Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: HZPpwNWR3EWPbDsdyZ5tBcUuTiJkUJ+u2AcjTpfc5yQ=
Subject key identifier: CB:CE:2B:56:A0:3A:CB:5F:81:1D:9B:6E:B8:2C:8F:66:FF:82:2C:97
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 019A52D251F97F82D9A0862FB55A6D528CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 10C2
Signing time: Wed 05 Nov 2025 07:01:46 +0000
Manifest this update: Wed 05 Nov 2025 07:01:46 +0000
Manifest next update: Thu 06 Nov 2025 07:01:46 +0000
Files and hashes: 1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: 7ZfUH974UcwedHDzlDGsr/R/1H9WCGpOK1TVVuUskI0=)
2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=)
3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:51:f9:7f:82:d9:a0:86:2f:b5:5a:6d:52:8c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Nov 5 07:01:46 2025 GMT
Not After : Nov 6 07:01:46 2025 GMT
Subject: CN=cbce2b56a03acb5f811d9b6eb82c8f66ff822c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:ac:aa:e2:37:d2:95:67:db:6f:b9:16:9d:
21:4e:44:b1:06:ac:04:2c:71:de:52:c6:74:e5:3f:
72:36:b8:e1:99:15:34:96:b6:87:72:41:21:c5:43:
3d:80:8a:f6:a9:3e:81:aa:b6:40:e5:f3:83:10:c2:
28:a7:e7:b2:4b:9d:05:ff:3a:df:e1:5f:36:a9:ae:
1e:01:33:0d:80:78:ba:f5:e4:79:8e:92:07:95:f8:
fd:7b:7a:1e:d5:58:f3:6f:5c:6a:bc:ca:4d:ac:3d:
05:3f:44:12:a0:8d:2d:96:00:cf:13:f3:fa:99:62:
4f:a8:fb:d2:5c:d9:c3:40:b4:01:8b:15:af:62:97:
c3:42:99:62:94:20:78:46:fe:ca:cb:bd:d6:d0:a9:
81:8f:19:95:08:83:25:45:c0:28:e0:0b:6d:c8:bb:
c3:b2:c3:57:cd:2c:ca:8a:98:0a:dd:09:b7:a5:b8:
32:75:23:09:b2:1e:45:de:7e:b5:63:39:ee:05:c2:
0e:86:e6:c4:02:21:b5:71:a3:52:01:e6:cd:48:ea:
59:20:ad:a9:d6:47:7b:49:8f:5c:d2:57:fa:ce:cc:
1c:9a:cc:65:e1:0d:f7:84:1d:64:75:dd:f4:be:f1:
79:1b:7c:f5:c6:d8:84:fb:07:ca:23:10:68:a2:5b:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:2B:56:A0:3A:CB:5F:81:1D:9B:6E:B8:2C:8F:66:FF:82:2C:97
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bb:84:35:28:6a:5b:e4:86:cc:ba:4b:dd:b4:dc:85:e9:08:
af:d9:2d:bd:53:d4:14:e7:82:87:b7:60:e1:c1:49:8e:74:ed:
0f:4a:c9:f5:47:72:ba:b9:08:2c:00:94:25:58:15:1e:0b:2b:
10:8b:46:74:f5:c4:6d:d3:1e:bd:08:41:a8:87:f8:a9:43:81:
71:ad:b4:ec:90:6d:76:e5:81:26:5d:19:c5:bb:cb:a7:58:9b:
7b:77:67:4c:7a:6b:94:a2:40:b9:b3:2b:c8:a1:5d:f2:51:25:
49:81:77:fc:1e:04:d6:9d:fe:7d:c9:03:61:d1:6f:87:2f:fd:
16:60:fa:de:85:95:60:7b:57:32:43:b8:cf:f7:10:95:9f:9c:
0c:5a:e3:78:dd:64:e6:90:c5:12:b8:87:35:2a:09:5b:b5:45:
e6:6d:6f:c5:6b:9c:31:8d:82:64:26:2d:9c:08:31:a3:79:a5:
1a:9a:b0:bc:cf:c3:2f:cb:22:23:eb:28:8a:b8:9e:f8:61:09:
bd:bd:4f:f6:08:9b:6e:67:36:f6:07:d1:36:bd:77:9c:da:eb:
54:90:6a:4d:06:b2:03:eb:43:de:f9:ca:3e:1c:22:d0:98:ee:
b8:1c:0d:d3:5e:38:68:50:bb:42:04:7a:8b:d8:ab:e7:91:bd:
a8:db:fc:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0lH5f4LZoIYvtVptUoz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDBjZjc3OGRkOTgxNzY1N2NkOGQ0ZmVlZGQ0MjNkNDZk
MWE5NjUwHhcNMjUxMTA1MDcwMTQ2WhcNMjUxMTA2MDcwMTQ2WjAzMTEwLwYDVQQD
EyhjYmNlMmI1NmEwM2FjYjVmODExZDliNmViODJjOGY2NmZmODIyYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA102squI30pVn22+5Fp0hTkSxBqwE
LHHeUsZ05T9yNrjhmRU0lraHckEhxUM9gIr2qT6BqrZA5fODEMIop+eyS50F/zrf
4V82qa4eATMNgHi69eR5jpIHlfj9e3oe1Vjzb1xqvMpNrD0FP0QSoI0tlgDPE/P6
mWJPqPvSXNnDQLQBixWvYpfDQplilCB4Rv7Ky73W0KmBjxmVCIMlRcAo4AttyLvD
ssNXzSzKipgK3Qm3pbgydSMJsh5F3n61YznuBcIOhubEAiG1caNSAebNSOpZIK2p
1kd7SY9c0lf6zswcmsxl4Q33hB1kdd30vvF5G3z1xtiE+wfKIxBoolurWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvOK1agOstfgR2bbrgsj2b/giyXMB8GA1UdIwQY
MBaAFElAz3eN2YF2V82NT+7dQj1G0allMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAt
MDAzOTRiNjEwYTM0LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAtMDAzOTRiNjEwYTM0
LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbuENShq
W+SGzLpL3bTchekIr9ktvVPUFOeCh7dg4cFJjnTtD0rJ9UdyurkILACUJVgVHgsr
EItGdPXEbdMevQhBqIf4qUOBca207JBtduWBJl0ZxbvLp1ibe3dnTHprlKJAubMr
yKFd8lElSYF3/B4E1p3+fckDYdFvhy/9FmD63oWVYHtXMkO4z/cQlZ+cDFrjeN1k
5pDFEriHNSoJW7VF5m1vxWucMY2CZCYtnAgxo3mlGpqwvM/DL8siI+soirie+GEJ
vb1P9gibbmc29gfRNr13nNrrVJBqTQayA+tD3vnKPhwi0JjuuBwN0144aFC7QgR6
i9ir55G9qNv8hQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:35 2025 by rpki-client