Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: QJXgH7MDuPnNaXuHBJbGDKlguw1IldND5kA/tdVTKVA=
Subject key identifier: B4:4B:12:22:32:10:60:5F:3E:93:44:52:C9:10:81:82:9D:D0:33:7C
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 019A4D741B014CF848CE4DBE87997CFBB57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:45 +0000
Manifest this update: Tue 04 Nov 2025 06:00:45 +0000
Manifest next update: Wed 05 Nov 2025 06:00:45 +0000
Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: pjqxHF2bGie37VKYBv1/5KEE+mpuSuHFMWEO+qyVzRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1b:01:4c:f8:48:ce:4d:be:87:99:7c:fb:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Nov 4 06:00:45 2025 GMT
Not After : Nov 5 06:00:45 2025 GMT
Subject: CN=b44b12223210605f3e934452c91081829dd0337c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:c5:be:42:e9:ba:f4:83:09:5c:77:a1:39:
ee:58:03:8b:a1:0f:bb:14:9e:1e:8b:57:de:b9:25:
4a:82:c5:71:fc:98:c3:62:cc:9a:78:a1:f6:c9:37:
04:dc:ad:24:97:80:fa:e8:5d:f7:e2:0a:e0:ff:15:
7c:6a:88:96:fb:74:48:7c:e8:55:7a:36:a4:2b:41:
bd:03:22:ca:cf:e2:58:0e:be:91:bc:46:09:17:c7:
cd:77:05:ae:13:43:dc:9d:58:ec:a9:78:95:59:4b:
04:41:26:0e:54:d3:77:71:dd:4c:d3:3a:dc:97:79:
16:a5:0a:aa:6c:4e:ea:44:81:1c:52:7c:5c:17:3f:
c3:a0:ff:5a:a9:e2:6b:47:1e:1c:6e:af:42:d7:c8:
3e:d2:f0:6c:cf:57:a1:0b:a4:73:fc:6c:6d:8b:b4:
dc:16:3f:60:2e:ae:07:13:6b:d5:39:a3:c7:c4:e8:
dd:87:ef:a1:e6:01:80:23:40:0d:7d:8d:fc:2d:f0:
5d:ac:71:0f:13:92:9f:7f:a8:9b:8a:b4:6a:52:ff:
4b:48:c7:92:e0:6c:0f:35:2a:84:4d:c6:73:18:57:
f4:83:98:a7:e4:64:49:c2:8b:07:8c:af:72:1f:aa:
93:92:cf:95:47:9a:2e:ce:1e:75:cd:94:0d:c3:6e:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:12:22:32:10:60:5F:3E:93:44:52:C9:10:81:82:9D:D0:33:7C
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6e:37:cc:39:49:c3:5b:ed:39:ac:9d:7a:8d:12:27:ec:b8:
d7:9c:85:72:7e:6b:f7:14:60:07:d2:95:07:e1:af:17:a6:d2:
59:0e:a7:71:c4:e3:15:f2:2c:9f:59:81:a0:9d:fb:d9:38:8d:
a5:fb:cc:d4:3d:8a:e9:63:85:6c:c5:b5:6a:55:bc:c7:b6:e5:
f4:59:c9:63:60:f9:27:80:22:87:43:0d:5f:bf:ef:fb:82:98:
93:c2:54:19:82:59:e3:b6:41:6b:e4:b4:46:4a:f6:3c:a6:cd:
18:03:a5:3c:d8:ae:4d:3e:5c:50:32:06:b1:8c:dd:92:c7:df:
e4:90:da:9c:c3:5a:69:db:9b:80:d3:36:32:b0:f9:02:cf:f7:
a9:b3:b6:f1:d9:17:88:86:0e:72:b6:eb:7c:12:47:91:95:89:
11:1d:0b:f7:28:ba:57:5a:55:ed:01:ea:d7:56:e6:67:f9:bf:
95:d8:08:84:50:49:2c:d5:de:c7:aa:b7:24:81:bc:50:b1:56:
f0:2a:82:35:82:b0:20:97:4f:23:c2:f1:d9:bf:15:8f:d2:30:
11:8c:3c:16:8a:a6:47:8b:88:de:49:2a:0e:e1:ed:36:ac:44:
fa:80:fc:3d:15:10:29:22:bd:1e:9d:20:8c:c8:6a:01:0a:fa:
82:7f:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:36 2025 by rpki-client