Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: EDAGt89ZTBzPyPPHt3IsG6YfCBySqehPqmt0ALdndyI=
Subject key identifier: A5:5E:2C:23:97:3F:8E:06:53:AB:F1:36:B3:29:30:48:A4:17:41:8C
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 01988B7D74D3059F9BC13AEA42F208286229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0A27
Signing time: Fri 08 Aug 2025 21:01:51 +0000
Manifest this update: Fri 08 Aug 2025 21:01:51 +0000
Manifest next update: Sat 09 Aug 2025 21:01:51 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: Flq9eaTH1kM5/6aqMboer22Axe75A2WDqWEe0L2o2CQ=)
2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:74:d3:05:9f:9b:c1:3a:ea:42:f2:08:28:62:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Aug 8 21:01:51 2025 GMT
Not After : Aug 9 21:01:51 2025 GMT
Subject: CN=a55e2c23973f8e0653abf136b3293048a417418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:49:2c:a6:6f:bc:93:f9:75:b6:47:03:11:
30:e8:26:09:17:fd:2a:5a:3d:c2:45:bf:0e:30:0b:
e6:33:48:03:b3:0b:07:b8:c1:19:97:9c:86:74:f0:
5b:11:f2:f9:1b:7c:e0:b1:d8:10:c3:64:a6:dd:b1:
31:12:34:92:15:83:8c:d4:09:75:71:91:1d:f7:80:
50:af:ca:d6:2a:9c:fa:f5:cc:c4:69:bb:3f:35:1e:
24:76:b6:7b:eb:d2:c3:a5:46:86:ef:28:cb:d0:7b:
27:0c:25:b1:f0:3f:8d:bf:df:c5:f8:bc:b9:77:b6:
d3:8c:06:0a:5e:53:a3:cb:de:d0:32:fe:64:24:cb:
c0:66:b8:1e:a6:f9:c9:de:5f:d8:cb:a2:5e:8a:1f:
3e:58:d1:04:51:4f:4d:02:90:81:9b:d9:e1:d7:e9:
75:4b:67:cd:3f:cd:1a:9e:99:4f:1b:64:c1:5c:39:
90:09:f7:f5:aa:be:c4:c9:04:19:9e:a8:29:a2:c2:
47:d5:be:c4:62:f9:91:e3:60:bd:99:0f:3e:f5:d9:
5a:7f:e4:0c:a9:44:29:a7:a4:92:2b:e5:fe:dc:89:
13:7e:f6:db:d0:ef:10:75:4e:36:19:63:94:1c:30:
72:14:1d:28:4d:d3:d0:3e:f1:36:37:93:6c:e0:c5:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:2C:23:97:3F:8E:06:53:AB:F1:36:B3:29:30:48:A4:17:41:8C
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:0a:35:86:05:ac:85:2a:7e:29:8a:67:59:55:8d:5d:47:
a1:84:03:17:b9:e6:06:fa:91:d1:67:61:d5:07:1e:8d:d7:29:
66:ae:e9:01:c7:bb:9f:5b:21:1d:96:b9:f0:3c:fc:5e:75:68:
57:79:de:a0:40:6c:25:a5:bd:5b:31:e8:a0:b9:cd:55:89:eb:
37:71:33:20:7a:87:1d:2b:c3:74:3b:a9:ba:69:62:29:37:1b:
cb:00:17:fb:ac:ba:db:d0:84:03:37:9f:33:db:fa:47:c0:97:
c4:89:f0:b2:0e:82:8f:e0:9b:45:76:b6:3c:62:65:e0:29:8d:
26:41:9a:47:d0:c8:58:48:12:44:19:a4:39:fb:5c:75:7d:c5:
1a:8e:06:6b:0b:8a:d3:5e:4d:25:7c:e4:ef:f6:18:fc:67:a3:
07:ce:a1:11:33:96:e4:e8:5f:27:00:ba:85:39:b3:97:ba:af:
36:d5:40:ce:0e:cb:20:7c:fe:b6:80:7f:fd:9d:53:a0:0e:b2:
8f:f1:fa:90:43:ee:33:a4:67:76:2e:d5:b2:8d:83:96:78:2f:
9c:92:eb:f3:a5:a8:ae:31:c7:da:a4:6c:0d:df:f3:c4:56:2a:
26:88:36:ce:10:ed:b1:aa:58:e6:f2:89:94:8f:11:ac:15:dc:
5b:43:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:10 2025 by rpki-client