Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: A/oWguIZMBW9gL7sRBhMEzzCMKZvS2tq6Msf9Kxp90M=
Subject key identifier: 6B:1A:CE:F8:E3:4B:95:E1:21:39:99:58:CB:23:F4:08:E0:8C:F5:76
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 019A4F622EB012B70C30AF7B3B2C63BA8959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0B11
Signing time: Tue 04 Nov 2025 15:00:25 +0000
Manifest this update: Tue 04 Nov 2025 15:00:25 +0000
Manifest next update: Wed 05 Nov 2025 15:00:25 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: qUY5S5QYUlvzc9H8xMm/KzAOEtQFgGgbqBS5U1MSbt4=)
2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2e:b0:12:b7:0c:30:af:7b:3b:2c:63:ba:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Nov 4 15:00:25 2025 GMT
Not After : Nov 5 15:00:25 2025 GMT
Subject: CN=6b1acef8e34b95e121399958cb23f408e08cf576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bb:54:fe:44:ec:5f:79:2d:f0:84:c8:6d:25:
28:3f:d7:3a:7b:1a:de:30:2c:7a:d3:75:57:5e:98:
cd:9d:a0:ff:2d:be:9a:a4:b2:d5:1f:96:f5:5a:de:
b7:d0:f1:84:04:3e:99:9b:dc:40:4f:40:e5:2d:fc:
ad:e8:48:e0:91:e9:9c:a1:7b:e2:32:fc:84:1f:43:
b3:1c:f9:00:5f:c2:ea:72:6b:fb:9f:4f:09:e2:28:
a9:a2:01:d0:3f:c5:9b:82:79:2e:d5:d2:40:c5:e1:
9f:be:88:08:58:ba:25:b2:c2:cd:30:55:f4:1a:7d:
1f:73:32:34:f0:5f:56:ea:c7:17:6e:c0:3b:e4:ae:
c8:18:19:0d:fc:a1:42:85:0f:b7:86:94:56:97:f2:
f0:17:2e:9b:a9:90:32:4e:15:f1:6d:80:50:ab:68:
0a:f7:cf:5c:ae:10:fe:43:09:40:cc:31:73:94:2c:
ce:cb:52:fe:6d:80:63:dd:2a:06:b8:ce:53:e3:aa:
db:58:a3:e4:31:c4:6d:43:15:5a:69:b0:66:2b:12:
1d:5b:14:da:19:7c:43:18:c6:65:0d:a1:49:54:85:
9b:95:6e:95:06:87:ae:71:25:25:04:ff:54:30:e7:
47:6d:d1:cc:5e:bc:11:17:22:d8:0e:01:22:05:3a:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1A:CE:F8:E3:4B:95:E1:21:39:99:58:CB:23:F4:08:E0:8C:F5:76
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:90:08:84:36:b4:47:d3:73:a7:21:1b:77:11:89:d3:16:88:
47:93:14:12:ca:61:aa:7b:19:18:04:d3:c9:3b:be:10:a5:56:
4f:a1:71:ae:d0:34:85:c0:96:14:b6:1c:30:3f:a2:12:95:d2:
26:c9:7e:d1:2e:5f:37:5c:90:fa:7a:c7:ef:ca:2e:3a:76:ba:
c0:9c:80:ba:f9:a9:7e:fc:1a:af:e5:70:d6:e5:7b:73:bf:e4:
90:44:09:57:32:f2:5c:82:38:01:4a:76:52:80:62:54:80:b3:
e2:c5:8e:75:6f:0a:79:2e:4c:b2:46:ed:42:61:ed:5a:8d:c2:
2f:d7:39:e3:16:4d:13:e4:4e:f1:a3:86:29:95:23:a2:fb:38:
01:06:20:5f:7b:5d:56:15:26:8b:e0:4c:7a:dc:27:9f:87:81:
62:bd:2a:8b:f5:29:8a:d0:da:8a:94:7f:4c:45:69:25:ce:44:
a2:bb:3c:21:98:39:7a:df:10:4a:bc:b3:b5:4f:3d:b4:67:66:
fb:25:06:ba:11:57:36:92:61:0c:8c:d5:d8:19:8a:1b:a9:de:
5c:de:7b:39:b3:d6:72:27:2e:33:a3:45:06:01:70:2c:99:c2:
b5:24:dc:2d:1c:89:aa:22:40:59:e7:1e:49:05:d4:2e:d7:cc:
d9:fd:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:40 2025 by rpki-client