Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: 0EmhNQDpM5CmxZ4bM7emEVDd7iyeVtbRZbwL4l1wtmA=
Subject key identifier: 3C:0E:04:AA:20:39:7D:82:B0:E7:1B:20:89:68:16:A8:E0:0E:0A:9D
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 01988B460FD6F6CB78BD45822AC76949D768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 20:01:21 +0000
Manifest this update: Fri 08 Aug 2025 20:01:21 +0000
Manifest next update: Sat 09 Aug 2025 20:01:21 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: i9BINnbkPqQvr7SrVon5JM+YAFNdo9z+B7BwS7x5Afs=)
2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:46:0f:d6:f6:cb:78:bd:45:82:2a:c7:69:49:d7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Aug 8 20:01:21 2025 GMT
Not After : Aug 9 20:01:21 2025 GMT
Subject: CN=3c0e04aa20397d82b0e71b20896816a8e00e0a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:ea:6e:05:13:99:43:52:3a:bc:1b:72:69:
4e:91:b0:a0:70:8d:17:9b:09:11:6f:99:28:35:56:
8d:76:78:3d:26:1d:ef:c1:5a:97:6d:2c:49:09:ad:
96:6a:ae:47:d7:e4:76:93:52:9d:d5:4d:68:d8:fb:
7a:47:0c:e3:77:87:03:55:87:da:d7:ec:54:46:9a:
03:39:6d:79:7d:9c:ed:07:cb:07:33:b0:db:bd:54:
9c:32:36:0f:d5:61:1a:ab:a0:15:cc:55:69:47:2c:
4f:5f:b5:40:a4:e7:14:c4:88:db:89:a8:25:2c:f0:
3f:ec:2e:61:c0:94:9e:a8:7f:2c:0f:02:f7:48:9f:
86:d8:b8:3b:fd:28:f8:6c:c1:b0:2c:6a:53:a8:19:
0a:d9:ba:67:71:ae:80:7c:74:45:ec:e7:2b:53:15:
c5:5b:be:76:5b:1a:b3:6c:6a:23:bc:55:92:95:92:
55:e3:da:01:22:2a:28:ca:5b:d6:0b:c2:0c:e6:c8:
f0:02:63:c9:c3:8d:c5:dd:f7:00:3a:ad:8f:2a:3e:
4d:bb:ab:9a:8c:da:cd:1a:f7:85:42:75:45:44:f5:
10:60:39:7f:58:e4:ef:67:8f:43:11:46:37:8c:a1:
a9:c2:dd:d8:ff:f0:70:aa:9e:df:33:aa:6c:a4:55:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:04:AA:20:39:7D:82:B0:E7:1B:20:89:68:16:A8:E0:0E:0A:9D
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:df:ff:20:b1:60:35:9c:c2:bb:1e:88:42:08:99:3a:0b:7f:
c7:63:a2:69:3a:db:5b:d2:de:1b:92:58:a4:f7:27:ca:27:ac:
20:d7:6e:2f:e4:93:92:94:ad:d4:16:a3:7f:38:63:1d:6f:d5:
01:9b:8a:58:8f:1b:b6:95:84:6f:3e:37:4a:a8:13:39:86:3e:
46:52:0f:61:6f:00:5c:96:27:bf:ab:39:48:ad:87:6c:15:77:
6c:bb:52:7a:0c:f1:d8:92:f5:85:1d:74:af:5b:8e:41:44:ee:
03:97:af:16:8d:fd:a5:10:83:46:dc:f4:dc:fa:35:f0:74:72:
8c:b0:ea:7b:cf:f4:46:a6:8e:41:44:b8:8e:32:8b:8d:69:50:
90:54:e4:11:38:85:40:a3:08:16:08:0f:1c:84:47:b7:a2:87:
30:ed:85:dd:13:a9:37:02:f4:b1:20:ac:56:fd:52:ac:33:d2:
40:54:11:22:4c:8e:06:c0:77:51:b7:e2:93:45:da:88:78:46:
99:47:59:07:9e:b0:54:8a:7d:dd:0c:5a:af:f5:50:08:6d:90:
4d:d6:84:49:46:cb:93:a7:d6:14:89:e6:ed:28:55:a4:35:a7:
96:e1:05:d1:03:94:fd:73:ea:a0:3a:a1:3b:10:c0:46:b8:02:
1b:99:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:00 2025 by rpki-client