Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: avTiKHbNdIaq+9gs7A96ramy85tHACrhs2epxFQS0R8=
Subject key identifier: EF:26:DA:A0:84:83:A4:E1:44:D1:A1:9A:92:DB:EE:EE:D4:D5:19:51
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 0199FC5900069CC97A7B073E2B1F6B7B200A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: kOJj1Lk9YIdTDavQhxJvC2auOCfg5DUy34LUutAb1OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:00:06:9c:c9:7a:7b:07:3e:2b:1f:6b:7b:20:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=ef26daa08483a4e144d1a19a92dbeeeed4d51951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:5a:c1:e7:90:76:5f:60:3f:64:28:c5:63:
44:32:dc:8d:d5:c0:4f:fb:44:74:42:63:b4:fb:55:
8e:22:e9:5b:19:e2:d0:26:86:7b:15:d7:d7:4a:7f:
f6:5d:3d:d4:0e:f3:3b:c7:65:9d:4b:6b:7a:ec:29:
ab:ae:61:a9:f9:e5:3e:38:3a:9c:0d:b2:74:98:59:
7d:c2:25:f4:8a:3f:a8:15:71:2c:7f:f6:c9:0b:9a:
10:e4:89:2b:14:b0:ab:a3:70:17:c8:a3:b4:39:49:
1d:c8:31:77:c5:e3:6c:6c:ec:d9:7f:b4:29:90:3a:
e5:cd:8f:15:22:79:7d:04:12:c7:d7:1b:b6:b4:b0:
81:3e:e3:a0:7c:4b:d8:b9:14:78:3a:a6:db:f8:2c:
b1:e7:fb:3f:e4:9e:7f:1e:7e:f5:f9:38:76:52:41:
43:01:f1:b9:4b:c1:23:8d:02:aa:57:a9:4a:80:eb:
96:eb:db:88:70:21:25:ca:7f:70:25:a5:f0:9e:c5:
c6:4b:96:0a:11:71:33:01:62:18:01:1b:c1:dd:2d:
49:a9:89:3a:68:08:5c:6e:d0:56:02:a2:ca:0e:1d:
3f:91:77:7e:67:77:d3:78:49:c2:5f:dd:ba:63:bc:
21:fb:ff:95:5c:e5:1c:cc:17:68:4b:b2:77:c8:5f:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:DA:A0:84:83:A4:E1:44:D1:A1:9A:92:DB:EE:EE:D4:D5:19:51
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:36:2a:18:09:dc:d5:ca:18:c3:ce:8d:bb:80:31:9f:45:0c:
14:00:e4:74:bf:e4:ee:da:08:06:e2:bf:ce:a0:87:26:ad:0e:
3d:b6:2c:d6:69:aa:d5:d6:38:10:5e:8d:8d:9a:6a:e5:9e:d3:
aa:78:c1:e2:46:33:4c:42:6d:fa:b0:91:5f:0e:6c:22:d1:ab:
1c:9f:09:07:85:a1:48:27:df:50:b2:12:36:09:51:61:92:d3:
b1:c0:2b:a5:dd:a6:63:5d:97:e2:35:51:d8:37:29:30:97:bd:
f8:09:a7:9a:85:b1:af:e8:86:7a:70:3a:2c:f3:b5:2e:97:19:
f0:78:05:55:bc:af:81:00:5b:4d:55:81:30:4f:ea:6a:ae:f6:
c2:17:ed:48:0f:1b:26:02:d3:69:f0:c2:c2:87:30:ee:5b:16:
d3:b6:09:83:53:2c:b7:f9:a7:0e:6d:5b:41:36:8d:4c:ef:ee:
fc:a9:7d:7a:cb:97:4a:e0:1a:85:f0:26:5c:ad:16:1b:bc:c4:
b0:5a:77:79:ac:24:a4:16:fb:75:b2:1e:1b:5d:49:43:c1:d3:
31:0c:69:b1:8c:a5:56:30:42:c8:96:21:ea:0d:ad:96:42:9d:
5e:67:92:39:f9:ce:6b:c6:ea:db:17:99:4e:f3:2a:1d:20:22:
71:d6:bc:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQAGnMl6ewc+Kx9reyAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZWZjZmVkNTFmZjE1OGZiZTY4Y2NkNjBiN2IzOWJlNWYz
ZWFlMjAwHhcNMjUxMDE5MTIwMTU1WhcNMjUxMDIwMTIwMTU1WjAzMTEwLwYDVQQD
EyhlZjI2ZGFhMDg0ODNhNGUxNDRkMWExOWE5MmRiZWVlZWQ0ZDUxOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19RaweeQdl9gP2QoxWNEMtyN1cBP
+0R0QmO0+1WOIulbGeLQJoZ7FdfXSn/2XT3UDvM7x2WdS2t67CmrrmGp+eU+ODqc
DbJ0mFl9wiX0ij+oFXEsf/bJC5oQ5IkrFLCro3AXyKO0OUkdyDF3xeNsbOzZf7Qp
kDrlzY8VInl9BBLH1xu2tLCBPuOgfEvYuRR4Oqbb+Cyx5/s/5J5/Hn71+Th2UkFD
AfG5S8EjjQKqV6lKgOuW69uIcCElyn9wJaXwnsXGS5YKEXEzAWIYARvB3S1JqYk6
aAhcbtBWAqLKDh0/kXd+Z3fTeEnCX926Y7wh+/+VXOUczBdoS7J3yF+Q/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8m2qCEg6ThRNGhmpLb7u7U1RlRMB8GA1UdIwQY
MBaAFErvz+1R/xWPvmjM1gt7Ob5fPq4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0Mzct
ZGI2NjcxYWM3NjcyLzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0MzctZGI2NjcxYWM3Njcy
LzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDYqGAnc
1coYw86Nu4Axn0UMFADkdL/k7toIBuK/zqCHJq0OPbYs1mmq1dY4EF6NjZpq5Z7T
qnjB4kYzTEJt+rCRXw5sItGrHJ8JB4WhSCffULISNglRYZLTscArpd2mY12X4jVR
2DcpMJe9+AmnmoWxr+iGenA6LPO1LpcZ8HgFVbyvgQBbTVWBME/qaq72whftSA8b
JgLTafDCwocw7lsW07YJg1Mst/mnDm1bQTaNTO/u/Kl9esuXSuAahfAmXK0WG7zE
sFp3eawkpBb7dbIeG11JQ8HTMQxpsYylVjBCyJYh6g2tlkKdXmeSOfnOa8bq2xeZ
TvMqHSAicda8/A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:05 2025 by rpki-client