Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
File: su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json)
Hash identifier: skR4qMTRjwPFzbmQJnYGW6BQEI/8ES9rugHUgmLDuY4=
Subject key identifier: F0:6B:B5:EC:0D:3F:84:FD:B5:2E:CA:B4:96:D3:A9:4D:97:9D:6C:00
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 0199FE0FDAB172EC0721FD9FC4E95501789A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
Manifest number: 0A55
Signing time: Sun 19 Oct 2025 20:01:15 +0000
Manifest this update: Sun 19 Oct 2025 20:01:15 +0000
Manifest next update: Mon 20 Oct 2025 20:01:15 +0000
Files and hashes: 1: HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa (hash: QHoycNdEbZMja0gAvjEgeC3E4wx2OI9vc9S4Y873m1w=)
2: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: Gw4qPnJeROianWNJNT9C2Z+cS9p1fjE22nMeXkeuHfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:da:b1:72:ec:07:21:fd:9f:c4:e9:55:01:78:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: Oct 19 20:01:15 2025 GMT
Not After : Oct 20 20:01:15 2025 GMT
Subject: CN=f06bb5ec0d3f84fdb52ecab496d3a94d979d6c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:9a:fc:1c:53:5d:0e:3f:37:79:52:49:a2:
ca:43:a3:bb:88:f0:5b:f5:69:08:22:94:a7:63:ee:
83:dc:b8:f8:5b:2b:43:8b:e8:cf:fc:77:df:f5:1c:
e5:c8:57:c9:fa:1d:72:1a:7f:55:4a:9e:76:08:8f:
ac:d3:6b:88:28:92:bb:a7:3f:7d:64:a7:fb:96:79:
cf:30:de:8c:70:2a:8d:17:94:35:f2:32:31:f2:f9:
4e:a6:7a:b4:b7:2e:7b:a0:83:d1:c1:dd:c1:6d:9d:
c1:fc:44:b2:2b:50:d7:79:aa:45:87:22:2b:08:61:
2e:dc:98:21:19:19:62:e6:05:3b:87:fb:46:ab:07:
5c:7c:f8:b8:9e:a0:9d:95:5e:15:86:84:44:5f:6f:
c4:f7:7a:98:99:8c:10:eb:a8:51:41:0b:51:c0:a5:
75:f7:f7:56:5f:ae:7f:cc:50:b1:c0:fb:6d:09:0e:
25:4d:29:5a:57:3f:3e:06:d2:c7:38:ba:eb:57:65:
db:8f:6e:ab:c1:1a:cd:75:a6:52:0e:c9:11:af:4f:
61:b2:1e:08:f8:9d:b5:9f:41:7b:88:ce:0f:ce:ef:
fe:e7:ed:c6:fe:9a:08:a9:cc:eb:18:3c:8e:0a:3b:
88:f3:4b:2c:35:17:c1:54:e6:00:9b:74:e0:38:b0:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6B:B5:EC:0D:3F:84:FD:B5:2E:CA:B4:96:D3:A9:4D:97:9D:6C:00
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0a:43:bd:3f:b3:1a:6f:eb:75:b5:7c:48:82:2e:ec:eb:de:
1d:e4:ac:5e:f0:13:78:b3:a3:4f:ba:dc:f7:28:d5:97:92:e5:
30:c0:d7:a0:f9:94:06:e0:b5:c0:2c:84:eb:ab:8c:89:f5:58:
59:b9:1b:3c:87:5e:5d:d8:64:e5:cb:a2:31:11:8d:27:50:a1:
c5:b4:e6:4c:d2:c4:3b:b3:f1:79:a6:4e:76:c0:dd:9f:1a:92:
c1:11:0f:96:24:10:ea:bf:a0:14:fa:94:f4:09:45:2e:87:2f:
75:58:fe:b0:57:c1:7a:42:d1:9e:84:1b:05:32:29:b8:a1:ea:
7c:a3:02:ae:a9:73:c4:86:b8:d0:4d:80:68:cb:b8:da:d0:0b:
ff:f2:ea:64:96:a6:72:53:f3:f4:6c:d6:3d:89:10:07:72:38:
98:72:d4:88:71:20:79:e4:e6:d8:53:df:90:c5:16:98:75:ab:
f1:f1:50:94:93:a6:c4:36:08:83:47:5d:ae:83:74:8d:ec:b7:
73:0e:85:bc:1b:5d:f4:35:16:7b:69:ef:d4:a8:15:33:a6:3e:
81:3f:e7:75:38:39:6d:66:63:3b:b8:8a:fa:17:c9:33:05:c9:
ee:1a:65:65:e9:eb:b0:04:39:5c:3a:5e:46:b3:e5:85:fb:7a:
cb:81:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:03 2025 by rpki-client