Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File: SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier: oSTWpgowu3M6ZdhQ4Vj9ywElCGQHOrJtms0WtNm5sLc=
Subject key identifier: 38:6F:93:53:4C:9C:B7:11:D8:61:40:C7:B6:89:1A:A6:4B:01:B3:09
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer: /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial: 0199FAD8339C1F901810C7DAC70BF5E5B9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 05:01:36 +0000
Manifest this update: Sun 19 Oct 2025 05:01:36 +0000
Manifest next update: Mon 20 Oct 2025 05:01:36 +0000
Files and hashes: 1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: QSUWLcaPWCMftnd/SVKDVkqhmC93qPx5bAvCYszog2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:33:9c:1f:90:18:10:c7:da:c7:0b:f5:e5:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Validity
Not Before: Oct 19 05:01:36 2025 GMT
Not After : Oct 20 05:01:36 2025 GMT
Subject: CN=386f93534c9cb711d86140c7b6891aa64b01b309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2b:a3:1c:e6:1d:1e:69:fa:f5:83:46:4a:1e:
21:43:fe:fb:ef:65:4e:d9:d0:c8:80:cd:dd:7c:5d:
07:b3:3a:ab:98:81:89:c5:65:e2:aa:5a:db:b2:40:
40:6e:7a:6f:bd:59:d6:4a:5c:a9:4d:49:ce:24:72:
57:0d:1a:91:cf:e8:6b:c5:f2:70:4f:7f:52:06:b9:
3b:0b:34:8b:56:db:e7:58:d2:6f:fa:eb:5d:bd:36:
6c:c6:43:d9:38:90:30:30:a1:80:a1:33:e1:5a:e6:
cd:03:57:5d:df:99:ae:4f:67:9c:01:c8:ec:c8:b5:
cb:4b:26:96:14:78:5d:57:a1:fa:f1:07:d0:ec:94:
5a:97:5f:51:cd:f5:5a:42:ba:38:72:67:57:d6:08:
a0:20:21:c9:1b:2d:72:48:b2:49:42:2a:8a:f8:9f:
ab:29:cb:4c:53:27:8f:c0:4a:f3:49:1c:ca:f1:a9:
6c:fd:0b:0b:e9:f2:9d:90:d4:a3:fa:d5:74:9b:23:
38:73:c1:4b:a3:95:c1:95:23:30:29:4c:44:8d:c4:
2d:96:0c:5e:e4:7d:8e:1e:5e:0f:d8:56:b0:6c:bd:
23:d1:28:ea:21:26:b4:0a:47:aa:aa:6d:55:58:67:
48:1a:c8:cf:4b:15:14:d2:4c:ec:0c:06:7c:ce:1e:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:93:53:4C:9C:B7:11:D8:61:40:C7:B6:89:1A:A6:4B:01:B3:09
X509v3 Authority Key Identifier:
keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:94:0c:5c:00:ad:3d:4e:76:53:53:25:62:8d:cd:58:d3:1d:
57:eb:91:c1:2d:76:0e:ee:b5:9c:e0:72:fe:05:a2:fa:95:9a:
0b:28:2f:f4:38:d0:8a:4c:f8:2b:fe:67:f0:f5:f0:88:29:1b:
d9:64:6d:2c:61:a6:ea:52:29:6b:b1:5e:38:30:ce:7b:29:8f:
85:ee:2e:1a:2b:86:0e:f9:32:fb:d3:ce:2d:ab:92:69:5a:81:
2a:12:67:09:d8:ba:d1:fa:a5:a5:3a:88:77:88:e7:78:28:00:
e6:76:06:9e:ad:1f:3c:c3:3d:52:e8:17:33:a5:05:28:83:5f:
4d:2d:11:6c:77:89:93:52:7d:7c:58:5c:27:c2:e1:d1:e3:31:
4a:59:c3:be:be:81:d7:64:00:6d:c0:45:75:8f:f6:0c:2f:c7:
f0:db:4d:49:c2:ec:5d:2f:83:50:82:f6:8f:0c:71:c3:4b:66:
28:c6:7d:c3:2c:7f:14:ee:f6:66:bd:ee:c6:28:3c:85:13:91:
6f:21:15:cb:9f:a2:8f:bd:fd:2e:34:af:ad:fc:9c:fb:5a:00:
27:a7:bd:7c:77:e6:c4:42:be:dd:76:62:ee:39:63:80:84:c0:
5a:62:ec:ea:a0:89:6e:28:d4:c6:f5:e8:c0:ac:21:4e:84:86:
33:7c:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:23 2025 by rpki-client