Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: qANWw1rGBBCcW2/ui2uCJZJRS0pHvSLrX7uQNJN1p0k=
Subject key identifier: 93:A0:F0:49:56:CA:6A:71:FD:48:65:BC:E9:23:94:47:34:60:5D:84
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 019A0F3A4DC780E2381ED614719009961AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 109F
Signing time: Thu 23 Oct 2025 04:01:10 +0000
Manifest this update: Thu 23 Oct 2025 04:01:10 +0000
Manifest next update: Fri 24 Oct 2025 04:01:10 +0000
Files and hashes: 1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: QSO9GVYqmOR23HUUBUEMb8f3fsOxqwfO4B6KwZJhweM=)
2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=)
3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:4d:c7:80:e2:38:1e:d6:14:71:90:09:96:1a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Oct 23 04:01:10 2025 GMT
Not After : Oct 24 04:01:10 2025 GMT
Subject: CN=93a0f04956ca6a71fd4865bce923944734605d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:2d:7b:90:d2:03:b8:f5:e2:fc:46:60:e6:
d4:ee:18:7f:ea:ae:e1:eb:98:c2:e0:18:e0:eb:3b:
1e:11:54:f3:c2:11:3c:13:fa:6a:2b:3a:b6:06:44:
dc:8c:f6:f9:c4:5b:98:c5:a8:11:5e:56:25:8e:38:
a9:dc:a3:a1:d1:58:9f:0f:86:eb:5f:8a:ff:c6:75:
e7:4e:95:cf:8c:9a:61:cb:55:64:b6:95:9b:44:3a:
8b:50:e6:bf:8c:0a:c5:e6:c1:eb:77:bf:c4:c8:ca:
33:2f:c5:0d:7c:5a:9f:4f:60:77:49:eb:04:75:3a:
16:8f:af:0a:f6:28:e9:c1:cc:49:17:a5:6c:99:c0:
3c:26:f7:f5:1e:43:b1:e7:07:b1:38:91:47:8e:2e:
4c:d5:49:2b:d4:e2:54:38:43:2e:3e:15:74:dd:d9:
6a:a4:13:a7:19:32:56:23:c1:f5:df:cb:8d:81:c4:
e1:6c:e7:2c:d7:4a:57:23:5c:cd:c3:7d:ac:08:b7:
e2:78:a3:bf:d0:93:c3:51:e6:2b:dd:8c:d2:f5:8f:
16:1e:62:3f:b4:12:27:00:27:01:6f:dd:8e:11:d8:
fb:00:d7:3f:57:8f:2f:8b:91:35:12:e1:44:56:e2:
9e:75:dd:a9:5d:89:d5:e1:81:53:62:99:81:42:cd:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A0:F0:49:56:CA:6A:71:FD:48:65:BC:E9:23:94:47:34:60:5D:84
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e5:29:1d:b3:91:4d:83:e1:aa:27:e2:b1:5c:18:00:a2:aa:
49:05:bf:07:01:ca:97:1e:bc:8b:c6:7f:9f:c4:49:41:5b:44:
c4:2a:2f:5f:53:f1:db:e8:d2:01:76:4b:53:c1:14:91:87:a6:
72:29:34:f6:62:bf:19:8c:91:92:03:01:12:24:9b:38:5d:c2:
4b:bb:85:11:9f:c3:5b:66:14:95:05:8b:36:96:b6:b5:18:84:
fa:6b:8a:4b:23:49:c5:40:58:7b:96:9e:c0:22:3c:f8:30:2d:
7d:44:6e:3a:9d:cc:14:69:0c:ca:12:40:0a:52:5e:72:69:b5:
6f:52:9e:cf:20:bb:45:d6:97:30:76:de:95:d3:f4:66:60:2d:
4f:50:18:34:50:46:93:ab:61:c4:7f:f1:f7:f9:22:53:8b:60:
57:3e:32:42:bb:36:23:ef:0a:70:ea:a7:c6:70:6b:84:75:47:
55:70:7a:0d:44:19:fa:c8:5c:b0:3b:fc:ff:2c:71:09:08:62:
e1:e4:a1:8b:ff:0e:a2:1f:d0:0b:ec:ab:ba:a5:4f:25:0a:36:
fd:75:f0:53:3a:9d:17:75:1c:37:12:5d:4f:49:59:75:77:01:
54:be:05:1b:bd:bc:f3:4c:23:ea:e6:3f:36:c5:40:43:35:c3:
8b:86:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:00:03 2025 by rpki-client