Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: cfrx8pvwjVZsWhCbQgwHHpXvlSbWcXddSFKygQ9Ys9A=
Subject key identifier: CE:C8:32:D0:76:08:BA:47:91:8E:26:AF:C6:90:ED:3A:B2:E6:D2:12
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 01984776CE45E1B157C7D1B80E58D8CFE93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 1505
Signing time: Sat 26 Jul 2025 16:00:24 +0000
Manifest this update: Sat 26 Jul 2025 16:00:24 +0000
Manifest next update: Sun 27 Jul 2025 16:00:24 +0000
Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: q6cdpky37haTRyk+6Or1GWvtDDngFm4+kqLfTdS3bbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:ce:45:e1:b1:57:c7:d1:b8:0e:58:d8:cf:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Jul 26 16:00:24 2025 GMT
Not After : Jul 27 16:00:24 2025 GMT
Subject: CN=cec832d07608ba47918e26afc690ed3ab2e6d212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:50:54:4f:fb:49:25:b5:e1:0c:6f:85:20:
b9:7e:03:08:60:33:ec:75:bb:b5:cb:51:5d:fe:a1:
9a:05:8b:ea:1f:ca:e5:ca:3c:83:8d:59:ab:73:ff:
dd:6e:8d:fa:b9:84:32:67:90:30:64:3b:d6:9e:ac:
c7:22:1e:b4:cc:ff:4f:d3:c0:6a:54:68:87:d9:34:
8b:c3:51:69:99:60:4a:db:4e:64:4e:b4:4d:25:26:
69:a9:a9:9c:54:0b:9d:f4:42:d6:93:21:df:1e:07:
b1:c4:46:38:da:37:a8:c8:0f:52:95:e1:a3:6b:b8:
9e:8d:4e:d8:86:96:47:c9:5c:98:76:4e:25:3b:9b:
ec:23:f0:b1:5c:c8:8f:92:53:e9:e1:32:f0:f3:54:
41:f1:fc:19:49:75:be:2b:c1:6f:a7:ae:6f:fd:67:
16:b8:37:08:5a:00:f0:d4:98:f3:1d:97:44:5b:15:
a7:4e:ba:80:13:3f:dd:fe:e1:c6:5b:89:39:0c:62:
9c:04:d4:47:90:ce:25:4c:f3:1c:3e:f8:a7:69:82:
19:6c:93:1d:78:78:00:d5:37:55:e5:c2:8c:53:6f:
29:c7:d7:7c:34:0f:03:77:03:27:ed:4e:66:99:ab:
76:43:fb:2b:71:b2:43:70:74:db:11:69:95:36:71:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:32:D0:76:08:BA:47:91:8E:26:AF:C6:90:ED:3A:B2:E6:D2:12
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:85:d5:43:94:59:24:0d:cd:fb:ab:63:f9:97:7d:5b:74:c6:
16:76:07:04:57:8c:fd:00:f9:65:64:f2:44:e6:da:3b:9b:ad:
7a:14:bf:6d:6f:53:52:18:b3:1e:11:8e:06:e6:27:b0:d8:a9:
22:37:a5:33:a4:19:15:e7:00:07:b5:0f:4a:7f:e0:65:42:41:
b8:d8:6c:e4:30:5a:ca:ea:89:01:d3:ff:7f:9a:d4:5d:af:60:
a4:4b:cd:fc:a0:b7:13:c4:55:0d:c8:29:9d:4b:41:a2:da:e9:
50:9c:07:d0:be:b6:4b:e8:d6:06:00:e8:54:52:52:aa:b6:02:
b6:25:55:7f:9a:58:d3:18:1a:4c:85:52:05:f3:de:b5:22:27:
7b:30:04:7f:4b:ff:85:69:b6:94:ef:f2:e1:00:ff:e8:51:eb:
97:44:73:91:37:0b:aa:a2:a9:fd:16:1f:7a:21:ab:06:f3:0f:
8b:17:4a:88:86:64:9b:1d:b3:05:3c:35:28:6d:65:79:6b:d5:
37:9d:11:d6:45:42:20:e5:c6:b9:60:a0:1b:b9:44:be:02:8e:
1b:10:bd:f9:c1:43:ac:24:a6:73:53:06:33:34:93:fe:09:0a:
83:9d:61:43:83:f2:71:68:25:71:a1:59:bd:c4:21:11:a6:e2:
b8:f3:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:35 2025 by rpki-client