Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: AWT+grKfwXAmkbLJM9yy+kCC/GRWYSA4Iz5dfmZp0uU=
Subject key identifier: B1:12:7F:D7:FD:5E:F2:90:CD:6B:94:8B:7E:E7:B9:5D:2E:19:A9:65
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 01987B9BD8F0024BC0B186FB7E5EB07F50AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 19:01:07 +0000
Manifest this update: Tue 05 Aug 2025 19:01:07 +0000
Manifest next update: Wed 06 Aug 2025 19:01:07 +0000
Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: jZXZ9McQHItr2csZVPGRi7Mm5n4djm0iXjEj5USzNpw=)
3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:d8:f0:02:4b:c0:b1:86:fb:7e:5e:b0:7f:50:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Aug 5 19:01:07 2025 GMT
Not After : Aug 6 19:01:07 2025 GMT
Subject: CN=b1127fd7fd5ef290cd6b948b7ee7b95d2e19a965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:6e:71:0c:f0:1f:b7:fe:80:09:f2:b8:d3:
5d:f3:de:cc:d8:73:a9:df:6e:fb:93:6b:7b:00:f7:
e9:fd:6e:56:cf:db:c2:62:de:7e:88:20:9e:3a:e6:
a0:80:b9:c2:7b:be:ff:e8:45:36:4a:75:83:95:de:
91:13:32:8e:ae:f6:31:f9:f8:82:4f:e4:b1:f1:f8:
a4:10:0e:01:e5:78:64:53:4a:df:6e:10:0b:cb:cd:
d3:75:84:97:40:af:3a:15:4c:95:3f:a0:c2:31:2a:
bd:0d:e8:ce:7e:91:bc:e5:43:02:4c:5f:ff:f9:46:
28:23:5e:fc:54:93:0a:d8:84:a4:c5:3b:4d:ea:37:
14:8f:13:57:d2:d2:7a:07:cd:ec:88:7a:2e:01:06:
36:40:8f:a6:29:5f:d4:f5:63:c6:0d:45:98:57:61:
7b:90:5f:ff:85:a8:b2:58:59:9c:c6:24:11:be:a8:
ea:42:39:20:ca:79:40:80:b1:81:cd:e4:a9:cf:08:
1d:03:78:91:a5:f7:a4:5b:a5:e2:c8:91:c9:79:e7:
7b:1b:97:b4:91:4a:6f:5f:35:aa:a2:cf:81:4e:04:
b5:da:73:6a:61:92:8e:d7:c8:4a:14:a6:c4:3d:a6:
aa:b3:0d:3d:34:85:9c:2f:3d:79:6a:88:00:09:66:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:7F:D7:FD:5E:F2:90:CD:6B:94:8B:7E:E7:B9:5D:2E:19:A9:65
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7f:02:c0:62:51:bd:4e:7e:49:74:9a:86:82:19:5f:12:b7:
22:c0:36:32:82:ac:d4:f9:da:35:72:65:71:94:90:3e:c9:38:
25:01:fd:e1:a5:33:5f:32:14:ad:d1:13:12:24:e9:23:92:c6:
54:23:5a:bf:96:d1:2e:4b:78:15:2c:0c:eb:1c:08:54:92:19:
5f:2f:19:0b:15:64:a9:b7:33:d4:61:2c:52:1b:30:11:69:f5:
06:ce:99:99:78:5c:29:b7:d9:c5:90:63:29:3b:79:d2:1d:63:
e7:8f:9b:5a:d1:b5:6c:5c:03:09:94:de:b6:2c:00:17:06:59:
37:da:92:ad:00:3e:02:03:00:cf:4d:44:c0:05:24:5f:27:ae:
96:c3:12:43:af:9f:24:93:2d:f0:ef:5f:40:8f:ba:ff:24:7d:
98:9b:df:1a:96:b7:43:55:9e:cf:0f:ee:59:45:4e:c9:f4:78:
2e:80:3e:ff:ab:6d:d0:8e:2c:0d:b3:77:71:a5:3e:cc:e7:7c:
66:7c:64:61:49:c8:7e:34:72:41:25:03:ae:fd:5e:2e:72:af:
85:d3:eb:6d:e5:f5:35:c2:85:d8:60:66:46:b3:b3:ab:40:83:
86:b1:d0:b9:90:fb:44:88:74:9b:24:65:0b:b3:02:9f:91:b9:
16:0c:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:21 2025 by rpki-client