Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: TAntsIYgy0Fsx+w4k4x8Irh7BVyDBIC0/qj5V60aSYc=
Subject key identifier: 5F:68:57:3F:A5:A2:4B:0E:50:5A:40:B1:7A:46:11:76:8B:9A:27:06
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 0199FFC8C08DC60B763A6D9052E0ED10D8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 1097
Signing time: Mon 20 Oct 2025 04:02:50 +0000
Manifest this update: Mon 20 Oct 2025 04:02:50 +0000
Manifest next update: Tue 21 Oct 2025 04:02:50 +0000
Files and hashes: 1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: QXAFjdDA0HXYz3z1JEJRP0DOkqQSAUJdJnnmnV4wqMg=)
2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=)
3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c0:8d:c6:0b:76:3a:6d:90:52:e0:ed:10:d8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Oct 20 04:02:50 2025 GMT
Not After : Oct 21 04:02:50 2025 GMT
Subject: CN=5f68573fa5a24b0e505a40b17a4611768b9a2706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:b9:30:f9:5e:6d:50:d8:0b:32:8d:36:1a:
01:1a:82:9a:c8:f1:ae:d3:1f:4b:22:38:94:8b:9f:
ff:db:7b:35:2f:fd:a6:25:ad:a1:b9:c8:bd:35:1b:
b6:86:b8:c3:e9:5f:c7:55:5d:8f:b9:d7:75:1c:1c:
29:34:10:19:dc:98:b4:22:fa:7d:d4:1b:40:11:a3:
a7:84:c0:a9:6e:68:ec:c8:01:d9:81:07:c4:aa:f6:
f1:00:8b:75:40:56:37:74:a6:c2:fe:dc:df:a9:21:
e7:92:fa:41:5a:14:ba:57:ee:bb:24:33:b8:34:a6:
d3:24:1a:67:b6:44:d1:ca:2b:33:31:b8:a6:79:55:
d4:b9:8e:63:c5:06:31:1f:56:5f:c8:93:ed:3d:d4:
9c:d2:8f:c1:a5:2d:52:e3:25:cb:f9:79:d5:a2:5c:
5f:83:a7:4b:13:57:60:d4:e0:eb:d4:25:a0:79:8c:
f4:76:f6:32:18:43:7f:14:c7:60:d6:93:28:65:af:
63:15:d2:43:64:b8:bb:ab:66:a0:9c:f7:e3:fc:a7:
a9:89:e9:6d:22:73:c1:62:13:6a:15:90:5d:d5:10:
cd:13:70:f5:e9:ab:2a:e2:ac:3f:0c:15:d5:20:b7:
1c:38:7a:ac:ca:a6:33:c1:57:05:40:30:a0:84:e7:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:68:57:3F:A5:A2:4B:0E:50:5A:40:B1:7A:46:11:76:8B:9A:27:06
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d6:75:55:ef:24:d9:16:24:01:2d:7d:7d:41:67:5e:36:59:
6c:ed:15:c7:24:8e:ea:eb:c2:e1:3b:ec:10:0f:e5:cc:5b:45:
34:96:8d:1b:59:08:96:5f:39:a4:60:aa:f4:af:37:85:ca:b6:
aa:cc:75:08:47:34:0c:cf:2b:36:0f:27:fb:66:11:bd:2b:93:
c4:47:da:52:57:af:9c:ff:f7:07:9e:98:5f:8f:19:b7:c2:c4:
d8:ed:99:35:22:22:81:e1:7a:d8:20:66:54:bd:32:e0:9d:af:
0d:3b:1f:dd:9f:fd:04:11:aa:b4:b2:30:44:1a:1e:f2:17:9c:
de:ea:4b:64:e6:07:ec:6b:76:f8:d3:e3:11:64:75:71:65:b3:
6f:3b:d1:8c:c8:90:50:55:bf:bb:7d:d2:a9:2f:3b:9d:34:a7:
f9:ed:ff:0b:7e:de:98:85:55:d4:27:64:3a:1d:78:8f:71:44:
da:d4:6b:27:34:98:a9:47:6c:1f:b8:fc:fb:7f:1d:b3:be:92:
17:7a:26:d3:4d:2d:c7:02:4a:18:9f:eb:cd:8a:15:8f:3c:e3:
fd:78:54:f8:a0:97:48:b6:27:97:66:6b:89:a4:22:20:06:4d:
4a:0d:18:ae:44:7a:78:60:c5:96:74:82:e4:6e:40:a8:ba:3e:
14:38:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:16 2025 by rpki-client