Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: yzo4JGrdAFkr13K0CtTQrRqh6q0fkCCaZ6H0BXZpd4s=
Subject key identifier: D2:7B:73:EA:7F:1C:42:00:F5:49:D9:33:B2:81:21:E2:46:C3:1D:0D
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 01989147582B172E4B64C661597964C757FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 15B9
Signing time: Sun 10 Aug 2025 00:00:28 +0000
Manifest this update: Sun 10 Aug 2025 00:00:28 +0000
Manifest next update: Mon 11 Aug 2025 00:00:28 +0000
Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: 9cidgjWtwx4D36iyPAYKJV9c3si4LYrZ0k0/6uNJlLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:58:2b:17:2e:4b:64:c6:61:59:79:64:c7:57:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Aug 10 00:00:28 2025 GMT
Not After : Aug 11 00:00:28 2025 GMT
Subject: CN=d27b73ea7f1c4200f549d933b28121e246c31d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:13:d2:ce:6d:c4:19:b6:a1:7b:5c:6d:06:
8e:ad:7c:94:09:78:75:a5:2b:c3:98:4b:41:33:d5:
bf:7c:dd:be:18:74:a5:99:6c:95:cd:66:b1:3a:54:
5d:ec:50:15:5f:25:a8:41:1e:3d:6c:f6:c7:79:8a:
2b:ed:16:f8:fc:42:42:ea:82:7e:d8:0b:80:d6:e0:
90:a2:4e:7e:8e:56:0e:5c:10:45:f4:e8:46:94:33:
04:c3:09:19:e4:9c:72:5a:e4:f3:d9:76:ed:86:9b:
18:b7:b4:23:23:17:83:d9:c8:c4:95:15:70:a8:95:
8d:9f:05:1d:4b:e2:db:b2:43:55:dd:7f:0b:6e:13:
2d:f7:d1:4f:0e:d8:65:94:f7:68:e7:97:92:4a:10:
b2:31:af:c1:30:20:a6:76:35:01:f3:6d:e5:7a:26:
eb:e3:d7:bf:c9:6f:00:a4:72:c4:f8:58:ef:e3:a0:
fb:be:5c:58:12:86:95:8e:c2:0d:ec:a0:76:5a:93:
26:05:26:d7:e6:37:47:a8:7f:9b:6b:24:1f:b1:13:
32:fb:08:21:4c:bd:98:2f:86:fe:45:39:d7:f1:9d:
42:15:19:01:ba:96:84:86:1d:1c:c7:ad:f8:95:c9:
06:05:a9:73:27:64:00:b7:22:ff:b4:30:2c:28:74:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:73:EA:7F:1C:42:00:F5:49:D9:33:B2:81:21:E2:46:C3:1D:0D
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5a:13:75:05:56:3a:c6:4b:b4:b0:11:01:d4:14:81:1a:3b:
19:29:40:af:0b:49:8f:4c:ff:6b:7d:e2:c2:76:b1:c7:6b:0f:
c1:c9:5d:bf:80:fc:0b:1c:04:a1:30:36:42:db:ff:d1:91:12:
e3:3d:1d:95:4c:35:bc:83:20:a2:91:09:de:65:d3:85:12:31:
ac:cc:b1:9c:63:7a:3c:a2:7b:51:2d:e6:fd:00:d3:fe:88:ba:
ad:bd:e3:41:e9:4f:d3:d3:55:95:19:33:09:e2:bd:43:64:22:
fd:21:07:9b:9c:d4:9f:e2:ed:e3:ff:d4:a2:52:0f:e1:74:3c:
b2:c4:08:10:e2:0f:8c:aa:66:86:a1:a7:69:f6:af:ab:be:4c:
51:22:8c:14:07:7e:ad:48:1b:a4:59:c1:6e:5e:aa:b3:e4:78:
b7:db:02:e3:96:0b:1e:f6:6f:9e:a2:67:c1:6d:a0:48:fb:1c:
6e:08:66:1c:27:df:a5:c4:62:d5:22:83:21:09:0b:2e:d2:a2:
b1:a1:ca:67:d9:45:c7:da:2a:1c:ab:1e:55:c1:71:bb:3a:72:
0b:17:d8:93:90:09:49:42:9d:64:fb:c3:6f:35:e9:b0:76:1c:
a7:31:c6:83:ba:96:bb:9e:8a:ae:d8:38:8e:22:19:4b:31:40:
f4:5d:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:46 2025 by rpki-client