Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: BwCZZp7hw0FKnia/0Oxr58dMTGH9Si3raJLLDOYegzA=
Subject key identifier: 0C:32:43:9B:AD:0B:F8:EB:5F:3E:A3:E4:F6:A8:6E:AC:92:1F:4A:6C
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 0198D4DFF315F112F7B9CD51CCE02E61143E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 0A4D
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: R0nHk7hidTCDmlY53PxJ68jTsKlzqmPXcMIBpBBfrXI=)
2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f3:15:f1:12:f7:b9:cd:51:cc:e0:2e:61:14:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=0c32439bad0bf8eb5f3ea3e4f6a86eac921f4a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:08:80:df:0c:ee:a7:ae:ef:73:2b:40:5b:
1f:76:93:9d:b7:12:bb:54:92:43:a9:20:5a:8f:64:
30:bb:87:e6:f4:7f:e7:6b:60:78:7f:42:e6:d7:5e:
80:db:03:d3:02:07:ad:bd:52:b8:87:93:24:5e:a5:
2b:3f:47:4f:0e:6d:ab:c7:8d:af:ac:42:40:44:29:
60:38:c9:3a:4a:27:cc:ca:ef:96:14:04:b2:d0:17:
b2:34:6d:6b:22:74:99:c5:6a:2e:23:96:cb:43:b7:
4e:20:af:0a:85:2c:6f:1f:c1:17:37:bc:9e:46:19:
8b:38:08:cd:37:04:b5:29:8e:71:93:d1:e4:ad:ee:
a1:4f:be:ee:60:fb:16:c6:f7:ee:00:20:41:98:fc:
59:67:06:e0:cc:e9:31:06:c2:b8:37:94:48:68:cf:
9c:36:36:ac:96:f9:13:e4:dd:48:23:2f:ee:a5:aa:
71:fe:24:5f:c6:c2:bf:52:ec:42:dd:46:d1:7a:dd:
bf:85:85:1f:72:a3:48:43:dd:11:17:11:11:4e:d2:
d6:26:dd:ed:18:c5:7d:cb:c0:87:68:0e:2b:a0:58:
e7:c0:a0:65:f3:9d:eb:1b:d3:39:62:ba:17:89:35:
d3:ae:91:d7:e0:03:a3:1f:2a:81:ce:6f:ce:86:3f:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:32:43:9B:AD:0B:F8:EB:5F:3E:A3:E4:F6:A8:6E:AC:92:1F:4A:6C
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:aa:fc:76:a2:f1:7b:00:c9:1f:97:17:5e:c4:aa:eb:83:24:
93:29:56:91:82:f7:eb:13:8c:41:48:5e:a7:a8:aa:74:bc:95:
6e:b4:ab:3d:db:02:a7:83:c8:ca:f2:51:1b:19:80:5f:22:ca:
c2:0c:29:a0:01:45:f6:7d:bf:5a:43:20:5b:34:50:94:3e:8b:
2f:9d:dc:e4:58:b8:2c:50:6b:f6:ee:39:89:60:94:2d:81:ab:
71:a0:37:de:21:e8:5c:6b:a9:86:e1:7f:96:2e:90:44:e5:d0:
86:93:08:ae:2c:7e:80:28:1e:a7:70:cb:4d:f6:c5:fd:98:ed:
62:d8:ab:57:c6:fa:ca:46:4f:6e:27:f1:d4:c6:c1:d6:54:bd:
57:1e:7f:d7:a1:16:f0:a3:52:61:13:a1:da:a4:02:09:ba:1e:
76:1f:91:3a:63:55:0e:42:46:d1:9e:7e:28:51:0a:50:3b:ec:
1f:71:3b:d6:4c:6c:d9:a6:9a:ef:05:08:b7:2d:c9:6d:97:07:
1d:48:e4:9f:93:06:6a:84:54:bc:2c:77:b6:ef:b0:e4:8e:ef:
5e:74:fe:06:15:28:33:d0:d4:f7:43:96:66:e8:46:e7:ba:35:
c4:32:bc:5e:1d:6f:a4:e7:f6:9d:c7:30:ac:20:74:63:9a:5e:
1d:b9:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:54 2025 by rpki-client