Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: QyjNlVc+a8A7AbFZzs4veTbZgZoHQSohJi1IgWvrGl0=
Subject key identifier: B8:90:37:48:4E:2B:5E:AA:12:68:3F:BC:2D:7C:8D:76:46:EF:DB:37
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 01996210569D4E661DE1C5BEB22854083FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 1696
Signing time: Fri 19 Sep 2025 13:01:01 +0000
Manifest this update: Fri 19 Sep 2025 13:01:01 +0000
Manifest next update: Sat 20 Sep 2025 13:01:01 +0000
Files and hashes: 1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: SLHXC4qOwFhhwNmE2UIxHJhYlYMcpxMSJmlwfUB6HT4=)
5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:10:56:9d:4e:66:1d:e1:c5:be:b2:28:54:08:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Sep 19 13:01:01 2025 GMT
Not After : Sep 20 13:01:01 2025 GMT
Subject: CN=b89037484e2b5eaa12683fbc2d7c8d7646efdb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4d:e0:37:6f:1b:53:cb:a6:72:4e:14:df:7c:
88:38:1f:5c:9c:f7:24:9f:7b:2e:5c:c7:aa:39:7f:
1d:b5:36:aa:09:c6:64:dd:d2:be:81:45:6c:64:ca:
94:be:bc:a0:63:83:83:24:17:f1:e0:9d:08:5c:02:
3b:6d:19:94:d5:4f:0b:0a:29:a9:79:12:7b:cc:4c:
d6:78:22:73:ca:4c:69:e6:70:5f:b9:5d:a0:81:f1:
02:68:7a:5d:d0:5b:2d:6d:f2:06:82:44:df:a1:9e:
d6:7e:9a:9d:4c:d1:1e:7c:ce:1e:6a:d1:79:d6:08:
b7:12:5e:ff:57:c9:93:6b:d1:85:a4:9d:06:46:16:
be:5e:64:b5:ca:31:b9:5f:e2:04:38:61:38:12:45:
5b:3f:66:f3:f2:49:89:7e:9c:e4:2c:c6:0a:45:a5:
fa:06:98:df:22:cc:fe:35:24:b1:67:d6:67:d9:38:
31:12:c6:de:1f:28:90:19:d2:6e:f2:9c:82:fd:85:
b8:3e:86:61:65:d1:aa:10:ec:cc:d1:3c:b7:ef:01:
5e:11:a7:46:12:2a:2e:31:f6:af:a4:e1:2f:6b:bf:
06:b9:f0:86:38:b7:52:24:2b:e3:49:d3:73:01:56:
a2:e5:5d:6a:08:aa:c3:86:00:b5:91:c1:0b:ce:b1:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:37:48:4E:2B:5E:AA:12:68:3F:BC:2D:7C:8D:76:46:EF:DB:37
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3b:48:96:c5:29:00:11:df:fb:f6:c9:5f:60:cc:9f:bb:d5:
cb:4c:0f:4d:65:4b:bb:9e:ec:1e:00:1c:00:f0:50:06:1d:03:
74:b9:d4:ba:c8:39:48:6b:50:67:19:95:9f:ca:72:ae:03:7d:
30:1f:6a:d3:24:33:da:37:a6:65:aa:e6:e5:08:c3:9a:a6:a2:
01:f4:2b:17:74:82:82:14:b4:3f:de:aa:4a:b1:04:1a:7d:4a:
f3:04:a5:6a:9a:66:f1:a3:9b:c8:3c:88:0b:f8:62:29:0a:0f:
8d:ed:27:a9:c6:f7:18:41:88:72:3e:60:e7:8b:53:22:fd:a4:
b2:ef:bf:b5:5c:7e:a1:09:4b:e6:bd:7a:2c:bc:14:b2:61:3b:
21:56:93:04:52:3e:66:c5:08:63:6e:c7:51:a3:5e:f2:23:c0:
87:70:dd:f1:a2:60:db:e8:2d:64:69:d0:c3:fd:16:0d:94:fa:
b8:0d:46:f2:f2:7d:a0:4c:6c:85:2a:93:ce:c6:22:73:e0:fd:
dd:e1:d7:7a:a9:5b:20:7c:31:81:ca:85:75:c8:17:dd:24:62:
08:c7:8c:03:2f:11:c3:d5:1f:c0:cf:d4:ce:50:05:6b:df:cc:
45:59:db:70:c7:95:c6:cc:0a:26:d7:0b:f5:c0:98:c8:3b:46:
d9:14:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:32:23 2025 by rpki-client