Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: pyz+eMPuwVe3mJdOl9bKV4Mr/CHB8JeagLR5BE412VE=
Subject key identifier: D2:5C:F5:11:0C:1F:77:20:FB:4B:37:BC:61:46:CE:14:11:4E:17:5B
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 01967BA0A026F5637E531216112047E5B2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 04BC
Signing time: Mon 28 Apr 2025 09:00:46 +0000
Manifest this update: Mon 28 Apr 2025 09:00:46 +0000
Manifest next update: Tue 29 Apr 2025 09:00:46 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: PG/zYgjCIKHOqeptfg2/iMsn57KJs0sx0uO+yBCxqJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:a0:26:f5:63:7e:53:12:16:11:20:47:e5:b2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Apr 28 09:00:46 2025 GMT
Not After : Apr 29 09:00:46 2025 GMT
Subject: CN=d25cf5110c1f7720fb4b37bc6146ce14114e175b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:db:39:ef:c0:e8:6c:41:05:fc:19:55:a5:
a8:be:41:51:18:5c:fd:31:bd:6e:0e:d2:1a:14:26:
da:7e:6a:70:b3:33:e9:0e:f6:3b:ef:dc:f1:13:93:
6d:2a:fb:50:ae:6a:3b:7c:58:a8:3f:0b:cd:d7:35:
5f:b6:d3:1e:54:87:0c:2c:fa:df:93:5f:c2:dd:bd:
2d:53:24:62:df:74:45:b4:d0:d1:45:c9:02:3b:4e:
12:76:9f:bc:f7:9a:72:80:7a:bf:3b:c7:3d:1f:43:
8f:87:d2:cb:9f:18:dd:37:cb:6a:92:2c:93:2d:21:
15:cb:05:ba:c4:83:64:0b:10:aa:d0:d7:5c:32:db:
d2:b1:7f:01:00:b6:ad:87:a0:ea:20:03:d8:39:cb:
37:bc:75:65:8f:a5:0d:53:fc:2b:71:c3:da:6f:62:
67:83:df:8f:4e:54:1f:81:a1:30:aa:51:9e:3f:81:
c6:94:2b:9c:9c:09:e9:ec:e6:ef:e7:c8:b4:1e:8c:
97:4a:c0:0a:85:79:2d:83:d4:91:2b:30:eb:4f:ac:
dc:8d:91:6c:b0:c6:8c:14:d5:81:be:64:81:b5:28:
cd:15:a6:cf:c9:7b:53:32:5c:db:02:75:d4:c8:1a:
47:e6:88:33:60:c3:38:3e:5c:dc:0f:0e:c1:45:26:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:F5:11:0C:1F:77:20:FB:4B:37:BC:61:46:CE:14:11:4E:17:5B
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:0f:d9:4d:47:ca:59:ea:e6:7d:62:5a:75:2c:c8:3e:06:1f:
b6:11:7f:db:d5:16:e4:fb:f5:86:9e:e9:bf:ad:48:be:64:52:
83:bc:cb:0a:cf:a1:74:56:db:c1:53:77:4a:38:8b:40:b7:03:
24:cb:db:3a:ea:ac:68:28:30:72:07:b1:96:60:75:d3:76:aa:
a1:64:9d:2a:4b:26:01:c6:51:c5:ad:87:df:d6:3b:37:32:bb:
26:00:43:03:06:cb:ac:7d:95:45:88:d1:65:77:d4:79:9b:a7:
25:02:45:0e:dc:13:e3:cf:86:9e:5a:60:30:d3:53:84:d2:7b:
b5:73:ff:2a:9e:59:58:9e:58:4d:c2:16:0d:84:1a:ca:7a:e1:
c0:d4:76:c8:99:67:90:a0:47:d8:d7:18:e7:83:4d:21:c8:11:
33:61:12:91:6e:72:91:0e:5d:d0:9b:b0:35:59:05:6a:c9:ca:
67:24:7c:6f:4d:23:28:2d:eb:16:d6:3c:03:bc:8d:08:a3:db:
94:80:bf:1c:3d:59:be:85:0d:66:05:60:60:a2:e2:35:69:ca:
43:13:c9:ef:a6:2f:ee:de:bf:f4:50:e7:56:1d:23:0c:b6:c6:
83:da:91:e3:5f:29:54:ec:1f:78:d7:dd:64:f2:80:6e:be:0d:
6b:34:c2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oKAm9WN+UxIWESBH5bK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDI5YWRhYzQ0MGMwNjM3MzIwNDVkYWViY2MzZDkxNTJl
MzVjYmIwHhcNMjUwNDI4MDkwMDQ2WhcNMjUwNDI5MDkwMDQ2WjAzMTEwLwYDVQQD
EyhkMjVjZjUxMTBjMWY3NzIwZmI0YjM3YmM2MTQ2Y2UxNDExNGUxNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxbbOe/A6GxBBfwZVaWovkFRGFz9
Mb1uDtIaFCbafmpwszPpDvY779zxE5NtKvtQrmo7fFioPwvN1zVfttMeVIcMLPrf
k1/C3b0tUyRi33RFtNDRRckCO04Sdp+895pygHq/O8c9H0OPh9LLnxjdN8tqkiyT
LSEVywW6xINkCxCq0NdcMtvSsX8BALath6DqIAPYOcs3vHVlj6UNU/wrccPab2Jn
g9+PTlQfgaEwqlGeP4HGlCucnAnp7Obv58i0HoyXSsAKhXktg9SRKzDrT6zcjZFs
sMaMFNWBvmSBtSjNFabPyXtTMlzbAnXUyBpH5ogzYMM4PlzcDw7BRSbtOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJc9REMH3cg+0s3vGFGzhQRThdbMB8GA1UdIwQY
MBaAFElCmtrEQMBjcyBF2uvMPZFS41y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMt
ZWE5NDVkNjA0YjBlLzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMtZWE5NDVkNjA0YjBl
LzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1A/ZTUfK
WermfWJadSzIPgYfthF/29UW5Pv1hp7pv61IvmRSg7zLCs+hdFbbwVN3SjiLQLcD
JMvbOuqsaCgwcgexlmB103aqoWSdKksmAcZRxa2H39Y7NzK7JgBDAwbLrH2VRYjR
ZXfUeZunJQJFDtwT48+GnlpgMNNThNJ7tXP/Kp5ZWJ5YTcIWDYQaynrhwNR2yJln
kKBH2NcY54NNIcgRM2ESkW5ykQ5d0JuwNVkFasnKZyR8b00jKC3rFtY8A7yNCKPb
lIC/HD1ZvoUNZgVgYKLiNWnKQxPJ76Yv7t6/9FDnVh0jDLbGg9qR418pVOwfeNfd
ZPKAbr4NazTCUA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:31:25 2025 by rpki-client