Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: p7Kemvol8x6VNORILBKvsT7wsNrqUE4zCsl/kjH1wsg=
Subject key identifier: 24:45:77:54:A7:72:C9:62:EC:82:E2:C9:F5:DB:23:32:F5:8B:51:11
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 0197B74582388C86A51878DA8A2D5E604C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 12C6
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=)
2: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: dOEHRrV8UMYK14qBoV09gBLUXU6yjBKCtYURtFE+ax8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:82:38:8c:86:a5:18:78:da:8a:2d:5e:60:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=24457754a772c962ec82e2c9f5db2332f58b5111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:e7:f8:05:08:ff:19:17:4b:c1:33:fd:83:
3a:d5:00:26:ae:12:da:9f:75:8a:e8:8c:93:2d:e4:
6e:8b:29:bf:72:e1:b0:2b:7f:24:ab:a9:5a:6d:4a:
26:0f:db:44:dc:5a:51:f3:b1:3a:26:44:33:f6:c0:
9d:17:ad:d5:c5:17:c8:fe:62:a7:aa:d4:7c:e9:52:
f5:ad:0a:26:19:e2:37:33:68:8d:ad:26:b6:e4:a5:
7a:46:21:18:61:d3:dc:5c:ac:b0:0d:07:fa:9f:d8:
6f:65:0f:53:6f:9c:9e:06:5e:6d:9a:bb:88:6b:d2:
84:19:f2:5d:9a:d2:ae:a8:c7:c6:d7:b9:33:9c:d6:
2e:e7:c0:87:40:6f:4c:04:db:e6:02:d1:ff:c1:79:
d7:9e:16:f9:f0:5c:c6:b3:aa:29:0b:04:00:67:bc:
53:a3:1a:05:b1:1b:2b:31:7d:09:cf:d1:98:53:79:
30:51:9e:04:8f:74:7f:46:cf:a7:c2:18:9d:c9:e5:
85:bc:8d:a1:ed:72:5a:a1:3c:cd:81:0e:02:89:df:
d6:e3:8b:11:d2:cd:72:de:c1:4c:95:a1:25:65:29:
78:09:fe:b9:a0:f3:ff:c1:71:c5:6c:f7:65:ff:5b:
83:ef:cc:93:dd:e8:4b:5d:bc:f9:03:05:02:f2:4d:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:77:54:A7:72:C9:62:EC:82:E2:C9:F5:DB:23:32:F5:8B:51:11
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a7:79:f5:24:0c:56:7f:c1:2f:32:5f:53:ea:03:56:c0:e0:
c6:6a:18:34:93:ed:f0:c6:6f:58:72:ea:61:52:22:cd:5c:e6:
50:e7:93:17:34:89:e7:da:4b:2e:c3:bc:0e:6c:79:88:2b:dd:
20:7c:bd:8c:3e:e4:6c:5d:a2:6e:45:ef:8a:be:14:bf:d5:9a:
a0:95:da:75:93:5e:c6:e2:9b:15:71:f9:90:c6:c6:9a:81:9a:
7f:af:b7:12:8e:51:21:a0:87:7c:4d:7d:5a:16:36:cf:8d:f4:
37:b2:e9:23:3d:22:c0:ff:0f:19:cf:f2:99:a4:b4:4d:f5:2c:
fe:24:d8:d9:22:cd:b4:5a:1b:2d:ee:18:61:a7:58:5c:e1:f0:
fd:8a:2e:26:23:18:1c:b2:00:17:fe:e1:ba:2e:15:55:fd:00:
18:39:af:0c:69:db:ac:30:89:91:16:69:c7:1f:8f:95:54:5a:
e2:a5:db:a8:86:c6:31:92:ab:52:cc:09:72:48:63:57:ec:04:
c3:79:4f:41:09:44:d0:98:5a:ed:74:ce:85:e0:e6:92:25:98:
2c:f8:1f:7a:4e:67:aa:6b:92:9b:f8:4b:12:7a:9a:69:06:b6:
45:43:e1:3e:23:3a:08:39:52:b4:f2:7c:3b:17:76:dd:95:6e:
c0:81:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:25 2025 by rpki-client