Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: IFSIWyCrCWu66xRVXU8IB1glkcJbAgOYz2lt/p5FbZY=
Subject key identifier: AA:DD:52:56:56:06:36:F8:1B:1D:AF:97:D7:20:BE:5E:55:E0:69:2D
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019A5119CE11CC45E250C36DD7746CFEDC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 23:00:36 +0000
Manifest this update: Tue 04 Nov 2025 23:00:36 +0000
Manifest next update: Wed 05 Nov 2025 23:00:36 +0000
Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: 7jcllP7dB6x3208TCGPZUKuzPi2efIL1LrCjbs45Wu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ce:11:cc:45:e2:50:c3:6d:d7:74:6c:fe:dc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Nov 4 23:00:36 2025 GMT
Not After : Nov 5 23:00:36 2025 GMT
Subject: CN=aadd5256560636f81b1daf97d720be5e55e0692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:f9:48:d6:4b:c0:04:56:fc:1f:3b:5e:8d:
40:45:35:b7:e8:a3:8a:87:a1:8f:01:23:3e:5a:c0:
05:47:8e:97:fe:36:eb:97:9c:d6:bb:a6:b2:fc:ee:
fd:98:9b:47:c5:a1:d7:a9:be:0b:53:8c:44:9e:ce:
84:bd:e3:6b:07:0a:9d:85:b8:93:94:97:2c:df:34:
ce:69:35:a9:8f:21:47:a4:5a:e0:25:a4:5f:e5:9c:
61:57:a0:0d:de:0d:7a:9d:07:9c:f8:56:3c:44:51:
86:2d:e6:2d:4a:37:98:00:92:b8:b9:85:eb:47:9b:
25:3d:7e:c7:ee:f3:b0:90:21:8f:10:7a:4c:d2:7d:
b9:bf:06:83:07:16:60:b2:fc:77:00:ce:81:25:21:
6b:f6:1d:23:31:ef:3e:8b:ca:63:12:8e:c7:12:7e:
aa:67:49:87:e2:d8:64:84:46:0a:48:06:64:c9:82:
20:32:a6:b6:51:ae:c7:07:6b:00:bd:df:62:68:b0:
46:73:2c:ab:ac:f0:6c:59:bc:ac:b7:79:b0:db:91:
ab:69:c1:2c:35:60:00:6f:2e:72:27:57:67:6d:b4:
10:8b:db:30:b2:15:e2:5e:86:a5:07:7b:26:ff:78:
ec:3b:fd:97:43:20:8e:9d:df:64:10:76:1b:48:15:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:52:56:56:06:36:F8:1B:1D:AF:97:D7:20:BE:5E:55:E0:69:2D
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cb:7a:ed:98:90:9d:07:d1:dd:dc:44:10:9c:a4:a4:48:c2:
b6:e6:44:49:09:86:5e:5b:53:d2:b8:b8:4b:ac:63:91:ea:65:
00:78:76:de:8a:55:0e:66:45:94:d5:c5:f1:35:ed:2b:b5:4b:
3c:e7:ab:9b:4a:cb:8f:e2:d4:3f:27:d6:d3:f4:a6:8d:3d:0c:
57:a9:db:d9:8e:fc:eb:49:da:f8:d3:6b:c5:a2:79:d8:00:ef:
b7:e3:1c:12:e9:87:58:ae:fa:75:6b:64:0c:9d:3b:3b:82:0c:
33:96:9b:ac:07:32:ed:6e:6d:f1:b4:fd:ed:c4:7d:95:af:64:
25:bb:65:d2:20:5e:90:ae:35:c1:6b:23:36:36:d1:8c:2d:39:
68:25:b4:d3:b7:c6:9c:ab:08:00:d0:06:74:ce:c2:30:08:76:
10:98:36:82:c4:07:6d:3e:61:f8:ca:e2:df:8a:36:94:6b:6a:
4d:28:4a:79:54:ce:77:a7:fb:d9:3b:43:bf:48:b4:ce:7a:e2:
61:4b:8e:87:92:18:0b:b7:d6:95:8a:21:8c:e7:10:1a:5e:35:
33:e2:cb:60:9b:d6:d8:1e:45:d1:cf:fa:58:4c:39:ab:6b:28:
7a:57:dd:df:ed:6c:85:23:44:82:1d:3b:56:2a:8c:9f:36:91:
ae:bb:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:27 2025 by rpki-client