Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: 4nZ1bTU5LOAifH02JczPEXMrQP4ZxPE+O8KXpfkYSgY=
Subject key identifier: B7:A0:76:8C:A9:CE:9E:BE:DC:D3:22:CA:DE:19:FA:8B:ED:12:9B:D5
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 019A72264D0123718CAE35780F26E5D1FFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: DXZARDlS+pyvddQi2BhqdMlB+DWc3YENQYrYSry9mZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4d:01:23:71:8c:ae:35:78:0f:26:e5:d1:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=b7a0768ca9ce9ebedcd322cade19fa8bed129bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b3:72:ff:78:f9:f3:db:19:cb:ee:53:35:0c:
f2:33:03:25:7d:ab:3a:d7:4d:80:b9:fd:0c:02:60:
d4:9d:44:4b:7d:56:fb:a6:1c:25:6f:ad:a5:86:ae:
cb:0d:f8:97:e8:b2:12:5c:bd:bb:b8:61:01:a8:3d:
08:4d:f4:12:07:31:ee:36:3a:91:1b:3b:47:c2:50:
cb:f6:34:5f:6e:5f:4e:a3:b7:5c:f0:f3:df:e5:e6:
93:ec:42:a6:1c:98:1c:c2:40:ae:75:03:af:2b:40:
8f:f6:16:e6:0a:0f:c0:91:1b:a6:90:0a:9b:5e:ff:
0e:35:92:8c:8b:e4:3e:fd:77:2b:1a:18:aa:da:9b:
62:e3:9d:10:e3:b5:5e:29:e5:6d:ed:42:a1:bc:15:
86:07:9f:ff:3d:5d:62:af:40:55:f5:11:01:47:a9:
3e:91:dc:d3:7b:3a:54:3c:4e:27:ad:96:eb:3e:d4:
ab:aa:e2:22:ff:d7:26:c9:16:ef:c5:c4:62:bb:48:
02:21:9f:de:05:58:f4:8d:39:91:e4:54:e9:6f:46:
ab:37:83:fb:f2:f5:f3:1c:ed:22:77:e1:53:72:6e:
ff:c2:96:5a:94:07:8a:36:7f:cc:09:82:e6:1b:b0:
ef:54:4f:40:81:0a:40:23:9f:6b:0b:43:bb:5d:16:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:76:8C:A9:CE:9E:BE:DC:D3:22:CA:DE:19:FA:8B:ED:12:9B:D5
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:58:41:53:6f:7a:b9:cf:bc:62:75:a4:75:95:99:d7:9e:f6:
34:59:c4:39:08:57:d3:f3:d5:7a:aa:e6:7e:d7:3b:b6:de:5e:
ce:bb:26:0c:e5:74:44:bc:e4:22:1d:ea:89:67:fb:5c:d1:81:
55:07:62:f2:fd:4c:9d:ed:18:3a:5c:38:fa:e6:ea:3e:f2:b5:
4e:a0:aa:77:6a:ae:17:33:2a:90:f3:5d:55:fe:00:81:e9:49:
08:20:84:72:94:e3:b9:af:02:09:8d:09:a0:5b:be:f5:15:41:
89:96:05:1c:af:ea:56:15:16:6e:c2:1f:2d:24:47:43:7b:86:
ec:28:81:f0:85:30:11:a2:24:d0:32:36:38:f8:b2:ae:aa:40:
2b:b2:6a:39:dd:5b:38:20:72:f7:81:fc:0e:68:5e:77:97:4d:
59:f5:ef:ab:d2:98:7e:7f:62:c0:5b:3c:bb:9f:5c:7a:6f:53:
2f:d4:cf:21:d9:99:dc:97:81:29:76:66:a0:2c:25:b9:28:e3:
65:75:6f:03:41:c2:bc:8e:fc:31:e2:dc:b6:75:fb:cf:d1:3d:
7e:eb:aa:3c:a4:73:8c:86:77:e1:7c:d6:60:37:95:bb:1e:0b:
b0:95:b0:28:11:ca:67:42:6b:55:bf:e0:62:6d:a1:b3:97:d9:
f7:d1:55:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJk0BI3GMrjV4Dybl0f+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZWZjZmVkNTFmZjE1OGZiZTY4Y2NkNjBiN2IzOWJlNWYz
ZWFlMjAwHhcNMjUxMTExMDkwMTQzWhcNMjUxMTEyMDkwMTQzWjAzMTEwLwYDVQQD
EyhiN2EwNzY4Y2E5Y2U5ZWJlZGNkMzIyY2FkZTE5ZmE4YmVkMTI5YmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rNy/3j589sZy+5TNQzyMwMlfas6
102Auf0MAmDUnURLfVb7phwlb62lhq7LDfiX6LISXL27uGEBqD0ITfQSBzHuNjqR
GztHwlDL9jRfbl9Oo7dc8PPf5eaT7EKmHJgcwkCudQOvK0CP9hbmCg/AkRumkAqb
Xv8ONZKMi+Q+/XcrGhiq2pti450Q47VeKeVt7UKhvBWGB5//PV1ir0BV9REBR6k+
kdzTezpUPE4nrZbrPtSrquIi/9cmyRbvxcRiu0gCIZ/eBVj0jTmR5FTpb0arN4P7
8vXzHO0id+FTcm7/wpZalAeKNn/MCYLmG7DvVE9AgQpAI59rC0O7XRbyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLegdoypzp6+3NMiyt4Z+ovtEpvVMB8GA1UdIwQY
MBaAFErvz+1R/xWPvmjM1gt7Ob5fPq4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0Mzct
ZGI2NjcxYWM3NjcyLzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0MzctZGI2NjcxYWM3Njcy
LzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalhBU296
uc+8YnWkdZWZ1572NFnEOQhX0/PVeqrmftc7tt5ezrsmDOV0RLzkIh3qiWf7XNGB
VQdi8v1Mne0YOlw4+ubqPvK1TqCqd2quFzMqkPNdVf4AgelJCCCEcpTjua8CCY0J
oFu+9RVBiZYFHK/qVhUWbsIfLSRHQ3uG7CiB8IUwEaIk0DI2OPiyrqpAK7JqOd1b
OCBy94H8Dmhed5dNWfXvq9KYfn9iwFs8u59cem9TL9TPIdmZ3JeBKXZmoCwluSjj
ZXVvA0HCvI78MeLctnX7z9E9fuuqPKRzjIZ34XzWYDeVux4LsJWwKBHKZ0JrVb/g
Ym2hs5fZ99FVOw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:41 2025 by rpki-client