Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json)
Hash identifier: +u9mV78SRGE66wQgknV8jWw+5N6V3J7x6CM0HUDwOuw=
Subject key identifier: F7:1D:9F:67:55:EC:C0:A4:B6:55:71:38:96:73:0B:80:D9:A0:68:C4
Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Certificate serial: 0197B77CA045CA28EF1B172F9EC9A7622E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
Manifest number: 1434
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: x5pe3oFiVVTX6I80XCwGW7IbE+HcxEr/E4xXBtFRTVU=)
2: nP21AC5prEFloL4b-rvpds4zVIk.roa (hash: uwmza4+iHSYo9L5fLNkaMpr9S0IJA2DNF48xVtFHmFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a0:45:ca:28:ef:1b:17:2f:9e:c9:a7:62:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=f71d9f6755ecc0a4b655713896730b80d9a068c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:18:a1:2c:5c:a6:f7:38:43:72:0b:99:8b:
5b:72:15:c1:0f:03:ca:f6:98:ae:f0:45:f8:36:72:
b9:d4:04:64:5c:27:a8:19:fe:4f:5e:27:b8:5f:fd:
5e:d5:80:f1:b8:e6:f0:e6:89:cb:2f:bb:9f:57:44:
c8:a4:b4:48:6e:7e:14:bd:15:28:ce:91:65:b6:e5:
77:d7:38:20:6a:fb:cf:56:4c:fa:4b:52:8a:65:86:
74:6d:a5:ef:2c:fa:ce:5b:1f:16:dc:74:84:64:b9:
5b:2c:e8:ea:a1:2f:06:2a:1d:52:79:98:68:fa:22:
d6:28:0d:87:bb:27:3a:09:32:2c:06:53:65:8b:63:
75:47:f0:6f:79:5d:28:1d:9a:60:eb:10:10:82:82:
76:dc:7e:8b:51:f2:dd:fc:e2:c2:de:da:f5:5a:46:
7f:9b:db:50:3a:f3:d1:4e:a6:0a:06:e5:71:18:d3:
c7:7b:8b:ac:d3:6d:5a:fa:2d:91:2f:86:46:fe:99:
9a:d1:20:c6:d6:f2:3b:32:47:cb:5f:de:12:9f:f9:
c0:c3:b3:85:ef:39:3c:d6:d4:f7:e7:e9:11:d4:36:
a5:52:53:90:f3:d0:18:f7:a7:1d:e9:a8:d6:89:2f:
f0:79:88:8d:0d:5f:ad:88:51:75:15:5a:ad:37:36:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1D:9F:67:55:EC:C0:A4:B6:55:71:38:96:73:0B:80:D9:A0:68:C4
X509v3 Authority Key Identifier:
keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cd:e2:02:3b:3e:ff:0a:eb:73:c0:1f:b2:b8:5b:16:2a:77:
3e:7c:86:e7:80:00:9e:6c:44:c7:c8:04:fb:0a:b3:5a:d1:e7:
bd:99:d6:4e:bb:fd:04:f3:d6:69:ad:95:be:8f:bb:97:ad:5b:
87:9f:6d:db:a0:13:2b:5e:37:aa:ab:92:0e:0b:f5:63:cc:d4:
03:31:ef:c1:18:b5:89:21:b8:93:38:af:bd:89:7b:f0:17:54:
0e:6d:24:b4:e4:07:3f:1d:44:d5:6b:7f:03:96:52:6c:44:0a:
76:77:2e:ba:62:c1:48:49:59:f3:bc:11:0a:73:1f:e6:91:b3:
2a:d3:05:84:0a:76:2d:68:3e:44:36:6b:ed:65:14:1a:e3:97:
af:1c:d9:68:78:e8:75:13:1d:46:5b:66:60:5f:52:28:cf:29:
45:9a:6d:af:83:68:74:af:af:56:18:1d:de:e5:44:6f:a4:7e:
d0:32:12:d4:78:ab:2b:4b:93:87:4d:b7:f6:d2:b3:ff:58:01:
d2:9c:4b:ca:89:a9:a0:bb:dd:06:18:45:4b:82:0d:3e:59:ea:
89:66:a3:86:86:dc:cd:6f:4a:51:f6:f7:43:1d:37:07:c5:96:
4f:c0:dd:27:64:1f:d8:06:4a:44:22:7d:2e:7d:e3:b1:6d:77:
1b:25:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:03 2025 by rpki-client