Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: Vi9qixmXJLJdpQyTXneI8DPl2oNV72O0fKEN+KfwBKI=
Subject key identifier: B8:39:46:48:F0:48:45:87:66:25:85:89:46:83:A2:EA:B6:A3:99:64
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 0197D7E2AC6E1513EA9289E39E262B726FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 1559
Signing time: Sat 05 Jul 2025 00:00:46 +0000
Manifest this update: Sat 05 Jul 2025 00:00:46 +0000
Manifest next update: Sun 06 Jul 2025 00:00:46 +0000
Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: 01ZfG12eDIEC/rXsJYDfnB6eRZB9W3BRhfR3HeWXMVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:e2:ac:6e:15:13:ea:92:89:e3:9e:26:2b:72:6f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Jul 5 00:00:46 2025 GMT
Not After : Jul 6 00:00:46 2025 GMT
Subject: CN=b8394648f0484587662585894683a2eab6a39964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:f0:2e:f7:84:f4:65:45:d9:d2:16:5b:21:
fa:db:45:00:55:5f:f5:1e:9f:e8:4d:20:53:4b:e9:
fd:29:74:e4:37:a7:c4:11:9d:a9:7f:1c:7e:84:6f:
fc:f5:2f:5a:3a:b8:4d:d6:28:3c:f2:d4:5f:61:09:
e3:f9:9a:30:b4:40:72:50:1f:38:d6:aa:39:e8:f5:
96:1b:e2:65:7c:f8:29:81:ee:97:bf:52:94:c8:c0:
6e:63:cc:f8:bc:13:43:ad:c2:95:81:4c:d8:00:c0:
fa:7a:99:e7:cb:1e:bd:0d:4c:37:1d:05:4e:c7:ab:
76:1f:a9:ab:28:b5:5e:49:83:c5:75:16:d8:5b:c0:
81:b3:3e:ae:c6:f2:91:56:b8:81:87:3c:d7:9b:d9:
16:48:90:01:23:60:93:b6:73:45:96:03:36:45:a2:
6a:18:04:dc:2e:78:f4:f4:d4:54:03:94:68:84:33:
2e:a9:06:b2:23:98:00:e1:3d:27:99:b0:38:87:0c:
86:0a:a8:97:9c:a7:50:82:7c:8f:44:37:de:51:76:
85:97:b6:0e:e0:90:56:7b:fc:01:4c:c7:3b:62:87:
b0:b7:e0:b1:eb:e7:e9:14:7a:b0:be:d5:11:77:98:
0c:12:7e:b2:0c:a9:3d:35:e9:da:99:5a:8b:96:53:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:46:48:F0:48:45:87:66:25:85:89:46:83:A2:EA:B6:A3:99:64
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:53:d5:16:43:b3:dd:2d:6c:88:76:9a:54:c6:5c:45:6e:
50:6b:18:a5:a5:13:c0:f9:f0:a6:60:ca:1a:f9:77:c8:31:00:
1d:f2:04:3d:ec:07:8c:ab:d6:22:b3:5a:3f:ea:1b:4b:61:fb:
58:25:06:32:58:04:87:c6:ad:9c:3d:45:42:25:07:68:50:12:
d6:38:c5:e4:07:c0:25:2d:d0:2f:63:a8:59:fa:a2:00:e9:98:
51:7d:41:4b:fa:20:40:0d:88:13:63:75:31:67:68:54:25:df:
38:46:4f:db:4f:70:50:12:c2:4b:2d:9c:e2:f4:4b:2f:7d:7e:
47:8d:3f:78:14:c0:cc:c5:f1:98:d2:11:7a:3d:b7:88:20:7d:
ee:9a:10:ee:a6:dd:2e:ce:c0:f3:eb:d6:fc:58:bd:7c:63:cc:
8b:a0:bd:34:7c:6f:5b:2f:c6:e7:22:c2:ed:83:5e:bd:5d:20:
14:5b:3d:9d:54:eb:a2:39:97:d8:3e:99:7e:c4:7f:57:e1:08:
91:f0:7d:d7:a6:92:9e:e0:83:e4:9a:84:05:b2:88:5c:d2:c7:
d6:29:29:59:61:13:bb:d2:95:1e:f9:d4:6e:5c:a6:cb:e5:f5:
6b:38:8a:b9:57:f4:77:ea:9d:52:cd:bb:ec:f7:02:45:88:97:
56:9b:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:28:51 2025 by rpki-client