Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: C7EOEtsmemByMAB6wx5dUrU7vYVWW2kTyqP1sHc+h4M=
Subject key identifier: CE:97:23:BD:F2:CF:C9:35:1C:72:87:8A:71:AB:FB:91:88:38:57:F3
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 0198941183BE1BD9D0677C00575959D4276E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 13:00:32 +0000
Manifest this update: Sun 10 Aug 2025 13:00:32 +0000
Manifest next update: Mon 11 Aug 2025 13:00:32 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: 6SZESFW5N8vSom+jhv5wfgU3r3e8V/h1V7gwjpIR5/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:83:be:1b:d9:d0:67:7c:00:57:59:59:d4:27:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Aug 10 13:00:32 2025 GMT
Not After : Aug 11 13:00:32 2025 GMT
Subject: CN=ce9723bdf2cfc9351c72878a71abfb91883857f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:09:f4:29:b8:c5:4a:1f:65:fb:33:f1:f6:
58:65:ba:2a:2d:a5:79:0e:4f:b5:de:28:01:9f:4c:
54:9a:9c:74:a0:ba:55:38:0b:2f:e9:b9:ab:0c:5a:
e2:80:ce:0a:f4:05:74:3f:fe:20:ef:86:56:34:ab:
7a:8e:9a:07:ae:16:45:89:e5:5c:57:3d:9a:50:8f:
31:73:1a:75:93:37:de:05:06:13:df:f5:3f:68:e6:
e7:09:7d:6a:5d:43:87:53:4f:3d:54:39:6f:04:6b:
a5:df:eb:29:7b:b4:0a:e9:3b:36:d8:b7:94:f3:18:
c6:b0:5a:b5:eb:c2:8b:03:d9:96:ad:b4:8d:e3:87:
65:1c:d0:32:b8:57:cf:66:94:47:fd:f5:a5:05:38:
da:d2:51:59:a9:a5:0b:94:a4:c4:de:59:4c:f9:23:
fb:89:fe:b7:95:f1:85:61:18:86:18:68:65:ad:02:
6d:a4:96:43:d2:f7:f3:32:e1:a4:db:4b:82:34:95:
0e:3a:36:b9:10:14:cb:13:83:b0:74:0c:83:d0:ac:
67:3f:88:9b:78:a2:89:85:01:72:db:57:62:60:31:
7b:30:f9:08:5e:c9:db:12:88:40:ad:20:a4:78:50:
ee:7e:16:e3:3c:7a:13:81:38:af:d8:ea:9c:30:15:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:23:BD:F2:CF:C9:35:1C:72:87:8A:71:AB:FB:91:88:38:57:F3
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:61:89:c9:df:cb:c3:03:d6:07:f2:f7:49:6e:d6:36:d0:
1c:d5:66:7e:64:f3:fd:dd:75:91:2f:b1:e2:5c:43:90:7d:46:
f0:d8:9c:25:4f:b3:de:3a:94:89:00:58:d6:09:84:21:e1:42:
ce:e1:45:03:a1:28:ad:cb:db:ea:7d:d4:26:85:36:05:b5:58:
86:f9:60:36:e0:3e:13:8f:0d:42:80:1c:4e:05:79:47:5c:d0:
97:36:b3:15:4d:f8:66:01:cb:06:78:35:78:e9:bd:b0:10:56:
53:e5:aa:71:c1:a7:11:41:31:bb:0e:65:e6:b0:33:ba:d2:92:
16:b0:9d:20:d8:5b:09:4e:8c:9b:86:6d:fd:cc:d5:4f:65:44:
d1:e7:08:0b:91:6c:41:d0:02:c6:02:15:52:be:a6:0b:e5:46:
73:f9:0b:c8:da:bb:07:ba:04:fb:31:92:5b:3b:99:a7:2e:b0:
4f:c6:1b:21:e9:8b:2b:65:4a:53:b5:e1:bb:af:b9:fc:98:9b:
f1:4c:9b:72:6d:cf:9e:82:50:34:5d:77:d3:35:53:db:5c:61:
ae:db:98:2d:d7:e0:28:51:a6:ab:e6:16:68:65:0a:f8:1d:8f:
7a:81:f9:32:eb:7d:a1:6d:e9:65:2b:c0:f6:f2:56:f1:ba:2a:
93:25:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:40 2025 by rpki-client