Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: nvhUANlnQu/J9mQA7qKZ+EQGwBoYffRsZ6Q4F4ojhfY=
Subject key identifier: 01:4D:1B:DC:16:F5:CD:31:53:0C:35:D1:C9:FA:01:76:FE:7F:5D:CF
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 0197778A4BE5D9FFAEF1185584AC6E62E259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 12A5
Signing time: Mon 16 Jun 2025 07:00:41 +0000
Manifest this update: Mon 16 Jun 2025 07:00:41 +0000
Manifest next update: Tue 17 Jun 2025 07:00:41 +0000
Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=)
2: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: A2a2HVgbcweRhl9dQf8I84ULnmSSOwi1xdecuKcpXpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:4b:e5:d9:ff:ae:f1:18:55:84:ac:6e:62:e2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Jun 16 07:00:41 2025 GMT
Not After : Jun 17 07:00:41 2025 GMT
Subject: CN=014d1bdc16f5cd31530c35d1c9fa0176fe7f5dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:54:17:ea:26:93:ff:67:ca:c5:5a:b6:30:
7a:3b:fc:65:59:ce:c0:d4:4a:5b:1d:3d:7d:b9:39:
9f:2b:4a:e8:7e:f8:89:2d:2f:fd:a5:5c:aa:c5:90:
c5:8a:c3:a2:44:d2:6f:61:da:69:5a:73:a2:ef:f9:
60:b3:7f:1b:82:16:91:31:48:86:6b:3d:e8:29:9f:
93:36:ca:b3:94:ee:34:85:bb:0e:fa:f4:a9:60:26:
b4:29:68:94:65:f0:fe:52:50:d7:01:bf:42:7e:38:
4a:b4:b3:08:04:51:fc:5b:c7:82:1b:70:f7:77:20:
65:01:79:fa:7a:27:12:a6:49:6d:7f:c7:71:4c:1e:
ae:e6:c1:d1:49:0f:ed:10:e7:fb:a3:da:55:7f:3b:
e5:b5:ef:3f:f5:b0:39:d7:70:39:fb:17:f6:4f:20:
1e:9a:63:92:5e:13:a9:e0:32:55:fb:48:01:e5:52:
93:79:97:a1:e0:cf:70:fd:40:cf:aa:c0:51:68:72:
0b:0f:fb:b9:4c:57:a3:85:1f:ad:59:82:8b:ef:27:
b7:f1:e0:61:79:9b:e4:e3:00:87:b4:2d:63:27:11:
06:8a:2f:43:12:49:fe:d5:db:45:57:f2:8b:b1:ae:
67:99:98:a1:35:6c:e1:f6:8b:a0:b3:4d:05:13:b8:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:1B:DC:16:F5:CD:31:53:0C:35:D1:C9:FA:01:76:FE:7F:5D:CF
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b3:2a:fa:94:d8:36:07:35:12:05:ed:d2:5f:cc:26:3b:64:
20:75:03:f1:f1:fc:36:ec:d8:e9:fa:8a:e8:06:72:bc:55:87:
ab:47:82:6c:21:91:48:cc:21:7b:0f:a0:b5:7a:12:7c:6f:67:
67:6e:ac:62:c5:1b:45:d7:5f:5c:e6:e0:7c:79:92:3b:8e:31:
1a:1e:fb:bf:36:c5:1d:5d:60:1c:5d:69:d9:6e:82:53:5f:09:
19:c6:7a:51:a5:81:f2:30:fa:d8:c9:1c:f6:74:e2:be:07:da:
5e:74:1a:c4:a2:e7:ed:ba:29:fc:b6:3e:79:b7:9a:d5:8c:66:
e6:84:20:18:ef:f4:f3:fb:f9:60:fe:68:32:e0:8d:65:dc:e0:
88:f8:68:fd:f6:82:01:86:ad:e4:37:80:23:fa:36:83:ee:a5:
42:d8:07:dd:d6:f4:be:88:a8:9a:6f:87:c2:eb:de:d8:d2:16:
5b:73:f9:16:1d:5c:8d:63:f2:29:ff:7c:30:c6:18:c3:60:f7:
5c:80:ca:b4:26:40:cd:c8:42:38:eb:8f:41:d3:a6:a3:03:ce:
ea:54:5e:3f:75:a1:2d:9a:ac:3a:0b:d6:91:4d:a8:e8:f2:0b:
8b:63:c4:90:dd:31:31:69:9a:cd:0c:59:0f:17:6d:9e:2b:b5:
9b:2d:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:43:43 2025 by rpki-client