Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: SKZbeBCmrwr2R0PVQpDTZshFP1BZEmEO5w+W4sYXgtM=
Subject key identifier: 17:1F:10:7A:1A:51:48:2D:E5:1E:38:25:61:E2:DA:A3:25:74:80:B1
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 0198D4A7FFBC6BC310D3FCDF91F933B09A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:36 +0000
Manifest this update: Sat 23 Aug 2025 02:00:36 +0000
Manifest next update: Sun 24 Aug 2025 02:00:36 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: 0sbaW+mjWzDpNZyBeILbt6/7+RCKxfDeWgmaEX7OAuk=)
2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ff:bc:6b:c3:10:d3:fc:df:91:f9:33:b0:9a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Aug 23 02:00:36 2025 GMT
Not After : Aug 24 02:00:36 2025 GMT
Subject: CN=171f107a1a51482de51e382561e2daa3257480b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:72:82:1a:dc:f6:da:9c:74:5a:4d:a9:b8:
e7:f5:40:09:f3:58:42:7d:2f:06:c0:b6:1b:49:b5:
d3:fd:6d:9e:bc:86:a0:17:b4:a8:b1:c1:72:b2:16:
1d:ff:d0:d6:e1:96:ca:d9:7a:6a:fa:72:a2:bc:46:
93:a4:43:3f:c3:aa:bc:b4:7d:66:69:a9:97:3f:a0:
31:62:8f:2e:93:eb:13:de:f9:3d:f0:d8:56:b2:bf:
31:a3:a8:6a:66:19:3b:01:cc:0a:97:7f:93:db:88:
56:02:ad:d6:b9:e1:a5:05:43:ce:4d:ad:fc:38:00:
40:a3:68:3d:0c:0d:c4:1c:6c:3c:2f:72:30:94:50:
2f:33:4d:5d:e1:5a:48:49:87:3f:b1:a6:ab:a8:13:
e9:64:df:60:31:e7:e0:ff:e9:06:9e:08:04:12:54:
29:9b:66:5a:20:c6:34:17:89:74:7c:4b:bf:41:ca:
29:0a:63:88:85:22:e5:80:69:d6:91:0b:0c:a9:a7:
ee:a7:59:e4:73:18:8e:35:6b:e2:15:2d:0a:d9:ea:
ba:cf:5d:f1:fb:35:19:4e:ef:5b:14:12:c3:96:27:
33:cb:7c:a6:56:d3:6d:f6:cd:d3:f3:2c:1e:14:7e:
d6:08:65:f4:1a:0a:24:07:33:e0:9f:de:0d:11:df:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:10:7A:1A:51:48:2D:E5:1E:38:25:61:E2:DA:A3:25:74:80:B1
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:9b:c8:98:72:d7:7a:64:43:02:da:f6:00:91:65:71:d3:
f3:39:26:2a:ab:88:73:91:16:0a:73:8d:a0:4d:0a:b4:28:5c:
6b:8f:3c:37:63:b0:45:c5:a2:cf:23:6c:1d:cd:db:3b:2b:20:
75:5b:19:a1:fe:64:c0:68:b9:87:d2:62:3b:65:93:e4:e9:82:
e3:d8:fa:1d:da:c7:a0:4b:b8:e9:a5:5a:d2:8f:a7:be:f0:d8:
3d:ae:70:db:d8:26:88:60:47:50:a3:5d:9f:a6:94:b9:d5:dc:
27:06:0c:b3:de:42:c8:9b:fb:25:0d:69:f6:e0:78:4a:8b:2f:
47:52:45:77:d2:6b:3b:7a:09:56:a7:ce:d5:30:28:cd:1b:aa:
c5:db:25:50:9a:86:62:bc:d6:39:25:40:05:22:9a:91:8f:7d:
3c:a9:25:85:90:db:e6:8b:21:ff:85:cb:5f:32:5c:50:87:c4:
3e:3e:cd:63:3c:99:1f:13:22:65:3a:f0:16:51:94:e8:e8:39:
e2:31:43:39:a1:5e:42:de:7e:6e:92:f5:74:eb:71:1e:2c:e6:
65:02:b3:93:5c:55:a7:71:6a:f9:57:af:4c:27:bb:2e:23:b5:
fb:9f:7d:0b:f7:8c:26:29:1e:3c:c8:5c:f0:5d:e9:eb:33:8a:
8a:3f:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:46 2025 by rpki-client