Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: lDPNZ4WZfWZSPecMqwrbnrdh5lcRmlQQFGS8wRVqZ4k=
Subject key identifier: A6:DC:DB:47:B7:B6:D2:E6:73:9E:03:26:23:30:98:8B:A8:4B:CF:31
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 01977ED5E9AFCFEE39B653151E3D8EA9F75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 17:00:37 +0000
Manifest this update: Tue 17 Jun 2025 17:00:37 +0000
Manifest next update: Wed 18 Jun 2025 17:00:37 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: 6q/juXCCJV/Ky0i4zSTTBwtUFkMpZjLPfDH45DFmptI=)
2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:e9:af:cf:ee:39:b6:53:15:1e:3d:8e:a9:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Jun 17 17:00:37 2025 GMT
Not After : Jun 18 17:00:37 2025 GMT
Subject: CN=a6dcdb47b7b6d2e6739e03262330988ba84bcf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:f4:1a:05:c9:64:e6:aa:49:b8:6f:44:c7:
02:16:bc:e3:4c:99:f6:60:ca:78:dd:65:69:b4:4b:
99:ac:1b:c6:8d:7a:ae:9d:fc:97:3c:dc:cb:7f:60:
7c:d9:41:04:8b:0a:0a:e0:0c:c6:12:ab:45:8b:0e:
da:3d:9d:41:6a:c3:6f:f2:1d:28:35:eb:fa:eb:9b:
b1:28:7f:60:aa:e8:16:9e:be:77:ea:15:87:35:2e:
cc:3e:75:32:c9:99:20:51:ff:64:40:48:63:5d:e2:
be:de:b0:b3:62:e6:d4:27:cc:9e:fa:cf:98:dd:80:
23:bf:81:5b:4b:c3:f8:42:71:8a:c9:df:b9:79:12:
37:37:13:d7:b8:7c:a9:c9:db:0c:d6:9c:ff:49:91:
f8:3f:74:79:72:70:8e:33:1c:e8:b9:16:1e:5a:97:
9d:c9:ef:f6:5d:e9:34:4c:12:91:c9:2a:b6:69:bc:
73:dd:48:1f:57:6f:e1:06:ea:d0:77:27:3b:e3:a7:
c1:ba:8c:6d:76:13:ef:f7:ef:7b:3f:2d:17:57:0a:
93:9b:2f:a0:eb:e2:1b:ea:88:96:38:bb:19:69:50:
f5:c9:c4:e7:eb:2f:6d:39:65:92:4a:f4:26:84:a1:
30:74:7c:94:7c:0b:dd:51:e5:30:1c:36:71:b7:31:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DC:DB:47:B7:B6:D2:E6:73:9E:03:26:23:30:98:8B:A8:4B:CF:31
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f8:70:42:17:b6:84:ff:7d:7b:92:30:ef:65:58:e3:ef:32:
ab:29:e9:b3:c0:96:82:01:6b:ce:41:a9:d3:12:91:66:4f:15:
94:74:3a:33:87:f4:5b:5b:7b:a7:6f:cf:df:d6:5d:a5:14:a5:
26:7a:1e:30:26:36:6f:24:7d:b5:3d:02:32:55:ff:65:49:a0:
94:c1:ff:d0:61:96:87:91:26:2a:2c:ef:df:8e:43:cc:84:4f:
2b:8d:8e:d3:ab:47:c4:14:88:25:a9:2d:cf:6d:c0:4c:f2:4f:
64:28:f0:24:43:a6:0c:51:48:ff:1d:04:15:b4:2d:5d:55:0c:
fd:2a:4d:ff:fb:a7:4a:f6:f6:a7:32:e5:6b:38:75:f1:81:74:
ab:16:84:21:8f:d5:cf:a4:db:0a:48:1b:63:66:38:d7:73:97:
a9:fa:4b:da:2b:21:1c:e6:67:67:73:a1:7e:79:4d:17:ee:b1:
78:50:03:b4:7f:b9:6a:cb:38:91:a7:95:4d:d8:e8:96:92:1e:
52:e3:98:30:ec:94:82:5a:4e:e6:2b:36:eb:64:b2:f0:e0:40:
a9:48:f9:b2:64:4a:7c:9a:05:52:7c:d0:82:e4:67:73:24:d4:
f3:7e:a6:2a:07:1a:89:5e:37:b8:9b:5b:4b:7b:fa:b8:e1:49:
11:70:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:13:57 2025 by rpki-client