Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: muEl91CGYI+yLeDhqyzKakmOvO0oCNFR92fjOu6Lz20=
Subject key identifier: 5B:83:FB:67:6C:3A:C6:51:21:5D:EB:E2:5B:DC:17:D1:D9:BC:61:A4
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 0196CEAAE3AC7608CA35B8F1CDCF75CBD4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 04E7
Signing time: Wed 14 May 2025 12:00:27 +0000
Manifest this update: Wed 14 May 2025 12:00:27 +0000
Manifest next update: Thu 15 May 2025 12:00:27 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: R5ZBzSe2jhB1CToFl4FghkUX7zEICO7Tp1EblEGmHzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:aa:e3:ac:76:08:ca:35:b8:f1:cd:cf:75:cb:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: May 14 12:00:27 2025 GMT
Not After : May 15 12:00:27 2025 GMT
Subject: CN=5b83fb676c3ac651215debe25bdc17d1d9bc61a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:f1:8b:77:65:32:26:e0:a2:e5:d9:7d:d3:
fb:8d:0e:29:53:fe:00:7b:eb:5f:19:8b:03:fd:02:
21:d1:0b:ce:5d:1f:b0:ef:b6:63:72:8a:32:e9:8b:
be:02:7f:7e:34:9d:a0:68:bc:00:0a:12:00:bd:c8:
1c:83:e2:70:79:37:8d:29:f0:ba:ea:ca:25:bd:2b:
0d:e9:86:26:44:96:b4:6e:eb:86:16:03:8c:39:ab:
da:66:4f:28:0f:45:34:9c:91:41:e5:d5:09:41:e7:
48:4c:93:25:b7:54:b0:b4:6b:5c:1b:de:86:20:ce:
cf:ef:ea:6d:a2:be:19:b1:9c:86:bb:8e:06:eb:b2:
28:aa:61:a9:ce:8e:ca:a7:3a:ba:15:0e:dc:8b:00:
36:81:f2:be:10:b8:6f:3c:08:47:5b:b5:0e:63:bf:
26:ac:6e:2b:5d:1b:a3:96:d5:6e:f9:00:7a:75:9f:
95:06:8d:49:12:02:c5:76:4b:76:34:ce:f0:61:15:
e4:4f:b4:20:03:90:b3:b3:bd:56:66:20:5f:36:ff:
87:52:7c:fc:c7:12:7d:4d:c7:7d:16:6c:10:78:63:
3f:d8:3a:61:b9:81:09:16:ab:22:d0:c9:16:da:d3:
f6:6c:97:1b:54:85:d5:fe:26:8c:8f:83:9e:da:ae:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:FB:67:6C:3A:C6:51:21:5D:EB:E2:5B:DC:17:D1:D9:BC:61:A4
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:b9:33:22:6c:1b:a4:b3:0b:11:4a:6e:25:4e:b4:5c:8b:
68:07:15:de:fa:a4:f9:fe:26:c4:8f:37:2e:bc:f9:e2:e3:bd:
9c:fa:1f:7b:51:f9:54:c1:6b:2c:b5:ca:43:da:da:c3:83:4e:
bb:23:0f:b3:64:36:77:07:ab:20:1b:9d:e9:43:a8:25:00:7a:
fe:14:ae:e5:9b:84:ce:3f:c0:11:e7:04:97:68:1a:f7:5e:c1:
e6:8a:a0:66:9a:aa:2b:19:d0:d5:0e:cd:0e:a4:ab:20:ee:05:
fa:47:d5:14:62:e3:92:67:3c:cc:67:31:98:91:3e:64:d3:a8:
11:ad:90:c3:df:27:8c:ee:e2:34:f8:1b:3b:85:62:bb:53:c0:
90:49:89:06:7c:a7:93:52:56:72:0a:86:ae:55:87:9f:0d:c0:
80:47:34:78:b8:2c:ff:31:cb:ac:44:67:ff:04:4b:5d:b7:02:
a4:72:0e:b7:95:7c:78:ff:e7:83:4b:cc:49:2d:ad:dd:2c:9f:
7f:75:d7:0e:4c:4c:32:06:f6:a3:15:52:b8:b7:48:13:35:ce:
92:92:aa:1d:55:fb:e2:ca:10:6f:76:39:d4:d9:bc:7e:55:10:
fe:ae:d0:33:b4:a2:85:a0:00:e7:7c:f5:b8:87:4b:f6:ae:45:
ca:26:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:47:13 2025 by rpki-client