Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: +Lv54o0aZO0Cbug/5YUhekQZib48ayCkD+SJLfwlFbM=
Subject key identifier: D5:C2:C2:DB:20:BA:7C:F9:CD:D1:15:3A:7C:9E:25:DF:00:23:BD:44
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 0198745001EFAF63AD56A7728866DEE54C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:00:56 +0000
Manifest this update: Mon 04 Aug 2025 09:00:56 +0000
Manifest next update: Tue 05 Aug 2025 09:00:56 +0000
Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: bNOTnjE6r26hJz27TU7eueC8htfSOJQYwy29COHz3iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:01:ef:af:63:ad:56:a7:72:88:66:de:e5:4c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Aug 4 09:00:56 2025 GMT
Not After : Aug 5 09:00:56 2025 GMT
Subject: CN=d5c2c2db20ba7cf9cdd1153a7c9e25df0023bd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:a9:49:80:02:72:37:f3:b3:96:a9:9a:77:
d6:f2:25:04:9a:3b:46:bb:2c:e7:c3:de:24:c1:9c:
a2:f5:36:f9:e6:99:1f:17:36:0c:57:8f:fa:78:12:
7a:6d:41:97:be:30:3a:8e:7e:af:ac:a8:74:66:87:
e1:e6:d0:9b:7b:24:fe:b6:37:0e:a2:27:2f:c0:b9:
e7:99:07:26:60:7b:2c:84:d6:29:57:79:b0:68:00:
a4:ad:63:e0:d2:80:7b:0a:bf:e7:b4:c1:7f:62:2f:
1b:a8:af:b9:c5:dc:e4:a0:4c:db:74:19:10:f8:53:
f1:62:cd:7f:e6:da:06:59:78:24:5f:39:e3:cc:ef:
db:0e:e3:58:f2:f6:9b:d3:f4:d0:0d:cb:f3:cd:69:
eb:19:cb:de:82:a7:23:53:0b:c1:09:da:81:dd:1c:
35:5b:89:ab:5f:cb:36:2e:34:26:5a:4d:ac:d2:0f:
5a:f1:2a:26:75:fa:4b:c5:2a:f7:9d:c7:2c:ba:8a:
4a:09:55:5c:3e:86:88:6c:59:1a:a0:81:a4:b9:90:
57:b2:f3:56:76:c3:08:14:64:3a:88:f9:8f:39:9c:
14:50:1b:0e:f1:1b:ed:91:cf:be:99:ff:2b:f0:32:
8e:8e:0c:4a:39:bc:c4:61:1a:a5:a9:82:b9:21:7a:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:C2:DB:20:BA:7C:F9:CD:D1:15:3A:7C:9E:25:DF:00:23:BD:44
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:df:8c:17:b0:57:1d:9a:be:e0:9e:16:4c:f6:fe:4b:2a:
f5:43:9a:3a:d4:3a:b8:33:bc:77:83:8c:8f:7b:77:1b:b0:93:
dc:b2:2a:ea:d0:be:fb:8a:ea:3f:71:4f:90:20:d5:35:0f:1a:
1a:c8:da:9a:07:bb:4e:4b:0a:8f:7b:a9:ce:7f:70:5d:d4:52:
6e:61:32:74:8a:67:dc:af:7b:2d:1b:b0:76:0d:6c:d0:dd:9a:
5c:58:a6:de:69:7d:c2:e5:2d:66:fd:d8:34:89:cd:31:1d:3a:
40:76:93:54:56:20:e2:78:a6:f9:05:25:77:a9:5c:57:bd:89:
07:30:2c:15:1b:23:83:3a:46:8b:5e:b4:2f:f3:8f:02:68:00:
43:8f:21:4e:4f:42:fd:88:0a:1f:e1:99:b4:2a:40:97:e7:34:
23:57:82:53:ea:02:bd:7b:62:37:07:0d:ab:88:dc:12:24:42:
82:4b:66:8c:6c:5a:b7:3a:5a:35:45:08:49:4b:25:25:f2:ba:
7c:5a:da:a9:4f:ca:35:6f:83:31:9f:93:18:13:df:57:f2:fa:
3f:7a:7c:4a:6e:c3:4b:af:d2:c1:8f:aa:f0:0d:e9:0a:db:31:
58:a9:7f:d1:14:1d:72:60:70:5b:af:81:a6:4d:62:8e:f2:16:
da:e7:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:31 2025 by rpki-client