
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File: SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier: AW1fqWMBzygzhCQQR9pjNPkZLLxKlEXkYYWZYC3JTEs=
Subject key identifier: 01:38:1F:8B:E4:B9:FC:D6:BD:30:AC:41:99:53:F1:CA:BE:67:DC:68
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer: /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial: 01987E6660E1F50CEBA6D7DF7E9ADC0FB31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 08:01:35 +0000
Manifest this update: Wed 06 Aug 2025 08:01:35 +0000
Manifest next update: Thu 07 Aug 2025 08:01:35 +0000
Files and hashes: 1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: W9aQrhO4EAxC1qXEPZIjjNFDdVUTq/9HVlrFUMuF4pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:60:e1:f5:0c:eb:a6:d7:df:7e:9a:dc:0f:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Validity
Not Before: Aug 6 08:01:35 2025 GMT
Not After : Aug 7 08:01:35 2025 GMT
Subject: CN=01381f8be4b9fcd6bd30ac419953f1cabe67dc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:43:db:22:94:32:d9:81:49:cb:37:be:61:
1f:b6:40:25:2a:9f:e9:e5:3d:95:57:92:4e:02:b7:
59:48:7a:2f:96:e6:af:ef:7b:f5:37:f4:d6:b0:59:
25:b1:2d:d2:1b:5d:59:12:eb:8c:6b:7e:31:88:6a:
6c:66:dd:4f:16:5a:08:38:98:6a:25:22:02:8f:da:
bf:e8:2a:55:79:68:9d:a2:bb:05:24:80:0c:19:a0:
17:1e:ff:73:89:e8:a8:de:b0:a8:29:5f:70:db:8d:
b3:fc:4a:50:e3:4a:22:af:fb:ac:0c:60:ba:06:5c:
aa:c2:ea:b8:4c:bd:d3:19:01:4c:ec:a3:c7:be:6d:
ec:69:db:8c:11:6a:8a:30:df:16:29:e3:aa:e1:8a:
71:e6:98:95:fb:50:26:95:8a:13:22:e7:14:96:47:
d2:28:34:a5:d8:9f:c9:16:87:fb:8b:d4:43:3b:33:
7c:0e:fd:12:f5:4a:5a:5d:13:12:9f:4d:68:52:71:
c4:1b:8b:5d:f7:ca:22:ef:47:8b:8e:e6:e5:17:03:
ac:18:91:ce:e4:2f:ab:71:5d:00:7b:ec:47:4c:89:
69:ed:78:b2:d1:9e:14:12:d8:19:62:37:e7:c0:99:
48:f4:40:c9:9d:c4:ab:8d:4b:bd:0a:3d:b7:84:5c:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:38:1F:8B:E4:B9:FC:D6:BD:30:AC:41:99:53:F1:CA:BE:67:DC:68
X509v3 Authority Key Identifier:
keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ab:77:5d:f8:37:6c:f0:61:77:eb:6d:5e:45:6d:b2:3f:47:
2b:78:ec:21:5e:d1:41:b9:94:4d:5f:e5:2d:ba:48:9f:a8:9f:
58:5a:f1:0e:06:98:ff:e9:f2:1f:ec:82:0e:6d:2d:1a:9b:39:
c5:19:c0:50:72:7f:8e:f9:8f:95:ef:c0:b9:f6:99:3e:ce:3f:
3b:e0:ac:7a:10:fe:e7:9a:3e:74:96:ce:6b:e5:78:c4:5c:a3:
78:c7:32:1b:74:3b:61:ed:2d:2e:9f:12:07:d2:cc:5f:7e:f2:
a9:8b:e7:0d:06:3f:65:9d:af:27:21:fb:8d:f4:71:1b:cc:5b:
4a:9c:38:ea:1e:48:0f:11:9a:90:9f:42:70:3e:ea:30:07:cf:
c0:89:c7:2c:96:13:83:61:65:42:8b:ed:e7:a5:72:d6:b3:32:
eb:e0:de:4f:9b:b9:b2:20:a4:07:a8:10:2b:84:ea:04:ba:5e:
2c:62:1d:97:93:70:39:3a:ca:ef:0f:e7:38:87:44:86:db:3a:
53:e9:37:62:ab:25:c3:f0:51:01:17:f2:20:1c:ea:10:7e:d9:
d5:a4:9f:cd:59:91:c1:ca:dd:13:0d:88:ee:3a:11:e9:05:94:
45:fb:6b:a2:da:43:ed:10:5c:57:c4:91:8a:84:0e:bb:6d:fd:
f0:cb:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:34 2025 by rpki-client