
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
File: Suvuj-dUnRqa5Vnl2ggWQunqwng.mft (raw, json)
Hash identifier: YlS7ngRLWCYgjUeesy/IQbHUfrglf4MVOkhQinrPr5g=
Subject key identifier: 49:87:BC:FC:19:6D:14:80:99:5A:18:92:AE:B7:E7:47:16:F6:FE:4F
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial: 01987BD2A4B48B12E3E8D9DA4322225E5EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 20:00:58 +0000
Manifest this update: Tue 05 Aug 2025 20:00:58 +0000
Manifest next update: Wed 06 Aug 2025 20:00:58 +0000
Files and hashes: 1: Ju4TE0Do45F3_xd1BsQ_7bnzoxo.roa (hash: 9jLkighzDSTRcfJGZNkRcSTPX467dcg1LQMrucLnEF8=)
2: KKZ3H1Ig1Ai_kXp1maqntJqKS9E.roa (hash: VljnOwALwBLtSWbQ+Tok7KNQehan+9sMOUJ88vhoF9I=)
3: Suvuj-dUnRqa5Vnl2ggWQunqwng.crl (hash: dOJap9K+O6Jp82cJg9Tttn5Ky+p+ORWwuAEhPtX0MU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:a4:b4:8b:12:e3:e8:d9:da:43:22:22:5e:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Validity
Not Before: Aug 5 20:00:58 2025 GMT
Not After : Aug 6 20:00:58 2025 GMT
Subject: CN=4987bcfc196d1480995a1892aeb7e74716f6fe4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:a3:da:5b:c3:8a:a9:b2:74:c5:2e:f2:7f:
40:9a:4f:57:9f:ba:23:37:22:83:ff:7c:fa:14:54:
30:65:ca:0a:9e:cd:4c:42:a0:a4:bd:2b:83:e3:b9:
b8:9a:e2:9a:e4:ed:59:6a:87:4d:87:f3:41:84:5a:
88:a5:59:6b:9b:8a:47:6d:71:a4:50:a1:91:83:32:
bd:b8:f6:f9:c5:04:15:4d:b3:18:45:4a:4c:da:b5:
c9:f0:13:b2:1c:16:dd:6d:d8:05:36:30:f3:2e:b5:
c0:6b:1c:10:25:a3:4b:ca:c0:50:7a:b9:66:6c:a3:
f0:2b:04:61:05:9d:8a:63:09:69:0f:49:56:f0:3e:
1e:7e:35:48:82:94:b4:50:fc:53:95:18:81:60:09:
55:c3:74:0e:b1:9c:f6:4c:68:6c:47:17:73:e9:08:
7b:a2:30:54:fc:07:c3:22:65:64:82:da:e9:05:bc:
69:87:d6:2a:e6:10:49:2d:a0:1b:3a:21:44:41:8f:
fc:fd:06:d0:08:9b:29:9b:01:e3:b8:75:f2:68:1a:
19:e2:81:f3:c8:1a:ec:ce:fb:60:b0:67:2a:cb:26:
ed:e5:62:87:ef:84:dd:70:fb:45:f7:82:7c:46:53:
52:f2:f5:05:40:74:e4:bb:f8:47:b0:3c:b6:55:28:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:BC:FC:19:6D:14:80:99:5A:18:92:AE:B7:E7:47:16:F6:FE:4F
X509v3 Authority Key Identifier:
keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b3:83:49:6b:ba:73:e4:0e:79:ea:1d:f9:04:40:41:97:dc:
dc:5a:e8:91:b3:4a:c0:a7:0d:5a:aa:da:18:e5:83:1b:14:4a:
8f:c9:2b:a6:15:fd:11:82:05:d7:2d:1f:6b:21:32:b1:98:23:
72:de:5f:6b:5c:19:6c:c8:a0:7a:d8:f7:c7:c3:b6:81:42:b6:
7a:4d:dd:65:7b:da:3c:89:d8:c6:af:f6:46:1c:05:f6:de:a7:
91:31:05:84:92:2b:ec:87:76:ce:1b:c7:8e:5b:8c:a5:eb:8d:
68:fe:b5:04:0a:b4:86:11:a6:65:19:b7:38:68:e1:16:bc:f8:
c8:a9:37:df:12:83:f1:02:6d:53:13:78:87:73:83:f7:70:87:
fb:23:96:bf:8e:20:29:cf:aa:1c:a3:2f:6a:ab:2c:86:11:f3:
36:31:0f:55:91:b1:17:ef:d7:a1:c7:56:2f:8c:7f:bc:68:89:
a5:60:85:e8:f8:f2:d3:39:f8:fb:19:e0:f5:66:15:b4:8e:cc:
9f:c9:da:96:f8:14:fd:fd:58:2f:01:e7:28:6c:e1:df:ef:1a:
ec:f4:ab:a4:37:78:57:80:96:49:39:cb:3d:5e:d0:4e:31:c4:
55:7b:4d:96:f3:d4:0e:15:0a:3d:a1:ed:1f:8e:c6:02:f3:c1:
3d:30:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:23 2025 by rpki-client