
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
File: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft (raw, json)
Hash identifier: bXVDnyZkTyGJUvueEHlQLUWeKY7gKoLp/4krJiE4U/c=
Subject key identifier: 1A:0D:B2:A2:C8:1A:79:31:E2:EF:10:31:52:02:1C:95:52:54:21:EB
Authority key identifier: 4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
Certificate issuer: /CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Certificate serial: 0198816880915EF295CED98B7A4C46EE7856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 22:02:46 +0000
Manifest this update: Wed 06 Aug 2025 22:02:46 +0000
Manifest next update: Thu 07 Aug 2025 22:02:46 +0000
Files and hashes: 1: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl (hash: ahrqZBHYdQrQp31b3I8NV3wo+a5GRMTGpIaJqUkfhqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:80:91:5e:f2:95:ce:d9:8b:7a:4c:46:ee:78:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Validity
Not Before: Aug 6 22:02:46 2025 GMT
Not After : Aug 7 22:02:46 2025 GMT
Subject: CN=1a0db2a2c81a7931e2ef103152021c95525421eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:12:56:dc:94:7d:26:3a:46:0c:30:48:8b:
b6:33:e1:10:a4:5c:1a:2e:79:12:c2:17:32:54:5a:
07:ac:6e:a4:69:b1:f7:ce:52:d2:d2:67:88:18:d8:
af:45:7e:24:0f:82:f6:92:93:f7:50:aa:dc:46:ef:
20:b7:6b:95:8d:be:8e:c3:f1:f7:7c:58:85:bf:50:
6a:67:0d:c0:03:55:01:42:76:db:0a:6e:d3:06:8f:
fd:b8:6b:a1:54:4e:8d:45:70:f8:0c:fb:38:75:5f:
64:35:88:88:af:f3:09:68:6b:25:49:11:0a:99:d2:
a6:7a:48:c1:39:a8:de:17:17:b5:d4:0a:8e:f0:4f:
37:d6:1b:c0:1b:b2:9f:b1:14:41:51:b7:b4:3c:28:
f0:0c:ba:38:12:99:3b:3d:5c:28:f9:dd:fd:45:01:
0f:c0:83:bb:00:96:d8:82:ae:c7:c6:ae:a6:ba:61:
e0:42:24:14:77:0b:eb:4c:48:4e:0b:fb:79:76:b2:
dc:c0:51:84:21:56:f9:4f:e6:5c:53:c8:3e:88:74:
c7:73:a9:5e:0f:77:02:46:b4:97:ab:63:0c:d8:1c:
47:23:b7:9a:bb:8c:47:9d:e9:22:29:eb:7e:a7:04:
33:09:66:da:9c:84:bc:15:1a:01:9d:47:3d:9e:f3:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:B2:A2:C8:1A:79:31:E2:EF:10:31:52:02:1C:95:52:54:21:EB
X509v3 Authority Key Identifier:
keyid:4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:2c:ac:3c:2f:ca:91:1c:ef:4c:d2:04:67:d8:a0:e8:f9:
a8:27:14:04:be:fe:33:64:0a:1f:92:34:05:b1:d4:6f:75:11:
f0:96:17:ae:aa:9c:69:1d:e5:7a:65:21:be:9f:de:54:12:8b:
7b:90:f1:a2:2d:40:e7:d2:6b:8c:d7:5a:1f:5c:fd:0b:ed:d3:
e5:df:ed:71:ab:bd:3f:5f:a7:ef:a1:91:f8:aa:fa:74:84:94:
91:84:f7:12:4b:28:e1:7b:f7:d4:b2:e5:bf:31:b8:63:c9:1d:
a6:a2:ec:f0:bb:0a:82:11:0a:79:83:4f:18:bf:2b:a3:5b:f0:
e8:19:81:c9:e4:f6:c0:b2:f6:99:94:22:68:ba:93:7a:65:9e:
ed:ca:eb:76:ec:46:e8:37:26:ce:e7:9a:3b:9b:79:9b:25:2e:
59:78:b0:9c:4d:f0:f9:f5:74:60:85:5d:de:83:fc:46:8b:50:
e6:04:58:c8:15:4b:24:5f:64:f0:ee:88:a2:03:0d:f8:5a:a0:
55:2d:77:1d:55:a2:0c:23:8b:d2:98:e1:ea:76:e3:b5:e3:cd:
f2:e8:eb:94:f4:ef:69:7e:45:9d:2a:f7:50:b8:a1:66:21:75:
66:31:39:df:1e:5e:50:06:00:9c:f3:ee:77:0e:42:aa:e6:5a:
22:32:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:15 2025 by rpki-client