Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier: ZiUGYRdCB5aQEAh2Syml1/qAj6l+aWvl8sMmhqPDPK8=
Subject key identifier: F8:DD:81:4E:4A:38:0C:C7:AA:68:B2:B7:A3:B5:D1:81:52:79:81:C3
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer: /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial: 0199FB4613FB52D06F46D432F180E789A77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number: 1662
Signing time: Sun 19 Oct 2025 07:01:37 +0000
Manifest this update: Sun 19 Oct 2025 07:01:37 +0000
Manifest next update: Mon 20 Oct 2025 07:01:37 +0000
Files and hashes: 1: F8n_Svao3XVMTZ9Sm-3QBaNvm1s.roa (hash: jXQFrBti/A7a3NKEgrbBnXx/tbixG/ctP16QJsp1XeE=)
2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: zZJf9u+ZCT4ESzzMIUZ467uR6nuwvL70wuvWBYXxlJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:13:fb:52:d0:6f:46:d4:32:f1:80:e7:89:a7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Validity
Not Before: Oct 19 07:01:37 2025 GMT
Not After : Oct 20 07:01:37 2025 GMT
Subject: CN=f8dd814e4a380cc7aa68b2b7a3b5d181527981c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:19:0c:60:5b:05:65:97:ff:0f:5a:ec:c8:
1f:77:5c:d7:3a:13:9e:7c:42:e3:86:ac:70:8d:b6:
b8:a6:d0:ba:f9:24:8c:00:8e:6c:ef:67:25:e4:33:
9a:22:46:5c:11:c0:7a:de:66:65:f0:81:a8:4e:d8:
fd:fd:01:e0:5e:a0:93:03:0b:58:4b:d7:72:98:d3:
a9:19:ca:ad:92:86:0e:44:10:31:e6:a5:39:9c:86:
9f:a2:3d:31:61:1f:ba:70:3a:df:0d:85:ed:2d:09:
f6:38:87:9f:f8:73:28:1f:6d:f2:1e:8a:d7:55:4f:
88:8d:1f:41:d0:5d:65:b4:4d:bf:0c:78:9b:60:1c:
80:13:53:e0:9d:5e:df:bb:5f:9f:49:72:74:7b:5a:
52:33:f8:d8:9b:7f:9d:d2:ce:f7:3d:9c:e3:1c:e2:
fa:c8:95:0f:d4:81:f1:d2:a2:e8:41:33:8e:93:0a:
5a:45:83:2b:55:26:06:ab:84:08:71:3d:fd:5f:cb:
4c:95:e6:3f:01:94:a7:58:0d:93:a8:39:ba:e1:e1:
5e:03:97:03:3d:dd:d2:94:98:4b:7b:39:1f:3e:07:
e7:57:0e:37:cf:96:80:76:59:06:d6:0c:cb:72:6f:
e6:35:4a:52:42:1f:89:9e:b3:4d:97:a6:79:54:98:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:81:4E:4A:38:0C:C7:AA:68:B2:B7:A3:B5:D1:81:52:79:81:C3
X509v3 Authority Key Identifier:
keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9c:f4:24:b1:2a:7d:63:d9:0d:c6:56:b7:69:e6:f5:84:10:
09:4a:b1:27:e8:21:b8:f1:19:16:74:70:84:13:e1:5a:86:83:
6c:b3:ba:e5:4b:68:85:dd:b9:96:38:22:b1:9e:0c:f6:2b:0c:
99:c9:e3:a9:c7:7a:7a:a9:b4:8f:06:3c:df:8e:c0:83:12:25:
44:19:71:6d:a1:c6:d9:98:cf:76:7e:47:36:02:65:7f:90:24:
b5:20:cb:87:2f:50:48:64:59:75:d0:4a:15:3f:07:3d:c8:d3:
9b:63:de:c0:1f:ae:af:4c:2f:3a:ac:b2:1a:19:ab:83:e5:df:
7a:8d:bd:be:28:a6:90:54:ff:a2:14:bd:f4:56:57:0b:25:a5:
fc:9f:7b:e9:5d:f4:ca:ce:49:b4:8a:34:fd:6b:48:bd:92:0d:
5c:bf:c3:11:f8:bb:7b:01:a0:23:f4:5d:71:84:7d:2a:ee:53:
55:89:71:db:bd:9e:da:f1:f2:ed:92:b0:f0:6b:27:5f:f1:8e:
86:02:f9:e9:68:64:cd:93:17:ee:72:b9:61:bd:6c:e3:75:22:
62:ed:96:e4:8b:6e:68:af:f5:18:82:0a:c0:74:3a:7b:3e:36:
78:15:8f:52:75:d5:c9:6e:68:dd:c7:45:8f:b5:b5:88:90:ae:
52:8a:34:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RhP7UtBvRtQy8YDniad8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDY1OGZjYWIzNzAzMmRmZWE5NmVmMGFlNjhkYzlkZWZm
NmQ3MDUwHhcNMjUxMDE5MDcwMTM3WhcNMjUxMDIwMDcwMTM3WjAzMTEwLwYDVQQD
EyhmOGRkODE0ZTRhMzgwY2M3YWE2OGIyYjdhM2I1ZDE4MTUyNzk4MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwIZDGBbBWWX/w9a7Mgfd1zXOhOe
fELjhqxwjba4ptC6+SSMAI5s72cl5DOaIkZcEcB63mZl8IGoTtj9/QHgXqCTAwtY
S9dymNOpGcqtkoYORBAx5qU5nIafoj0xYR+6cDrfDYXtLQn2OIef+HMoH23yHorX
VU+IjR9B0F1ltE2/DHibYByAE1PgnV7fu1+fSXJ0e1pSM/jYm3+d0s73PZzjHOL6
yJUP1IHx0qLoQTOOkwpaRYMrVSYGq4QIcT39X8tMleY/AZSnWA2TqDm64eFeA5cD
Pd3SlJhLezkfPgfnVw43z5aAdlkG1gzLcm/mNUpSQh+JnrNNl6Z5VJgZLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjdgU5KOAzHqmiyt6O10YFSeYHDMB8GA1UdIwQY
MBaAFLFGWPyrNwMt/qlu8K5o3J3v9tcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYt
YTdlYWQ4YWIxMjczLzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYtYTdlYWQ4YWIxMjcz
LzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5z0JLEq
fWPZDcZWt2nm9YQQCUqxJ+ghuPEZFnRwhBPhWoaDbLO65Utohd25ljgisZ4M9isM
mcnjqcd6eqm0jwY8347AgxIlRBlxbaHG2ZjPdn5HNgJlf5AktSDLhy9QSGRZddBK
FT8HPcjTm2PewB+ur0wvOqyyGhmrg+Xfeo29viimkFT/ohS99FZXCyWl/J976V30
ys5JtIo0/WtIvZINXL/DEfi7ewGgI/RdcYR9Ku5TVYlx272e2vHy7ZKw8GsnX/GO
hgL56WhkzZMX7nK5Yb1s43UiYu2W5ItuaK/1GIIKwHQ6ez42eBWPUnXVyW5o3cdF
j7W1iJCuUoo0vw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:49 2025 by rpki-client