Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File: SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier: hM9lrM97wpacADqS1voFe+l+Px/FDGexved6gVZDIxs=
Subject key identifier: 95:E7:31:FD:4B:31:81:FC:8F:A0:7D:BB:3F:EF:57:26:B1:76:50:88
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer: /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial: 0198D54E0E6418D1B307C6A6FF0C0C592B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: n2YylzGTFJKqvIgjdRyoOS/PY2xluVAttm7MEUjvA6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0e:64:18:d1:b3:07:c6:a6:ff:0c:0c:59:2b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=95e731fd4b3181fc8fa07dbb3fef5726b1765088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:76:87:df:f5:c8:d2:c9:1b:6f:89:d9:c8:
98:18:92:cb:d8:2d:33:d5:83:c6:cb:1f:0e:06:f1:
a0:a7:2f:c9:a9:6f:17:10:3a:a0:93:3e:94:ce:72:
7d:33:6e:93:f6:c1:10:21:13:0f:94:b7:fe:9b:00:
46:44:3b:5d:95:e3:7f:89:79:1f:f7:df:80:85:4d:
f1:9e:6d:d3:a0:1d:8c:b1:fd:3f:4c:e6:f2:ca:d5:
89:84:59:68:bd:1b:c1:84:97:c4:18:fc:b9:e7:8e:
f3:1a:25:85:3c:61:e8:3b:da:60:67:d4:8d:cf:1b:
83:c1:e2:2d:c6:88:ae:ec:6a:b7:d9:79:af:80:a3:
65:c2:78:d9:a5:d6:7e:88:a1:7d:80:fb:e4:aa:21:
de:1f:e5:60:19:4d:f4:0d:8c:61:b3:67:ae:1e:a9:
84:f8:9d:64:ad:af:d3:ca:15:86:17:f0:0e:f5:89:
92:39:7f:e8:75:c0:5b:09:a4:01:0a:84:56:bb:29:
d2:e2:3c:13:62:21:6d:17:bc:f4:fa:e2:53:23:89:
90:7c:39:f5:fe:7e:be:4d:99:52:de:77:3f:fa:57:
85:b3:e0:fa:3c:67:85:07:f0:2b:e0:fd:51:aa:72:
7e:0d:78:ab:f1:64:50:49:cb:1c:24:24:31:cd:45:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E7:31:FD:4B:31:81:FC:8F:A0:7D:BB:3F:EF:57:26:B1:76:50:88
X509v3 Authority Key Identifier:
keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:16:cb:0e:80:d5:fb:db:08:3c:c1:10:5a:99:02:96:e6:b2:
2a:7f:15:c0:93:58:9c:18:2c:25:7f:76:b8:9e:a2:01:30:5f:
0e:6e:54:dd:a1:f5:dd:f1:9b:97:f7:0d:e1:ce:c6:bb:7c:51:
54:64:7d:93:93:44:15:bd:b0:f6:65:b4:af:6b:2c:95:6c:3a:
11:76:74:5e:f2:29:6d:55:b2:be:e4:e6:03:d4:af:7d:6b:bf:
91:15:d3:45:e2:bb:d3:fa:b5:06:7b:28:9f:28:15:f9:df:9c:
a0:46:98:72:06:43:c9:40:fb:94:9b:b7:3e:c7:c9:12:cf:5c:
99:af:d4:4b:75:5f:21:1f:83:85:3b:f0:8c:f8:d4:55:16:3d:
19:ad:e3:f2:78:f3:40:a8:63:48:5f:00:ee:ee:4f:65:6f:d0:
7c:09:0c:78:f0:7d:74:3a:71:09:fe:6b:ac:15:5d:a0:2d:af:
f3:69:61:e0:a3:0b:33:ee:35:09:c1:dd:d4:99:2a:a9:64:37:
9a:f1:70:cb:ff:66:ee:a0:b5:69:aa:6e:c8:9b:3b:89:25:f0:
18:fe:71:f5:a2:f3:e3:34:33:51:df:55:82:a9:54:86:a5:b2:
ad:91:20:6b:ef:fa:9a:62:98:60:41:6f:6a:7c:f1:e1:6b:58:
df:a0:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:09 2025 by rpki-client