Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: qb86GDbjUXDDLe1EkH4bUQA6NFyuaRj+L2uZaxFNW2g=
Subject key identifier: EB:39:DE:D7:38:27:FB:93:25:94:82:7F:A6:E5:6E:24:F5:A6:76:36
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 019A5187BAE7C40946CE70DA2A89EFBE1D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 1427
Signing time: Wed 05 Nov 2025 01:00:40 +0000
Manifest this update: Wed 05 Nov 2025 01:00:40 +0000
Manifest next update: Thu 06 Nov 2025 01:00:40 +0000
Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=)
2: OgrR2CAd56z5U5HmKNv5p8BkWPc.roa (hash: Rq+kB9vanf4G1JIJ3U+Pnkbq1HZGp2RBfUcOAAvfTYg=)
3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: QcnpYUbwGVQk8l6dOksd/MZzvVz/TmERNMEHrXpqm78=)
4: VqTKdS0wUklb387Znd5hFzPRASE.roa (hash: rDOvuh2F3d3eA0aeY1ATjqwPgZrek24RyHk+1v/gN1M=)
5: hs7LWx99onWfa7NDQgswR8o6gaE.roa (hash: Ass+jNWe5lghZzBAkHny706eHe/Mnq+7tyKFB/O7uyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ba:e7:c4:09:46:ce:70:da:2a:89:ef:be:1d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Nov 5 01:00:40 2025 GMT
Not After : Nov 6 01:00:40 2025 GMT
Subject: CN=eb39ded73827fb932594827fa6e56e24f5a67636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:da:35:e8:08:21:72:a5:94:51:74:2c:79:
c5:30:47:a7:8a:dc:e2:4d:02:e8:21:9b:8b:a2:37:
b3:4a:4a:12:25:70:50:48:ba:40:29:da:f8:31:4c:
33:c6:7e:fe:f6:b6:34:92:95:c4:5f:8e:06:a1:f9:
cb:ea:0b:0e:f3:76:c5:8b:f9:7c:1b:a8:33:17:40:
1e:af:48:cf:1d:10:ff:86:38:b7:a8:e4:16:20:b6:
67:64:07:94:4a:09:e4:4c:09:63:12:53:51:94:0b:
13:3d:fe:20:13:1a:3f:3c:58:a1:3d:ce:ce:76:27:
1e:7a:c0:78:9d:62:aa:ec:fc:ae:14:57:80:7d:9a:
64:77:c7:82:1f:67:23:54:d6:56:29:fb:0d:39:61:
d0:4c:07:68:ce:55:8a:ae:0b:9b:2e:f7:14:95:67:
1a:df:6b:b1:5f:1d:72:98:bd:66:5e:e9:48:9c:88:
6a:fd:58:07:b2:1a:81:54:d2:df:47:d6:a2:f1:48:
9c:8f:e9:61:56:d1:e0:6f:cd:93:88:41:77:0f:26:
52:4a:47:1c:ed:f1:3b:da:80:c4:c5:6f:8c:ad:b6:
66:66:ab:02:f6:53:5d:c3:1b:0d:27:34:50:87:2a:
1b:80:c2:3f:52:e2:c7:5c:54:ca:6d:87:f4:51:5c:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:DE:D7:38:27:FB:93:25:94:82:7F:A6:E5:6E:24:F5:A6:76:36
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b6:e2:97:04:64:7c:c2:79:92:02:f1:f5:a2:61:0f:dd:dc:
21:dc:04:33:0f:7d:24:6d:c8:35:94:79:05:ee:ea:00:b0:12:
22:33:f1:a1:85:42:e0:e5:0c:ee:42:5f:5f:b9:04:89:94:3e:
c6:8a:d0:30:09:d6:24:9e:64:c6:c4:89:86:40:c3:34:e7:30:
af:55:dd:90:c0:a5:88:b0:c1:17:9b:b7:bc:23:66:7d:4c:cb:
1a:28:52:5d:92:4d:aa:2f:83:3a:41:27:a4:5b:39:6c:f6:15:
83:55:7b:3d:5b:27:3f:dc:cb:28:fe:2e:89:3f:9c:e3:42:ce:
8a:c3:37:16:37:6d:89:e7:23:ad:c0:06:94:53:7c:4d:14:eb:
62:3f:bb:56:c5:1e:45:06:76:29:2b:7d:c3:ad:57:36:bf:a7:
0c:96:dc:8e:85:29:ad:3f:00:24:7e:5e:b4:24:1c:e2:6d:a8:
00:d1:a4:b1:dc:44:db:7c:03:e7:01:98:01:1a:3e:44:8d:d0:
9d:6a:6c:3a:26:4b:e2:e4:6f:c5:1c:41:ad:3e:a2:ca:0d:91:
4c:12:48:1f:41:ad:da:9a:c7:c1:b7:c9:cd:7e:7c:8f:28:64:
86:3f:36:4e:0c:3e:f3:86:b1:bf:52:67:00:b5:d1:5c:9e:52:
9f:0b:7e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh7rnxAlGznDaKonvvh1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy
MjcxM2IwHhcNMjUxMTA1MDEwMDQwWhcNMjUxMTA2MDEwMDQwWjAzMTEwLwYDVQQD
EyhlYjM5ZGVkNzM4MjdmYjkzMjU5NDgyN2ZhNmU1NmUyNGY1YTY3NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo3aNegIIXKllFF0LHnFMEenitzi
TQLoIZuLojezSkoSJXBQSLpAKdr4MUwzxn7+9rY0kpXEX44GofnL6gsO83bFi/l8
G6gzF0Aer0jPHRD/hji3qOQWILZnZAeUSgnkTAljElNRlAsTPf4gExo/PFihPc7O
diceesB4nWKq7PyuFFeAfZpkd8eCH2cjVNZWKfsNOWHQTAdozlWKrgubLvcUlWca
32uxXx1ymL1mXulInIhq/VgHshqBVNLfR9ai8Uicj+lhVtHgb82TiEF3DyZSSkcc
7fE72oDExW+MrbZmZqsC9lNdwxsNJzRQhyobgMI/UuLHXFTKbYf0UVw8xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs53tc4J/uTJZSCf6blbiT1pnY2MB8GA1UdIwQY
MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt
ZTE4ZTdiMmFjNTM2LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2
LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7bilwRk
fMJ5kgLx9aJhD93cIdwEMw99JG3INZR5Be7qALASIjPxoYVC4OUM7kJfX7kEiZQ+
xorQMAnWJJ5kxsSJhkDDNOcwr1XdkMCliLDBF5u3vCNmfUzLGihSXZJNqi+DOkEn
pFs5bPYVg1V7PVsnP9zLKP4uiT+c40LOisM3FjdtiecjrcAGlFN8TRTrYj+7VsUe
RQZ2KSt9w61XNr+nDJbcjoUprT8AJH5etCQc4m2oANGksdxE23wD5wGYARo+RI3Q
nWpsOiZL4uRvxRxBrT6iyg2RTBJIH0Gt2prHwbfJzX58jyhkhj82Tgw+84axv1Jn
ALXRXJ5Snwt+uw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:16 2025 by rpki-client