Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: PFF7Yfn59CPCYcHUzecGC4KyHUHmhtQMJuHB8UcCSEU=
Subject key identifier: 30:8D:7F:20:B4:24:86:32:CB:76:10:12:A0:47:75:12:54:29:8D:14
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 0199FC21620361566EE30038F87172472E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: w0Mb9N8z+dBB4mDUvAtzI/tUVIr9QQ566srmHN3lW98=)
2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:62:03:61:56:6e:e3:00:38:f8:71:72:47:2e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=308d7f20b4248632cb761012a047751254298d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:ee:72:a2:e3:18:f8:e3:b5:60:93:c0:32:
d2:e2:26:fe:ee:20:eb:87:46:14:a1:9a:0a:bf:5f:
74:a7:34:e5:f9:b6:f3:10:91:ab:69:4e:03:40:20:
01:4f:65:c4:27:9c:53:a8:98:ae:06:14:81:8f:37:
0b:eb:f5:70:aa:27:52:5a:ce:bf:a2:d9:4d:c0:b7:
cc:cd:94:70:ab:f2:25:1d:a8:24:8a:15:d5:4d:20:
e1:81:06:e1:3a:f3:56:f2:8d:1d:97:28:11:46:2e:
ee:e5:ce:b6:30:7d:f3:23:ef:f7:df:cb:1e:26:c3:
b5:3e:6f:bf:d8:98:44:19:99:e6:b8:ef:cf:aa:90:
c9:8c:d8:c7:4b:5e:2e:c0:6e:b8:99:d0:39:3c:e2:
54:2c:f5:e6:0b:98:8d:00:e5:54:31:f3:a5:89:56:
13:d3:30:55:24:ee:ed:2d:1a:83:61:00:74:8d:54:
1e:7c:49:2e:22:fd:f3:1e:79:40:5a:58:eb:ed:d4:
30:3f:e0:39:ef:61:b7:dc:2f:3f:e6:15:00:e9:47:
75:05:ae:e1:1d:75:9f:77:a8:0f:2b:dd:73:80:8a:
35:b7:a9:59:d5:3b:57:56:f4:11:8a:f9:aa:89:1a:
06:ec:7e:ca:55:3b:a1:dd:92:e8:4c:fe:ab:12:4f:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:7F:20:B4:24:86:32:CB:76:10:12:A0:47:75:12:54:29:8D:14
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:bb:95:1b:a1:66:65:e0:61:81:87:81:38:d2:fb:f8:3b:
16:fb:b2:d5:a3:ae:03:9e:1b:df:f9:d5:7d:c9:9d:06:3d:a8:
62:f4:11:c1:97:fc:b6:fd:6b:a1:fc:e0:90:fa:f2:0a:f6:e7:
67:ea:fd:46:a4:b9:13:94:80:43:53:46:e4:e9:c1:d4:87:35:
df:c5:b1:6f:2b:e2:f8:b6:bc:45:c2:7a:79:5b:66:cb:8e:14:
ad:80:49:0e:d0:9c:31:e0:7d:8f:01:78:59:2a:9e:6d:75:e9:
83:81:c3:56:67:36:c8:f4:4d:05:46:a7:23:6b:7a:7f:90:6b:
31:70:95:44:10:76:84:57:54:04:fb:0c:82:63:7d:c9:db:d4:
c4:77:a7:5e:a0:8f:4d:00:38:6e:fe:25:a2:33:11:dd:66:8a:
0a:4d:60:6b:21:19:d4:50:32:80:ad:58:59:a6:0f:0b:38:f3:
1f:eb:82:a5:25:75:cc:d4:e3:5b:90:d7:75:57:cb:b7:c0:d8:
50:a2:f8:3e:71:d5:a0:c7:0e:f8:2f:65:93:55:84:49:c0:41:
89:9e:c5:d8:e6:ad:9b:de:96:a8:ae:b6:47:e4:e2:06:80:70:
54:ac:0d:c5:c8:18:92:b5:26:f4:e3:d8:cf:5a:e1:96:2e:df:
69:b9:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:41 2025 by rpki-client