier: TK9iv/DRXP2J7vF1Dui8lqkdwihaPSN0T0iHwACBnVM=
Subject key identifier: 3A:EA:FC:8C:00:E2:19:D4:94:5C:17:4D:FD:2B:85:BE:A0:8D:AC:08
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer: /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial: 0199228C8B64F66FCC447D6FEA3B8AD78707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:01:00 +0000
Manifest this update: Sun 07 Sep 2025 05:01:00 +0000
Manifest next update: Mon 08 Sep 2025 05:01:00 +0000
Files and hashes: 1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: qPcKE7/Nk7O4UJMLcxLvXrICUKM9fA9FG6EjX+SeQC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8b:64:f6:6f:cc:44:7d:6f:ea:3b:8a:d7:87:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Validity
Not Before: Sep 7 05:01:00 2025 GMT
Not After : Sep 8 05:01:00 2025 GMT
Subject: CN=3aeafc8c00e219d4945c174dfd2b85bea08dac08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:e3:5c:f4:eb:f9:7c:eb:41:98:9f:27:9a:
0f:13:a8:89:bf:c6:85:eb:24:58:f7:45:cc:88:c4:
3d:8a:f6:42:87:03:09:83:1e:65:8d:c7:b0:c6:9a:
0d:27:e9:a7:fc:af:93:b7:89:2b:42:c5:a4:be:bd:
0d:12:5e:e7:71:d1:c5:ce:1a:05:74:14:d7:0a:12:
2d:7d:4b:88:69:85:5e:67:9f:93:7b:43:bd:96:f9:
2b:0e:02:a6:33:c3:34:35:d6:a3:5f:ef:dc:ae:ba:
72:cf:ad:5e:43:03:25:a5:70:26:e6:c4:94:3e:67:
bb:46:95:e4:e1:3f:08:a6:27:67:69:b3:02:ef:86:
59:76:1e:7e:68:79:7d:ed:ba:93:08:b1:3d:8e:96:
b6:0f:d1:b8:04:90:17:b5:61:13:fd:73:b8:d6:1d:
cf:a4:bc:e3:10:79:23:91:03:25:67:f6:23:ea:09:
0c:b6:27:b0:0b:f5:01:fc:19:40:eb:53:ad:ed:47:
ef:c4:46:5f:32:0d:15:0c:0d:88:30:a0:78:ab:30:
6c:e4:39:cc:5b:bf:08:16:f1:d0:61:26:75:df:ea:
0a:ea:e8:24:96:94:f9:1a:b1:c2:e2:59:c3:0d:e5:
2e:91:5f:6b:2c:f5:22:08:56:72:da:10:a7:87:5a:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EA:FC:8C:00:E2:19:D4:94:5C:17:4D:FD:2B:85:BE:A0:8D:AC:08
X509v3 Authority Key Identifier:
keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:97:7c:9b:b8:30:70:88:72:8f:99:36:7c:7d:bf:ed:f5:57:
5c:87:3e:fb:8f:53:e9:1f:c3:06:66:8d:d3:09:21:d4:f4:e1:
e4:2c:2a:0e:29:6d:58:7f:a4:98:98:75:0a:71:10:bc:99:fb:
d9:e5:8a:f9:10:8a:57:d7:1a:44:ff:dc:d8:68:48:32:e1:7f:
8f:62:e1:b8:85:89:4f:35:8f:fe:49:0a:ea:cc:d2:0e:21:ec:
08:89:6f:93:78:09:9e:57:3a:f6:10:96:de:57:f7:c4:cf:cb:
d1:56:d4:ae:6b:93:53:95:f3:73:94:f6:13:cb:d7:71:37:e0:
e5:61:4f:24:cf:d3:29:00:89:9f:95:64:ed:85:9f:99:0c:2a:
d7:95:1a:47:99:66:a2:83:23:1f:90:15:0d:d5:5a:94:26:b8:
c2:96:ad:20:9d:6b:5d:55:2b:c6:35:0b:73:34:c3:82:d7:3b:
dd:16:e5:ec:76:e6:f6:0b:cc:4a:4d:1c:9d:e0:fb:56:dc:4c:
46:4b:d6:d7:b2:cf:2b:aa:00:de:28:1c:db:62:65:a3:ed:33:
cb:8b:5e:f4:60:b6:d5:f3:f3:6a:2a:dc:15:67:2e:0e:e0:9d:
ff:e3:0e:eb:d4:0e:b9:a3:02:78:3e:3d:26:28:c8:37:2c:1d:
14:7f:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:07 2025 by rpki-client