Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
File: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft (raw, json)
Hash identifier: EEFDZR4ZwOc52HFgMeo4AHdRJYL0bY4ecuuz3Ndb+/M=
Subject key identifier: 40:C4:24:25:D6:3C:5A:CC:43:87:93:2A:34:90:1E:0F:C8:A9:12:46
Authority key identifier: 4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
Certificate issuer: /CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Certificate serial: 01976F2BC7D09D69BE7274CF509EF8572CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:00:29 +0000
Manifest this update: Sat 14 Jun 2025 16:00:29 +0000
Manifest next update: Sun 15 Jun 2025 16:00:29 +0000
Files and hashes: 1: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl (hash: NcdzA0LTrI9OxNq4j33BYQjCOTCPud5zTTwrvg6ye44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:c7:d0:9d:69:be:72:74:cf:50:9e:f8:57:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Validity
Not Before: Jun 14 16:00:29 2025 GMT
Not After : Jun 15 16:00:29 2025 GMT
Subject: CN=40c42425d63c5acc4387932a34901e0fc8a91246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:03:c9:87:5b:a3:54:72:be:4e:b9:07:f1:
a0:36:94:96:28:e8:0f:5b:27:02:32:b8:5a:14:d8:
a4:b9:a1:0e:c4:b3:b3:51:d8:df:49:9b:78:02:05:
f4:45:61:04:54:14:58:fc:a0:62:77:6f:b0:ce:81:
71:ac:46:f7:b8:65:9d:02:f1:21:4f:df:be:8c:eb:
fe:fe:2a:53:fc:14:d1:60:ec:52:4a:6c:4a:56:03:
20:8b:b9:c2:b8:f7:23:2a:89:6c:4e:10:53:e8:ed:
f6:6c:c0:0a:d0:00:6c:28:b5:90:5b:30:e2:42:8a:
8f:83:aa:fe:f0:60:24:a6:9d:e7:99:0f:24:19:2d:
e0:b7:b6:74:14:e6:9a:8b:ee:f0:7a:71:f0:ea:cd:
95:e4:04:fd:47:c5:9f:ec:80:80:04:48:8e:30:6d:
55:cf:0c:01:c0:12:e4:fb:78:de:97:32:fc:23:cb:
94:68:07:17:2b:df:54:a8:ea:1b:3d:46:31:8b:03:
36:23:17:5c:aa:7d:d5:e6:fc:54:fa:13:e0:f5:76:
ef:ce:d8:fd:1f:af:90:bd:52:82:5d:d1:ec:f7:68:
00:e0:39:ce:26:fd:8d:f7:fb:fc:84:55:da:5d:6a:
74:03:fb:b4:ab:f7:bc:db:06:97:c0:8b:c1:6b:af:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:24:25:D6:3C:5A:CC:43:87:93:2A:34:90:1E:0F:C8:A9:12:46
X509v3 Authority Key Identifier:
keyid:4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e3:8e:b9:ea:6a:97:0b:fe:73:3b:5e:7f:21:ec:ca:4a:df:
60:a1:97:76:f2:cb:37:63:53:b3:51:fd:09:2e:b7:31:5e:47:
7e:43:12:32:c7:4d:c6:97:01:e5:69:f7:69:51:43:19:73:e2:
13:ce:89:91:b5:3a:81:4e:b3:d2:22:6e:13:18:d3:c5:78:c2:
79:22:0a:d5:1f:a1:1f:c3:e5:81:b2:a9:fd:97:fb:59:23:e1:
4c:2b:1e:43:d3:be:1c:fa:f4:f1:ef:b0:5f:be:c8:81:0d:fb:
75:09:a5:24:dc:11:8a:a2:b5:1d:86:42:d2:76:84:8c:31:e5:
08:9a:53:dc:9f:49:e0:f9:e5:28:b0:e9:89:08:26:98:6d:04:
cc:7e:d6:e6:67:ae:7c:ce:b7:3e:4e:65:e5:86:48:db:c4:08:
52:dd:82:a1:ec:b3:e6:86:f1:a1:47:44:70:3f:4e:bd:25:18:
b1:e2:56:9a:8c:7b:cd:eb:43:19:99:1f:e6:cc:cb:93:83:07:
56:16:bc:e2:ba:31:db:db:e4:b9:d8:ac:23:78:c3:22:d1:10:
60:32:7f:95:3a:87:57:2c:78:fd:04:3a:50:9e:7d:5f:7e:12:
69:ab:8d:24:69:55:4d:5d:56:88:b9:18:de:c6:b6:41:93:9a:
17:d5:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:29 2025 by rpki-client