Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json)
Hash identifier: OtTYhNsSgK9lAhsohtX2bhMgLWIEM7Wcz42+BFeMVW4=
Subject key identifier: 3A:96:A7:9B:E0:77:AC:A9:91:E2:12:98:0E:FE:3B:22:A1:19:71:48
Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Certificate serial: 0199FCC67F2AF69A73FC00D0C3768A0E4BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
Manifest number: 1561
Signing time: Sun 19 Oct 2025 14:01:31 +0000
Manifest this update: Sun 19 Oct 2025 14:01:31 +0000
Manifest next update: Mon 20 Oct 2025 14:01:31 +0000
Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: wTWmPCfQpTyuUGYSGoSvNW8Lgb9BtBw3um8VEFmuv/8=)
2: nP21AC5prEFloL4b-rvpds4zVIk.roa (hash: uwmza4+iHSYo9L5fLNkaMpr9S0IJA2DNF48xVtFHmFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7f:2a:f6:9a:73:fc:00:d0:c3:76:8a:0e:4b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Validity
Not Before: Oct 19 14:01:31 2025 GMT
Not After : Oct 20 14:01:31 2025 GMT
Subject: CN=3a96a79be077aca991e212980efe3b22a1197148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:cc:f7:fa:c2:97:da:f0:5a:0b:ab:67:19:
37:75:0d:3d:c1:25:3b:6d:f9:36:f0:3c:6c:59:c2:
4c:c2:23:4e:0b:31:e1:04:e2:44:28:3b:8f:6b:4b:
d0:14:f6:d6:df:cc:06:7d:c6:d3:95:e3:29:90:1d:
47:99:9e:0e:ab:97:91:ce:ee:12:36:d1:3b:de:87:
d2:c8:c8:c0:80:fc:61:a1:7f:c3:f6:b2:12:55:d9:
06:45:78:b3:08:66:e9:2b:86:bd:ec:58:e8:bf:c0:
a8:c2:99:05:fd:50:80:e6:c7:f2:df:cc:a0:e0:a8:
b7:7a:40:f2:c1:c8:cb:35:03:c0:12:fa:be:47:fe:
87:a1:a7:cd:93:64:51:96:c9:64:1b:4d:63:7b:d3:
de:33:21:9e:f6:77:03:04:26:4b:31:73:7d:49:91:
a9:0f:cb:5f:da:91:7d:0b:c5:2b:32:86:3f:bd:3c:
db:a4:db:77:09:ee:88:c6:0d:04:4c:0e:22:48:7e:
fd:f9:2a:d7:83:ae:10:e0:ce:68:71:13:7f:7a:f7:
e7:3e:0b:1c:91:81:39:9e:e8:02:13:a2:a1:96:73:
c8:04:5c:ba:79:46:b7:26:64:29:05:d5:02:90:b9:
33:89:2c:28:8a:c4:ed:4d:31:fe:4c:2f:a6:02:6b:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:A7:9B:E0:77:AC:A9:91:E2:12:98:0E:FE:3B:22:A1:19:71:48
X509v3 Authority Key Identifier:
keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a8:e6:17:94:94:5b:3c:1a:e7:67:5e:60:8c:f6:3d:a8:45:
83:19:bf:24:cb:ab:02:76:cc:50:b6:ef:5b:b8:15:12:c1:b0:
38:01:bc:a8:c0:03:00:5c:a8:0f:d7:f4:08:a2:5a:bb:78:88:
15:e4:d3:15:42:4d:f6:75:80:58:c7:4c:a1:78:db:08:59:ab:
ef:2f:bd:ce:61:cf:94:56:aa:75:22:fd:c2:b9:a0:d9:e0:62:
5c:88:c6:3d:10:74:59:94:5f:0f:09:b9:e2:df:d3:51:03:90:
46:f5:9e:66:de:58:ac:40:38:20:23:fc:cf:ea:8b:5d:74:ee:
5f:02:d9:ab:35:9b:9b:09:c1:81:08:3a:a2:c9:cf:c4:d0:76:
63:e5:85:a9:20:f5:c1:89:f9:db:07:15:34:ae:a5:e1:1c:62:
7a:9b:6c:77:77:f2:a5:3a:35:b2:6e:30:e5:d7:51:83:64:64:
f5:f4:96:f4:68:50:fe:e2:75:01:50:41:3a:0a:0c:e9:75:8d:
a4:3c:ed:41:f2:2a:00:6e:8a:a3:18:b4:59:4a:22:3a:d4:de:
a0:01:ae:b6:af:23:62:5e:7f:df:8d:7c:c0:d8:be:6a:a6:1b:
22:5c:f3:83:b5:33:82:7a:8a:5c:e7:10:80:f7:7a:a4:99:86:
08:6a:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:21 2025 by rpki-client