Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json)
Hash identifier: y1JcriG77M6GXvmkWCCljuShOXJQMGE+udU5KIkvPpE=
Subject key identifier: CB:6B:6A:3F:F5:E0:51:87:0A:98:DC:DC:FE:D2:A6:CF:9C:D3:C9:85
Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Certificate serial: 019A72935C4620B70D6547822B2F1BBEBA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
Manifest number: 159E
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: 0fA7IYSpF0hKbFnUK67M5pvCi59ZW9X00G33w8QB+ZE=)
2: nP21AC5prEFloL4b-rvpds4zVIk.roa (hash: uwmza4+iHSYo9L5fLNkaMpr9S0IJA2DNF48xVtFHmFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5c:46:20:b7:0d:65:47:82:2b:2f:1b:be:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=cb6b6a3ff5e051870a98dcdcfed2a6cf9cd3c985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:48:2a:53:95:03:56:1e:6e:e6:16:ba:05:2e:
d4:21:e7:40:e2:96:7c:e9:8d:98:07:20:0a:f0:c9:
ca:e4:fb:e6:38:19:35:ff:f3:26:29:8d:ec:7c:db:
bc:18:d8:48:ec:55:90:68:78:f3:15:30:6d:7a:17:
81:32:1a:ea:fd:87:89:66:d9:64:ee:47:9f:0b:7b:
a9:6d:6b:de:2b:4f:e0:79:7f:f8:d5:17:5d:52:41:
6f:9c:42:a0:a5:04:79:08:7f:fc:79:95:96:04:cd:
cc:aa:72:16:3c:e6:fb:9e:89:52:7d:04:17:9d:a6:
17:36:6c:56:5f:d5:5e:37:c4:c4:e6:02:75:71:96:
93:83:23:6a:21:34:07:7f:97:bb:a0:f2:8c:10:10:
63:bf:ab:06:f4:85:4b:36:86:79:ae:9b:f8:7e:f2:
de:85:7b:4a:83:37:92:a1:5e:5d:5e:41:73:eb:9c:
c2:50:af:1c:e8:42:dd:0b:7d:75:f7:75:3c:04:fa:
96:6e:94:71:06:b4:cb:a8:cd:8b:32:c0:f6:1b:4d:
e4:2b:6f:fd:c9:be:2c:86:33:43:19:42:ab:6e:d3:
e4:6e:0e:2d:41:57:79:b3:d1:bd:27:33:9e:94:3a:
d5:04:de:36:98:c9:11:85:2c:63:33:07:6a:b5:bd:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:6A:3F:F5:E0:51:87:0A:98:DC:DC:FE:D2:A6:CF:9C:D3:C9:85
X509v3 Authority Key Identifier:
keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4b:0a:b1:8b:52:e7:51:23:35:f6:fd:4d:0c:06:bb:e7:41:
04:b0:70:3f:ee:b3:f7:59:18:52:54:5c:58:a7:cb:f5:f0:be:
77:2d:33:32:2d:42:e6:39:3d:2a:0e:8f:6d:15:1d:a5:e8:71:
09:9c:34:db:c4:30:89:65:c9:dd:b4:b6:78:2d:a7:6a:22:86:
0a:4b:2a:ce:48:7f:63:38:70:46:d3:57:9f:f3:d9:28:8f:68:
29:b9:5e:33:38:e1:a7:4a:d0:7f:b4:e0:8d:c8:79:1b:14:6a:
46:2b:4d:a4:90:4e:16:80:3a:fd:fe:68:cc:9b:93:f2:da:ba:
04:0b:a2:f0:93:0f:8c:21:fd:a1:a0:aa:34:bf:d4:5a:ca:33:
50:47:36:40:11:7e:fa:f8:b9:5c:54:ca:f8:e6:99:e2:9f:71:
bc:c4:cb:37:00:3a:6b:42:f6:33:43:cd:9b:17:9e:9e:23:6a:
fc:33:b1:0f:dd:6c:42:28:32:fc:28:d5:b0:ac:e9:c3:03:ae:
23:e8:2e:d8:3f:aa:b1:23:f7:bb:7b:c1:d6:00:99:00:12:c5:
eb:07:e0:21:d0:5d:66:52:fb:ff:fb:48:81:5f:47:a0:55:3d:
e1:0b:18:1b:08:8c:23:9f:3c:d0:45:0c:e2:8b:99:c0:5b:af:
a4:f2:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:57 2025 by rpki-client