Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: vZQ14DvSwdPptrXv68NkQS1g9SMSgrGwFXRA9VH6h28=
Subject key identifier: B5:9D:A9:C8:96:D3:D7:3F:14:B4:14:84:87:4A:86:C7:26:D0:F2:3A
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 01976D06DA19249EC0917AE7DBB2B58FA108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 0539
Signing time: Sat 14 Jun 2025 06:00:54 +0000
Manifest this update: Sat 14 Jun 2025 06:00:54 +0000
Manifest next update: Sun 15 Jun 2025 06:00:54 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: T6taVCMP48D50Jze/2KQ3RHux+g5OixjvXZ4evCl/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:da:19:24:9e:c0:91:7a:e7:db:b2:b5:8f:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Jun 14 06:00:54 2025 GMT
Not After : Jun 15 06:00:54 2025 GMT
Subject: CN=b59da9c896d3d73f14b41484874a86c726d0f23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:61:ad:3c:bc:27:ef:de:c7:b9:7f:85:3b:
60:9c:10:ed:2a:6d:35:af:2d:bf:7d:27:0e:13:93:
3d:8c:b8:17:3f:13:7f:e6:04:f0:23:ab:03:7d:1c:
3f:6a:3c:54:f0:e4:33:25:02:06:d5:aa:22:1a:f3:
f8:98:6b:28:fd:fe:a9:2d:86:c6:45:63:c6:28:79:
63:90:43:c2:e1:43:f9:7b:7e:6f:4e:e6:56:3f:0a:
2c:57:0e:a2:d3:6a:17:2f:f9:1b:60:c0:d0:72:55:
0a:25:6f:76:b7:51:d6:21:da:41:d3:3c:b1:23:a0:
57:ea:9f:f8:86:19:7a:ec:98:2a:02:07:90:ff:d9:
44:06:7c:f3:ce:c8:9e:fb:eb:be:56:3d:e0:6e:9d:
49:95:02:bb:df:71:ec:2b:63:3a:cf:76:eb:62:e1:
76:4b:ac:61:55:a6:c4:ca:d8:cf:57:7b:a9:a2:55:
ab:cb:0c:19:ac:bf:78:c7:06:f6:d6:7b:a3:02:d6:
29:5c:df:90:e9:3a:86:21:68:81:02:5e:69:bb:06:
d9:0d:3e:b9:cf:36:9e:da:9a:b7:a4:11:91:e8:dd:
66:58:ed:29:e6:d3:6a:d6:66:93:d7:c5:f7:14:e5:
32:04:58:39:78:d2:99:37:a4:49:7d:ba:de:63:85:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9D:A9:C8:96:D3:D7:3F:14:B4:14:84:87:4A:86:C7:26:D0:F2:3A
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:59:d6:37:be:e0:c9:df:07:55:9b:40:80:1b:2e:17:de:99:
79:ce:da:25:2f:bb:81:86:ed:6d:ec:b2:11:3a:cf:16:30:50:
c7:bd:06:6e:af:6c:26:f4:bd:a7:1e:2f:1f:5e:0e:2b:e9:be:
cb:12:d4:71:3d:00:3d:c3:b2:f1:67:db:fb:eb:d1:b6:30:c7:
bc:49:e5:22:24:f5:d0:63:73:a5:8d:33:ec:83:87:d4:b6:ee:
45:c5:4c:ec:b6:e0:53:8a:d6:b7:71:5f:1d:e4:df:e0:d8:b4:
9d:3a:46:58:78:ab:50:4e:e5:d9:47:e2:18:38:fc:8c:24:34:
f9:0d:a5:54:d8:fb:72:09:08:06:8f:ba:fd:f5:83:db:99:1a:
8c:4f:65:a8:39:f6:c3:28:8e:bc:c8:bb:7a:97:99:bd:91:ac:
c4:7d:69:41:6f:d7:df:35:95:39:46:a1:96:18:62:91:3a:0d:
3b:96:68:77:d2:0c:18:20:ed:12:df:e0:fa:7e:e3:5c:34:b1:
1c:17:b2:8f:17:c8:e2:ac:f2:7a:49:f2:2b:22:2e:83:58:42:
19:0c:29:94:ee:c2:4b:c4:13:34:76:a6:c9:a4:43:6d:dd:9a:
f5:4e:0f:d5:0f:67:e2:d8:76:a5:b5:6d:27:2d:6d:5e:53:6e:
99:cf:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:09 2025 by rpki-client