Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: vNoHh971IrDhKGDIwZh5CXUym1uxTtlpaDzQl/L2nDs=
Subject key identifier: 7B:42:60:E9:84:E8:54:15:6B:D6:7C:E1:B7:92:B0:A3:08:13:9A:34
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 01974E20815477F0DEC3F19951E80D32CA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 0529
Signing time: Sun 08 Jun 2025 06:00:42 +0000
Manifest this update: Sun 08 Jun 2025 06:00:42 +0000
Manifest next update: Mon 09 Jun 2025 06:00:42 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: RjM4mPQTBxZs0ReAIYmufTYQqWlcvAxCXAMfkXgxBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:81:54:77:f0:de:c3:f1:99:51:e8:0d:32:ca:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Jun 8 06:00:42 2025 GMT
Not After : Jun 9 06:00:42 2025 GMT
Subject: CN=7b4260e984e854156bd67ce1b792b0a308139a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:55:69:e5:68:50:bb:e8:6b:18:7f:18:59:
20:da:e2:80:e0:01:2d:11:27:52:88:80:42:0a:bd:
7d:5e:a8:54:ad:86:91:21:93:6f:4d:13:bf:e8:61:
fb:95:fa:f3:56:50:58:d0:c0:60:5b:89:50:35:17:
2c:35:21:54:9e:58:9a:29:6c:c5:d4:7c:8e:b3:61:
a2:f1:96:4a:d8:fc:06:de:f2:16:aa:87:4d:c1:21:
56:3b:49:5e:47:c5:72:3f:b1:88:d3:31:64:fc:fd:
59:b8:72:a4:29:cb:59:79:65:0b:21:c3:ce:1c:54:
9a:93:d9:df:a1:b3:a9:88:7b:23:2d:28:7f:9a:cb:
06:85:8e:29:51:94:65:19:e9:61:7a:06:e5:8e:d9:
b3:d3:05:e0:d8:4a:5e:4f:fe:20:2d:cf:c1:d0:02:
ca:b9:77:ce:23:2d:21:36:cf:e4:a8:ef:52:88:7c:
db:2e:ba:41:0d:8b:df:b7:0f:84:9a:67:92:d7:cc:
a1:c9:20:f7:9b:89:5c:73:2b:ec:0d:b2:3c:58:b1:
2c:b9:3c:e3:a0:92:6e:2a:dd:c4:da:db:65:cd:5b:
75:d6:27:0d:75:ad:9d:ce:79:e2:eb:e5:e4:3f:cc:
f7:df:61:e5:4e:d5:a8:d0:be:ff:30:6f:99:7e:4f:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:42:60:E9:84:E8:54:15:6B:D6:7C:E1:B7:92:B0:A3:08:13:9A:34
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c9:5d:92:c1:ac:8f:7a:34:88:4d:08:85:d9:cd:57:32:2b:
68:bb:00:f9:5e:36:ef:f9:69:b5:0d:60:c2:15:e6:fe:bf:24:
3f:b5:d6:4a:ce:7d:d7:35:af:be:80:ec:3b:70:2a:1b:e0:62:
99:b6:aa:2a:9d:c7:8e:2c:bb:34:67:48:17:28:d6:28:da:ad:
d2:1b:86:d0:6f:e6:2a:fa:0e:f0:be:06:79:e9:85:18:fc:dd:
05:d1:95:d9:da:c2:cc:60:dd:70:b3:9f:b0:93:5b:8f:36:fb:
f9:98:c0:b9:4c:1c:71:a0:78:73:15:17:ca:fa:99:cc:3a:46:
6c:58:2c:4d:05:c4:66:a1:cd:3f:94:5f:5c:78:e4:7e:ab:ae:
60:ff:94:6a:57:f0:2c:f2:84:e9:61:78:f5:d9:e3:e4:58:8f:
66:15:cd:73:34:8b:39:1d:e1:7e:9c:b3:86:26:c5:44:4c:01:
35:73:3e:47:50:2f:68:04:50:a1:46:56:53:ae:73:c2:d4:fa:
f7:13:6f:2a:36:3a:96:57:fd:ec:96:63:ae:62:b1:b2:ed:bc:
bd:ae:b9:0c:1f:30:83:0f:a2:40:de:47:3e:7e:f8:3c:3f:8b:
44:c9:42:6c:a2:10:25:e6:db:48:1c:95:c3:4b:07:52:25:3e:
f4:46:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:54:08 2025 by rpki-client