Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
File: Suvuj-dUnRqa5Vnl2ggWQunqwng.mft (raw, json)
Hash identifier: BBswxfFaDq8BRfyFReKHlcQ9Z63f2MiTC8obYOANtv8=
Subject key identifier: 91:08:75:62:F2:DE:45:8C:49:B3:C7:44:F3:9E:0F:7A:EC:FF:E1:C9
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial: 0197B6D7BC6D8090282014BF4F6A18C9ABD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: Ju4TE0Do45F3_xd1BsQ_7bnzoxo.roa (hash: 9jLkighzDSTRcfJGZNkRcSTPX467dcg1LQMrucLnEF8=)
2: KKZ3H1Ig1Ai_kXp1maqntJqKS9E.roa (hash: VljnOwALwBLtSWbQ+Tok7KNQehan+9sMOUJ88vhoF9I=)
3: Suvuj-dUnRqa5Vnl2ggWQunqwng.crl (hash: +B1oPysqnNegrYMLiYmmmJewcqq76r+0iT3oI7doTGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bc:6d:80:90:28:20:14:bf:4f:6a:18:c9:ab:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=91087562f2de458c49b3c744f39e0f7aecffe1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:1c:2d:ef:da:79:d1:97:97:4f:49:e6:1c:
4e:de:e1:08:52:c8:d6:91:8e:23:98:00:a0:94:d2:
43:3b:48:31:01:bb:82:46:7c:9c:45:84:73:73:f0:
29:3e:d0:f9:82:66:bb:b6:a5:77:d6:ae:fe:fa:d7:
f0:3f:9f:71:da:77:83:17:2e:1f:2a:c7:d2:5b:1e:
e9:24:9a:0e:90:71:7f:e7:b4:4a:4b:eb:b9:8d:86:
26:aa:fa:7c:fe:02:7c:39:db:7b:35:2c:40:8f:d4:
9f:d9:b5:5b:35:96:b6:c5:cf:ec:76:43:57:a6:b9:
19:55:24:b3:88:1d:60:50:17:c0:3a:1d:bb:b4:9d:
cd:ee:1b:ba:84:10:39:bb:18:a9:e0:19:cb:44:ca:
89:86:6f:12:11:ca:36:84:39:f7:f2:1a:05:66:62:
8c:66:dc:02:71:32:8d:ac:e7:db:72:cf:5f:cb:eb:
8e:e6:bf:32:a8:1a:5a:27:08:78:68:64:30:98:59:
62:35:63:f6:df:06:2e:7a:92:b6:b8:4f:a0:5d:e2:
ea:38:79:30:13:33:09:72:c1:03:26:a7:fd:bd:f8:
74:9d:2e:91:e5:68:30:96:95:a1:11:e8:ce:7f:b8:
05:40:98:bf:6c:9e:52:39:66:62:0d:75:51:ce:70:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:75:62:F2:DE:45:8C:49:B3:C7:44:F3:9E:0F:7A:EC:FF:E1:C9
X509v3 Authority Key Identifier:
keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bf:43:9b:6b:0d:ac:c0:8a:12:0d:3f:f7:d1:04:17:69:5a:
1e:31:a0:43:e7:a6:84:c9:82:29:3d:6c:1c:be:e8:7c:4f:a9:
de:a6:98:33:5f:ad:9b:b3:89:c1:f1:50:c5:3b:48:22:00:73:
6b:ee:df:33:05:b5:31:74:04:85:47:39:d6:69:0a:09:97:1a:
e9:d2:a4:dd:99:9e:31:92:58:25:07:16:bd:51:35:3c:05:5a:
81:a1:97:db:4d:09:c9:13:fc:eb:3a:87:dc:3a:e3:d6:8f:a2:
b4:f7:3b:28:1f:ae:d3:f9:e7:38:3c:fc:d9:d4:52:0b:0d:08:
2a:d8:e6:08:4d:ad:00:c0:61:d0:b2:7a:cd:f4:47:03:23:00:
22:7b:7c:f6:f3:fd:ec:31:55:8a:52:a5:e0:54:b2:32:9a:89:
f9:d9:a8:6c:a0:a0:d9:52:ae:e4:bc:04:48:a9:2c:1f:b6:d2:
f3:0c:ef:8a:4f:fc:aa:7c:cb:31:da:70:0b:74:57:62:6c:f5:
bd:3e:df:ef:e4:42:4b:65:d8:e5:f1:e1:cd:47:1a:56:42:58:
18:d0:4b:4e:20:b5:52:b6:75:39:a0:4c:58:cf:cb:b4:e0:d7:
52:dc:69:b2:c5:5b:72:2b:ec:7d:ed:a7:25:ee:85:f1:ac:28:
86:c6:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:46 2025 by rpki-client