Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: ROII3MptZMVjmwWBqa18UYzRQH3Q1S+K05gBLg7rgUo=
Subject key identifier: 4F:C5:1B:CF:D7:84:78:BA:1C:32:4B:52:29:FB:FA:24:54:78:44:A3
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 0199FDDA08A2E5720EBCD83F80024708F91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 10FE
Signing time: Sun 19 Oct 2025 19:02:28 +0000
Manifest this update: Sun 19 Oct 2025 19:02:28 +0000
Manifest next update: Mon 20 Oct 2025 19:02:28 +0000
Files and hashes: 1: cvFGyGJRsZnEcRCD9JCy58T9gVo.roa (hash: Yp1oBHirBIDihtEHMnqKxr3/5zdpx0QZszheovk5A64=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: OAukRY0iLYRxa6I4QLOc+NeomiQp8wgoAvlHANeEW/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:08:a2:e5:72:0e:bc:d8:3f:80:02:47:08:f9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Oct 19 19:02:28 2025 GMT
Not After : Oct 20 19:02:28 2025 GMT
Subject: CN=4fc51bcfd78478ba1c324b5229fbfa24547844a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:b7:80:e3:0f:20:39:e2:eb:db:db:ce:a5:
5f:e0:4b:f7:4d:5e:1c:2b:d6:e1:51:e1:9a:fc:4b:
88:58:eb:bc:de:ea:31:82:21:97:4d:6f:50:48:99:
7e:06:a2:57:e1:94:a9:e1:e5:24:45:16:a1:2d:de:
e5:c0:ae:8e:45:d3:42:f1:ee:36:78:24:bc:95:db:
dd:23:65:83:d3:29:a0:10:82:9b:a7:70:a5:07:0a:
a4:aa:90:91:8f:b4:1c:46:46:d7:06:9c:41:88:ac:
66:71:43:e5:08:bb:2b:d3:bc:61:c3:5b:1c:19:20:
62:fd:c9:96:bf:d4:f9:ce:f8:3b:72:9a:d2:82:14:
52:3d:f2:0f:8c:21:80:06:63:c0:4a:a6:08:ee:c7:
1e:d3:ae:33:2f:fa:ba:52:ab:c0:7e:e9:f1:30:30:
3b:cd:ea:b3:59:ca:1d:cd:1b:82:57:4c:6e:d0:d0:
f5:ba:4d:e6:ba:f0:26:2d:39:ad:06:81:35:8a:f6:
34:b3:58:d8:d6:92:a6:ce:58:a0:01:9d:0a:57:f1:
5b:e0:e3:c7:24:24:fb:cd:14:58:d2:05:6c:9b:b8:
fb:f1:b8:2f:38:62:32:c0:76:3a:20:6d:ca:34:b0:
6f:4e:eb:38:d4:09:a8:45:df:6c:a6:5d:b5:fb:c0:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:1B:CF:D7:84:78:BA:1C:32:4B:52:29:FB:FA:24:54:78:44:A3
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ff:b6:59:4b:f9:77:1f:9c:79:84:d6:c3:d5:4a:ee:b4:25:
82:f9:2f:b3:05:a0:3e:6b:48:3e:7c:1f:0d:87:8d:40:95:fa:
31:43:12:62:39:e6:aa:a2:06:9b:f2:a4:e1:c1:6c:b6:12:61:
5f:5e:d4:52:1f:17:32:b1:89:2d:ba:05:18:27:54:e9:3b:ff:
d0:db:78:fb:aa:0b:15:f4:03:cd:dd:f4:7c:2e:1f:a8:0e:7f:
50:72:a9:39:ba:39:17:26:fe:8f:bf:5b:36:ce:ce:6a:e5:91:
c1:74:69:d5:4f:cf:49:57:c9:d9:08:b8:3f:ef:67:be:1d:85:
11:e6:96:8b:f7:c0:ca:1f:ee:b4:54:53:ca:09:d4:f0:b9:ce:
a0:76:0b:38:66:0d:0d:b3:7b:bc:d8:6b:a7:03:19:d3:5d:e6:
cb:79:75:2c:fb:29:1c:50:ab:03:e7:46:f5:cc:05:45:c0:18:
33:39:df:e5:c0:a5:91:31:a0:a1:a5:c3:c7:ba:a7:9e:60:f6:
e3:df:52:8b:13:e7:7b:44:cc:7d:0c:2a:66:d6:39:ff:29:07:
2f:92:b0:84:2b:ce:32:67:3c:f6:b8:f5:5c:af:6c:d4:33:2e:
2d:5e:e1:62:ab:42:81:ee:50:8f:53:99:fb:23:e9:e0:6a:a2:
9c:ba:96:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:15:03 2025 by rpki-client