Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: KGSFavi4MhUugVs91FTvkbATLM4laBydg5HR7BsP76I=
Subject key identifier: 66:0F:7E:A1:72:4C:DC:94:43:E4:CA:F9:AA:B2:53:DE:DF:A6:3F:5F
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 0197C426D76954EF9F35660FEFBC7D44EDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 0566
Signing time: Tue 01 Jul 2025 04:02:48 +0000
Manifest this update: Tue 01 Jul 2025 04:02:48 +0000
Manifest next update: Wed 02 Jul 2025 04:02:48 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: C9r53ho4a6Ko4GiNnHi3orS2sSbKyavj03AhG8FwMEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:d7:69:54:ef:9f:35:66:0f:ef:bc:7d:44:ed:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Jul 1 04:02:48 2025 GMT
Not After : Jul 2 04:02:48 2025 GMT
Subject: CN=660f7ea1724cdc9443e4caf9aab253dedfa63f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:dd:98:c3:9b:10:53:32:41:45:7e:09:be:
8d:81:6b:2e:e8:50:e6:79:5a:6d:8e:46:d6:01:7d:
3f:9d:6a:4d:7c:12:2e:c3:44:30:33:62:d9:dd:99:
49:9d:47:55:6d:ad:d4:cc:17:e9:db:1e:0d:82:ea:
0d:4b:cf:df:df:da:0d:cd:50:fa:bd:19:8a:95:b5:
f0:bc:0c:7f:48:aa:75:66:c5:a1:4c:c8:ea:73:6d:
df:03:89:22:f0:d8:53:19:93:6f:5c:c1:87:95:36:
06:e1:30:61:da:96:38:f7:33:2b:60:11:58:f5:72:
90:8c:3c:a8:05:5d:f4:58:b2:38:68:85:7e:09:ec:
df:17:23:b6:a5:4c:28:98:04:f1:62:b7:8e:24:c0:
1a:4a:59:22:de:5b:fa:b7:41:23:af:5c:c5:3b:73:
27:4d:be:df:b6:fc:51:cb:8a:20:27:8d:f3:13:95:
ea:16:6d:2f:be:cf:84:11:43:f2:ab:49:dc:de:5d:
30:e5:21:98:dc:e9:49:60:6e:a5:60:f7:c2:fe:79:
d6:35:bd:f5:c8:8f:ff:e4:ac:3e:67:bc:8c:12:0b:
5e:58:b3:b3:f0:da:79:4d:ec:8b:e2:66:7a:04:d0:
43:91:ab:18:97:5f:42:2e:ed:33:07:4c:9a:54:e2:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:7E:A1:72:4C:DC:94:43:E4:CA:F9:AA:B2:53:DE:DF:A6:3F:5F
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:29:7b:e9:ce:da:1b:f7:0c:b4:c5:f4:db:da:93:68:6b:00:
5f:6d:a0:38:4e:21:18:fb:f8:02:e9:e9:fc:9f:b0:ae:0a:d1:
cd:65:d4:92:0f:77:5c:da:ee:a2:06:d5:f3:67:26:02:0d:75:
1c:72:51:5c:da:6e:02:b7:64:a9:4d:ea:e2:3f:c8:61:d2:b3:
27:b7:b8:7c:e4:b4:26:1c:51:60:f3:aa:91:86:88:16:90:b9:
a1:92:67:c0:6b:a4:0f:cb:a5:64:1e:04:fa:86:bc:7c:0b:d3:
49:74:ba:a7:f2:31:39:d0:3b:2d:0a:6a:3b:3e:50:50:ec:05:
07:a8:e9:b3:3e:74:19:a2:db:dd:4b:d2:88:e3:f5:2e:61:e5:
51:5c:ff:e9:9b:35:41:b7:3c:6e:cb:0d:5d:93:de:40:58:3f:
5f:2a:e7:47:40:8d:91:eb:fe:7b:d6:9a:73:11:f6:74:17:11:
38:7d:3f:0b:3c:e7:1c:41:8c:fa:c9:16:27:cf:a2:e2:16:d0:
47:a2:8a:47:64:5d:5a:7b:6e:5c:61:b1:43:df:23:3c:bd:54:
1e:ee:b1:f6:d2:ed:fc:67:b7:7a:3c:c7:09:0d:45:f6:bf:29:
68:12:bc:3e:5c:b7:d9:d1:93:81:10:d9:d3:79:cb:5b:de:6c:
47:99:94:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJtdpVO+fNWYP77x9RO3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDI5YWRhYzQ0MGMwNjM3MzIwNDVkYWViY2MzZDkxNTJl
MzVjYmIwHhcNMjUwNzAxMDQwMjQ4WhcNMjUwNzAyMDQwMjQ4WjAzMTEwLwYDVQQD
Eyg2NjBmN2VhMTcyNGNkYzk0NDNlNGNhZjlhYWIyNTNkZWRmYTYzZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaTdmMObEFMyQUV+Cb6NgWsu6FDm
eVptjkbWAX0/nWpNfBIuw0QwM2LZ3ZlJnUdVba3UzBfp2x4NguoNS8/f39oNzVD6
vRmKlbXwvAx/SKp1ZsWhTMjqc23fA4ki8NhTGZNvXMGHlTYG4TBh2pY49zMrYBFY
9XKQjDyoBV30WLI4aIV+CezfFyO2pUwomATxYreOJMAaSlki3lv6t0Ejr1zFO3Mn
Tb7ftvxRy4ogJ43zE5XqFm0vvs+EEUPyq0nc3l0w5SGY3OlJYG6lYPfC/nnWNb31
yI//5Kw+Z7yMEgteWLOz8Np5TeyL4mZ6BNBDkasYl19CLu0zB0yaVOKc9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYPfqFyTNyUQ+TK+aqyU97fpj9fMB8GA1UdIwQY
MBaAFElCmtrEQMBjcyBF2uvMPZFS41y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMt
ZWE5NDVkNjA0YjBlLzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMtZWE5NDVkNjA0YjBl
LzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCl76c7a
G/cMtMX029qTaGsAX22gOE4hGPv4Aunp/J+wrgrRzWXUkg93XNruogbV82cmAg11
HHJRXNpuArdkqU3q4j/IYdKzJ7e4fOS0JhxRYPOqkYaIFpC5oZJnwGukD8ulZB4E
+oa8fAvTSXS6p/IxOdA7LQpqOz5QUOwFB6jpsz50GaLb3UvSiOP1LmHlUVz/6Zs1
Qbc8bssNXZPeQFg/XyrnR0CNkev+e9aacxH2dBcROH0/CzznHEGM+skWJ8+i4hbQ
R6KKR2RdWntuXGGxQ98jPL1UHu6x9tLt/Ge3ejzHCQ1F9r8paBK8Ply32dGTgRDZ
03nLW95sR5mUtg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 11:42:03 2025 by rpki-client