Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
File: SpR3QFKci4QPf4kzCXmshyyj-rg.mft (raw, json)
Hash identifier: DX31BE88UB/er8fCyYna6NHklUSWVubvkeBzMl6RRNQ=
Subject key identifier: 51:CF:1A:0E:4D:EA:AB:A8:76:97:F5:27:C7:5E:FB:B8:96:E8:26:45
Authority key identifier: 4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
Certificate issuer: /CN=4a947740529c8b840f7f89330979ac872ca3fab8
Certificate serial: 0198496630C349AAE767832DF5457671B9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
Manifest number: 01AB
Signing time: Sun 27 Jul 2025 01:01:30 +0000
Manifest this update: Sun 27 Jul 2025 01:01:30 +0000
Manifest next update: Mon 28 Jul 2025 01:01:30 +0000
Files and hashes: 1: SpR3QFKci4QPf4kzCXmshyyj-rg.crl (hash: qUZS/fohqNwIPz5Fl8SU6ZAHXP7oKcC6wKBxxLNfV3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:30:c3:49:aa:e7:67:83:2d:f5:45:76:71:b9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a947740529c8b840f7f89330979ac872ca3fab8
Validity
Not Before: Jul 27 01:01:30 2025 GMT
Not After : Jul 28 01:01:30 2025 GMT
Subject: CN=51cf1a0e4deaaba87697f527c75efbb896e82645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:44:93:ac:af:f1:60:14:89:c8:32:81:ce:
19:7d:47:71:51:e0:65:32:4b:8c:1f:bc:ca:c6:25:
02:4a:b0:28:6b:52:80:1d:41:be:a1:05:93:1e:63:
25:ef:7c:c2:4e:2d:47:e8:81:4c:9c:34:24:f8:1b:
9f:0e:52:9f:64:09:8d:04:c0:15:37:cd:4d:ed:94:
08:45:96:15:3b:70:c1:11:e8:7d:cd:76:6e:7b:25:
fa:32:a8:4a:a0:ae:c0:a4:1d:50:57:dd:9f:ac:fa:
b2:a7:45:aa:4f:2a:42:b6:2d:72:16:54:69:c3:0e:
92:8d:26:2a:2b:f9:da:39:bd:89:93:8e:c1:03:a3:
de:7d:22:30:31:8e:1b:e2:c2:d4:5e:9d:54:04:d3:
3b:e9:3a:5b:91:71:b1:94:a5:34:a2:d1:e2:9a:3a:
71:9f:3b:27:85:63:49:6b:56:1e:df:6b:88:65:38:
db:28:c5:27:3a:58:c0:7a:b8:3c:ae:63:73:a6:4d:
89:e6:ef:7c:a2:01:22:7f:c6:50:15:34:52:b1:25:
2e:e1:b5:ad:cb:53:2c:d1:ac:e6:b8:74:a9:c3:44:
5f:64:85:06:dd:99:3e:88:41:c4:14:56:10:6b:10:
28:e5:0a:28:b6:7d:44:3c:11:a2:ac:8a:7e:b2:7f:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:1A:0E:4D:EA:AB:A8:76:97:F5:27:C7:5E:FB:B8:96:E8:26:45
X509v3 Authority Key Identifier:
keyid:4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f2:64:32:f7:0f:f9:58:52:3a:b9:66:d8:12:d1:98:5a:5e:
87:ed:bd:6d:e8:44:51:12:e6:0f:7c:7f:2b:6c:47:55:75:44:
99:95:51:e6:ed:0b:5a:08:27:84:7e:ad:f4:27:2c:a1:3e:92:
b7:d9:8e:28:81:74:65:9d:35:ec:56:06:3a:69:6c:5f:54:d9:
f7:4a:10:09:a9:f1:94:b3:72:58:1f:d8:5d:18:43:b1:37:ce:
19:f6:24:c8:12:08:29:1d:10:66:5d:76:f1:b5:27:af:73:37:
f0:b6:3e:fb:07:fd:9f:e5:70:bf:3a:31:a3:ee:e6:38:b9:b2:
58:a0:6e:7a:02:4e:e7:a5:ff:d8:49:8a:f6:fb:7b:47:a7:12:
6a:89:29:02:78:04:83:3a:3f:31:ad:04:f4:14:06:ce:4a:3c:
8f:55:d4:4a:0c:7f:fd:36:c4:70:90:a2:03:65:bc:da:c8:90:
25:e8:b6:59:d7:91:97:8d:77:4a:71:d6:06:2b:b8:9d:ea:cf:
c6:54:d8:0b:f5:d0:13:0b:58:3a:39:4e:40:74:4c:59:4b:56:
c3:93:90:53:79:6e:a4:ca:5d:94:5e:43:60:04:98:9e:b7:b1:
54:55:4b:77:57:64:ef:fe:90:5d:b4:b3:3a:5b:89:47:92:62:
ae:f9:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:51:37 2025 by rpki-client