Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: KS8ZDsxUqEfjpsm5VcQNRdCPSOo7gpTsc0q1tMAwRGA=
Subject key identifier: B3:7A:61:6B:82:71:96:7E:CF:FD:EE:CA:04:36:96:87:13:7F:96:28
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 0199FBEAD21673B79AE9F6F079F1562F9A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 068C
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: P0Ax1htjKOvLmPqnXHjVvg1KyQSenUJVSOU/0l3uh74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d2:16:73:b7:9a:e9:f6:f0:79:f1:56:2f:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=b37a616b8271967ecffdeeca04369687137f9628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:a1:06:af:2e:39:15:6b:e2:b1:de:c4:8e:
fe:e7:c5:9f:70:78:84:43:35:fe:dc:53:c4:48:69:
78:dc:59:80:c2:b4:44:53:02:32:51:61:15:84:55:
84:b9:5a:f4:d4:bd:5a:1f:96:cc:c0:1d:6d:18:d6:
35:b1:6e:59:4a:35:57:0f:0c:ab:69:d1:f1:e6:c4:
86:64:99:c2:50:d7:a4:d7:92:0f:1e:38:aa:23:4b:
70:32:ba:5e:69:43:26:a9:ea:24:a2:3e:91:0f:ba:
e4:50:35:56:07:91:01:e2:7e:db:ae:c9:f4:6b:32:
38:30:32:76:cc:71:43:f0:24:e9:5c:0b:9c:7b:74:
05:c1:9c:04:45:43:f7:a4:28:ea:67:ce:69:b6:ca:
13:11:2f:2d:27:5d:f5:0b:81:d1:8a:91:dd:eb:8c:
2a:c4:51:1c:83:15:5a:ac:95:61:83:0d:95:68:17:
53:57:b0:09:d3:95:de:83:5d:29:53:a5:e0:64:42:
6a:fc:84:76:4e:9e:1d:77:16:1b:bd:51:04:24:1d:
a3:5a:4e:a4:bb:54:6e:7f:d2:78:8c:92:5e:1a:a1:
63:ac:aa:54:63:01:55:e1:58:57:3b:a6:02:42:6d:
68:50:4a:e3:ce:4d:a6:e5:0a:98:93:bf:1b:15:6c:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:61:6B:82:71:96:7E:CF:FD:EE:CA:04:36:96:87:13:7F:96:28
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2d:3e:14:b2:4c:8a:57:0c:d6:67:3b:07:bd:ad:89:25:26:
5d:ef:8b:f1:c4:c6:14:5b:bd:8d:ee:89:10:71:0f:18:3b:c5:
72:a0:66:b2:6c:79:02:3a:59:cb:51:43:e2:b6:b5:20:02:b3:
3d:24:50:73:11:ea:56:9a:0a:ff:c0:09:5a:a8:fb:cd:96:00:
ba:13:9c:f6:f0:5f:11:e5:7f:f8:22:c6:7e:46:2a:ff:94:38:
c6:2a:f8:74:dd:53:3a:56:38:73:4a:f2:3b:9e:53:d8:a2:38:
ed:f6:f2:5b:d4:e4:e0:fa:83:10:9c:9b:26:9f:6a:16:16:1c:
65:13:38:89:f5:bf:f5:90:55:fd:36:80:28:21:1a:e1:be:4f:
ce:ca:69:58:1a:da:5b:40:b0:ed:d5:01:31:2e:ad:55:29:f0:
4b:77:ba:05:48:45:59:de:e6:19:4f:76:86:fa:d0:d6:01:3a:
0a:0b:3a:e9:6b:eb:63:93:1e:70:86:51:25:a0:70:7a:5c:9b:
1d:07:48:39:62:50:b6:06:2d:6e:7b:e4:f5:5b:98:34:7d:ac:
cb:9f:da:59:e8:e1:2b:af:e7:58:cd:b6:b6:41:79:62:7a:07:
91:ed:5a:64:75:c0:85:31:7e:01:60:9b:8c:e6:ef:04:fc:c9:
b8:ae:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:56 2025 by rpki-client