Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: n2MJuh0yg5cT7wLEkK26iMY2hDd4LioGwYelEZvgTYk=
Subject key identifier: 6F:B9:58:4A:40:A6:34:9F:45:13:38:A6:09:BE:DA:00:5F:49:C2:9A
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 0198D660019C3DA5DA7BD8ACB627C9D89FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 05F4
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: sXajwHg69gXaDEcB5LwnIjRIsUIB/i4idgqMwV+Ga8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:01:9c:3d:a5:da:7b:d8:ac:b6:27:c9:d8:9f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=6fb9584a40a6349f451338a609beda005f49c29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:4c:66:fd:bb:b5:27:87:3a:d5:68:02:c6:
98:65:df:ba:f9:62:76:16:75:db:da:9a:e6:fc:3e:
8e:94:e9:87:20:36:33:d3:9d:16:b0:eb:67:ad:f8:
dd:43:fd:94:02:10:4e:cb:bb:22:6c:ec:6b:2c:5e:
90:ad:a2:24:57:40:37:f7:3a:d2:2a:8c:cf:ea:1e:
1b:53:e4:c2:3e:3b:ed:3e:56:45:90:50:54:db:ac:
3a:da:bc:dc:5a:d8:9b:e4:40:25:10:3b:3b:03:1f:
40:fa:3d:88:e1:3a:24:95:40:17:3e:47:c5:7c:5c:
bb:0c:9c:8c:da:d2:de:db:2c:d5:d4:4c:bb:d9:6a:
35:0c:69:e8:58:c8:0d:57:81:84:4e:68:63:99:70:
91:fd:24:ba:05:6f:bc:14:e7:13:0c:25:ee:2a:25:
6d:bf:08:05:34:30:58:a4:78:d5:d8:bd:e4:3e:aa:
3e:2f:b6:cd:04:4b:b3:a4:02:5e:13:a0:7b:ed:82:
7e:b8:15:33:c0:29:69:75:c7:24:0a:7b:a8:cf:9d:
16:5a:44:d2:dd:12:de:86:78:7b:90:e4:89:a1:ad:
d4:fb:bd:60:8e:6d:dd:f8:45:57:00:29:38:ee:3b:
f5:6e:59:9d:fa:43:e5:97:17:98:e6:47:74:c1:53:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:58:4A:40:A6:34:9F:45:13:38:A6:09:BE:DA:00:5F:49:C2:9A
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:85:7f:d1:c3:80:4b:b8:65:5d:89:e3:24:89:26:e2:80:23:
e1:02:90:f0:e2:6a:9c:85:a5:e1:7d:f0:86:ef:93:d5:3d:3c:
b7:56:5a:e3:4b:cb:28:fc:87:43:92:c9:6e:29:b7:18:28:99:
e5:0a:96:08:90:6f:75:3c:5c:e6:ff:b7:7d:8b:86:09:09:22:
bc:e9:ce:fa:c5:02:02:b1:49:ec:82:4a:3a:e3:a1:17:b0:66:
80:83:05:94:73:4b:37:b0:27:e9:db:58:1c:59:b5:98:95:93:
f4:e0:ad:ac:88:dc:f9:f9:45:5a:ae:12:ec:3c:9b:e2:93:10:
91:21:3d:ed:3e:38:e2:2e:04:a5:97:c3:55:61:f9:4c:c7:e6:
a1:82:cb:cc:74:76:c9:f8:98:18:ec:25:d6:26:ef:eb:85:48:
f5:22:19:d0:19:aa:ee:e9:56:e2:5e:3b:5c:aa:d8:f1:2e:b7:
60:4f:3c:f9:b2:ab:69:41:72:99:f1:4d:79:7e:46:74:57:0e:
1c:a9:39:c1:00:b7:50:53:85:9c:28:e9:2c:66:9d:1c:ef:63:
f0:d8:fb:c9:2c:5e:5a:63:01:4a:24:df:dd:3c:46:56:4c:43:
56:ef:a6:5d:2a:c5:6a:60:51:b9:02:60:72:e9:8d:9f:c5:d8:
df:a0:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:11 2025 by rpki-client