
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: 68iigYIvHT8NNMmrZqxedEhpMoWKMnfGJ0j0OcVgihM=
Subject key identifier: 58:48:1F:7D:E0:AD:BA:9D:60:B0:55:66:47:DA:9C:8A:D7:10:2D:73
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 0198D65F723D541D9EF0C0E2AC88164F4C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 0FFD
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: e+cxzh2Le3q1C8JDv55JynNVlFrAhS4DpK6hfD68cm8=)
2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=)
3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:72:3d:54:1d:9e:f0:c0:e2:ac:88:16:4f:4c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=58481f7de0adba9d60b0556647da9c8ad7102d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:17:f2:13:4e:5a:8e:76:27:94:57:57:f8:
e2:a4:ab:e8:ef:3c:b1:4d:41:17:7e:26:37:7f:25:
5e:c6:c7:cc:66:66:1f:52:00:66:e1:81:88:14:7d:
c6:76:54:a3:50:b0:a7:24:e8:7d:79:9d:9a:ad:9d:
0d:46:8d:34:ea:3c:2d:3a:c8:ec:04:ff:6b:8f:34:
37:04:ae:ab:61:b7:da:f7:73:cf:e2:46:8c:4f:32:
7e:94:9a:cd:e5:61:ab:b2:9c:30:00:fd:88:61:da:
42:68:bd:28:1b:d6:c5:65:4d:6f:24:62:87:af:eb:
ec:78:f8:67:4d:78:de:7c:fe:c2:71:eb:d3:c4:ec:
be:3f:93:7b:78:bb:c0:e6:0b:e3:b8:56:f2:f1:8a:
11:49:c5:41:da:8f:28:ec:46:98:5a:b0:70:ed:16:
f1:20:27:eb:99:9c:33:71:bc:b4:ec:71:b5:74:fb:
65:54:7e:39:67:6b:ef:ad:b0:20:5b:03:3b:96:e2:
0f:93:b6:8d:28:14:36:74:9a:fd:fc:4f:6f:f8:45:
73:df:c5:86:36:aa:bb:61:53:e1:a4:35:b6:01:38:
fc:26:af:ec:b5:1b:21:98:53:3e:e5:44:ec:5b:88:
09:69:e2:48:e0:99:39:ae:a3:14:b2:92:97:db:7b:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:48:1F:7D:E0:AD:BA:9D:60:B0:55:66:47:DA:9C:8A:D7:10:2D:73
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:62:5c:b6:85:3b:90:20:a1:ea:e0:3e:34:2d:b1:b5:78:fb:
22:a0:69:38:4d:74:bd:98:c0:fc:b1:a2:a0:29:23:3f:28:0e:
5d:05:cc:79:c4:48:6b:a4:f4:a6:6b:40:f6:5d:1c:b8:59:85:
07:59:3a:77:a6:f3:0b:e9:d9:96:ac:30:23:39:8b:d1:de:84:
46:af:ad:9c:e0:2f:05:ab:2b:79:56:49:4a:bf:f8:d5:34:4a:
08:1f:8f:73:9d:8a:46:16:b7:59:5c:02:6d:8d:5e:e9:90:82:
42:53:34:9b:b0:d2:70:4e:ff:4e:53:6b:98:b5:3c:7a:af:5f:
8c:27:1a:97:07:e1:e4:d4:ee:cb:35:da:a4:62:41:26:53:e2:
2a:81:8a:5f:ae:f4:c1:e5:a0:73:21:c2:68:8f:54:17:b5:1c:
b6:72:42:f4:a2:65:c7:d3:e9:01:3c:d4:7c:f9:e2:9d:52:31:
9f:4a:97:e9:3f:5b:40:d8:70:15:e0:ee:4a:ab:b8:76:af:9e:
8e:67:75:be:03:22:f3:da:a7:e4:51:c7:a2:cc:dc:f0:c8:3d:
29:8c:c0:2a:e3:9b:47:90:aa:9a:37:b3:f9:b0:94:85:a4:2c:
2d:b8:94:48:fe:35:68:49:4e:f8:75:ae:03:83:2a:9e:9a:91:
c0:70:ea:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:00 2025 by rpki-client