Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: DElTVOoinASyol6DseIKgf5a1SoZ5aGcRHUyNLzNcMo=
Subject key identifier: 62:18:15:E5:B9:AE:72:77:40:36:92:CB:F3:D3:57:83:80:DC:C2:AE
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 01988F59B4EFAE54953B700C6B5C6E215B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 15:01:17 +0000
Manifest this update: Sat 09 Aug 2025 15:01:17 +0000
Manifest next update: Sun 10 Aug 2025 15:01:17 +0000
Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=)
2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=)
3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=)
4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: MkPKdzdQHewqsCuaJzm1o2mAZ99GjQyHKnwZ+vxJI0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:b4:ef:ae:54:95:3b:70:0c:6b:5c:6e:21:5b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Aug 9 15:01:17 2025 GMT
Not After : Aug 10 15:01:17 2025 GMT
Subject: CN=621815e5b9ae7277403692cbf3d3578380dcc2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:76:68:4e:15:a7:a3:76:09:d8:d3:0d:17:
f6:b2:d8:d8:fc:db:08:65:3e:75:55:40:f6:15:b5:
a5:7b:44:77:31:33:b9:b2:6b:de:05:d3:f6:77:da:
93:e1:bd:b4:9a:e0:8e:6f:27:2d:48:1f:16:aa:d1:
26:ad:0b:02:1a:2c:12:c0:09:d8:8c:0e:b7:8b:6c:
1b:bf:8b:17:a4:88:40:d1:38:0e:b0:66:f9:e3:4e:
d0:7e:5a:b0:17:03:23:ce:64:8d:69:17:ec:f1:fd:
b6:fb:36:96:c8:ef:1e:82:2a:48:27:32:a3:71:03:
5b:c0:ed:f2:e3:36:35:e3:fe:b6:6e:f9:8e:53:bd:
ab:22:3b:e2:d1:ef:be:95:71:11:75:70:a7:58:7d:
5b:80:6b:8d:c0:9d:02:be:b7:94:04:fd:66:6e:57:
60:3e:14:18:77:23:09:1f:67:c5:c4:3a:e2:6c:80:
a1:b0:52:ec:a6:26:96:f1:25:14:57:8a:c9:60:79:
04:f8:55:9a:29:1e:33:7a:ba:a9:cf:13:b3:02:4d:
d8:66:9c:a3:fe:dc:28:87:7e:6a:be:23:1a:42:f7:
98:c1:16:6d:0f:5c:2e:b6:7c:a9:ad:02:e2:e4:a3:
a9:92:eb:0f:69:50:c5:7c:c9:8d:b9:ff:ff:17:9b:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:15:E5:B9:AE:72:77:40:36:92:CB:F3:D3:57:83:80:DC:C2:AE
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:75:b8:df:48:62:3f:77:73:0f:de:ab:21:e9:44:0c:24:
c6:43:44:b3:f0:b1:24:32:f2:29:cb:be:e4:01:3e:90:ba:92:
0c:67:dd:54:2f:a0:aa:fa:72:d8:9b:87:56:80:a9:63:c7:ad:
75:90:58:54:1d:ef:3f:49:23:74:c2:b2:12:3e:31:a5:89:19:
89:ac:6a:8e:e5:02:a7:5b:cd:b3:0e:d1:36:d2:62:2b:75:43:
a3:a4:9f:eb:72:e8:76:da:d8:f0:bd:b0:7b:e3:09:b9:ec:76:
9a:c4:6e:12:8a:b5:8c:31:bb:e8:4d:6a:10:13:e4:a7:52:22:
bc:65:43:25:87:d6:51:a3:57:48:e3:d9:9c:00:a0:b2:7b:a8:
cc:62:d3:c7:4b:91:5e:b1:79:c4:0b:ac:f9:f5:60:ad:63:00:
11:7b:52:04:1a:6e:96:ff:2d:1a:6f:f3:39:6b:28:33:12:af:
68:8b:0e:2d:1a:be:12:a1:90:0b:a0:ed:42:a8:df:a0:8a:f5:
5d:07:a2:8c:2b:d8:2d:97:48:e6:2f:c3:80:64:1a:b7:64:cf:
90:dd:03:0e:48:49:89:24:87:e2:b2:50:ee:bb:65:b3:6c:92:
07:30:5b:59:8d:fd:b0:7f:67:5e:3e:1a:20:e0:34:b8:1c:67:
ca:7e:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:07 2025 by rpki-client