Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier: Ry175Ec/c7dRAjECBU/MD7Y50JXYoX31WZzKEBt9Nog=
Subject key identifier: B7:68:D5:8E:B7:D1:83:BB:79:00:87:09:3B:6F:D3:24:9B:8E:E9:53
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 0199FAD8048AF7A60F31ADCA19BF0492809F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number: 125E
Signing time: Sun 19 Oct 2025 05:01:24 +0000
Manifest this update: Sun 19 Oct 2025 05:01:24 +0000
Manifest next update: Mon 20 Oct 2025 05:01:24 +0000
Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: sLweTyapi/n5gi9SL1Zb4mVDQqlisAWhR0U+VA2z0AM=)
2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:04:8a:f7:a6:0f:31:ad:ca:19:bf:04:92:80:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Oct 19 05:01:24 2025 GMT
Not After : Oct 20 05:01:24 2025 GMT
Subject: CN=b768d58eb7d183bb790087093b6fd3249b8ee953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:f0:10:bc:5f:30:fd:31:05:62:1b:e6:f1:
ab:46:76:77:73:d8:95:72:ac:94:20:cc:b9:5e:f9:
f9:e3:8f:f2:13:86:23:fc:80:f4:6b:40:ee:c0:da:
5d:7e:a9:90:58:4f:7f:83:74:c4:20:71:a5:5f:92:
3c:6e:cb:13:86:18:6a:32:5b:89:12:c5:9b:71:54:
2a:77:26:9f:9f:f3:cc:69:31:65:ab:2b:8a:40:b2:
65:f1:3f:94:74:cb:86:c7:65:b0:8e:31:56:7e:09:
95:d1:55:16:b3:5f:ab:5e:4e:50:f1:2c:40:ae:c6:
02:4d:5c:48:c7:68:15:14:58:6d:61:0e:e9:30:24:
89:ae:59:67:33:20:b7:da:93:a6:e6:43:ee:ba:ab:
fc:65:8f:7c:10:d4:47:10:6f:d0:4b:95:32:12:2e:
c2:f0:34:e6:c7:0f:ca:7a:15:5d:f2:6d:41:84:ac:
2b:f4:29:8d:88:79:03:54:0b:28:f8:14:53:19:9b:
9a:9e:da:1b:2f:4d:da:cd:5b:cb:24:61:d9:6a:7e:
8b:ac:37:ad:e6:31:6d:1d:c5:86:3d:5c:83:a3:70:
2a:ed:30:ea:d8:c8:19:a2:30:82:05:42:8c:e5:78:
74:de:26:ac:05:97:6f:da:c0:4b:37:dd:5d:24:3e:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:68:D5:8E:B7:D1:83:BB:79:00:87:09:3B:6F:D3:24:9B:8E:E9:53
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:1b:a9:aa:c1:cc:76:29:b6:58:18:9f:93:75:5d:e6:d9:
7e:bc:97:2b:af:61:03:18:37:78:02:50:fc:c0:57:5b:9b:bc:
2b:8c:e4:27:7b:65:83:0b:d1:4f:e4:76:2b:40:85:cf:56:5e:
13:79:a1:c9:90:fc:e9:07:5f:0c:1e:6f:e6:2c:7e:39:9f:23:
29:5f:b0:6e:d9:21:e8:ef:22:0a:2c:7b:29:1a:40:44:2e:2a:
54:42:35:6c:8f:ad:2c:bd:68:2b:d6:a1:9e:e2:0b:91:a7:a9:
80:55:77:b7:cd:7a:8f:09:a6:87:fa:b0:6d:cb:b9:30:d3:dd:
34:15:1a:b4:f4:0f:35:d7:ee:7f:50:1e:8a:51:47:3f:89:2f:
45:40:48:01:81:5e:1f:9a:8b:5c:11:86:c0:17:d3:b1:ba:f2:
8d:8d:65:32:b3:4d:63:81:ad:52:c5:13:7b:77:11:d7:ec:5c:
6f:0b:9e:7f:74:6b:98:99:3e:7a:12:cc:d1:47:f2:4e:c4:48:
e9:5e:a5:ff:77:60:9a:ae:bf:84:91:b5:13:b8:82:96:9a:26:
11:fa:78:b1:38:ca:2e:0d:0b:ed:54:3e:c6:c2:cf:8e:d6:d5:
ca:d7:cd:ca:50:0e:6d:84:a3:cb:49:b8:67:d7:c8:e9:9f:ac:
62:c9:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:56 2025 by rpki-client