Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: AH5XrbTbLcfUIOsdQwOLfnU4M2jry0z2zd87NTnutI0=
Subject key identifier: 66:2D:9D:57:43:D3:EF:A1:5E:E2:6B:44:A6:30:34:11:AA:3F:22:E2
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019848C06EB97DC4AC14AE46E6A0CEFD4D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0A0E
Signing time: Sat 26 Jul 2025 22:00:27 +0000
Manifest this update: Sat 26 Jul 2025 22:00:27 +0000
Manifest next update: Sun 27 Jul 2025 22:00:27 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: bQXl3aHKZG3Io6WcO+adyXzXG0ykzhhySj5RJ879TOE=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:6e:b9:7d:c4:ac:14:ae:46:e6:a0:ce:fd:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Jul 26 22:00:27 2025 GMT
Not After : Jul 27 22:00:27 2025 GMT
Subject: CN=662d9d5743d3efa15ee26b44a6303411aa3f22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:73:c5:24:4c:2f:65:ba:9f:f5:3e:b3:fc:
a3:7e:2b:15:81:cb:54:ec:cf:94:50:5d:7f:68:93:
b0:47:8b:fa:4d:f8:85:80:bc:42:d5:a1:1d:89:b4:
25:87:86:a4:e4:84:a4:d6:85:10:98:21:13:a4:2c:
02:13:d5:11:5b:2f:e1:ad:5d:9f:23:6c:f7:bd:9e:
bf:d2:39:29:a8:04:11:e2:b4:d7:af:a4:54:a5:16:
db:4c:41:1d:eb:31:06:34:9f:1e:dc:53:ab:7b:42:
71:46:37:8f:86:b3:af:70:ba:d3:a5:f8:6e:2a:65:
56:a7:77:d9:7a:6e:ec:60:26:bd:16:7b:90:f2:44:
e7:93:30:2f:6a:15:8f:f9:34:e2:4c:2e:40:20:e4:
16:1d:60:72:61:a4:90:67:91:80:bd:49:a0:41:8e:
bb:5d:4e:3c:58:30:55:91:ad:2e:c1:af:b4:da:af:
26:63:68:3a:53:d6:df:a8:cc:c5:4b:96:ca:2b:99:
a0:a8:fb:9e:87:bf:2d:e3:75:72:b9:8e:1c:9e:97:
d7:cc:85:59:6b:bb:2e:0d:68:04:a6:fa:41:12:02:
8c:0e:3d:2a:94:2f:06:52:18:04:ae:36:c8:ab:d6:
71:d5:17:27:e8:e5:a8:d3:39:ca:87:8e:19:23:dd:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:9D:57:43:D3:EF:A1:5E:E2:6B:44:A6:30:34:11:AA:3F:22:E2
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:9a:62:d4:62:de:42:b6:22:7f:52:af:90:c2:4a:03:ad:
65:78:49:19:9a:24:f6:a2:ab:ef:c9:9c:f9:7e:63:1b:df:3d:
48:0a:57:f7:71:96:cb:52:f1:64:24:a0:0a:77:97:c6:81:96:
32:02:45:09:53:ef:f4:2e:de:92:58:f7:b1:0a:45:d0:d8:f4:
42:8c:f8:ee:86:99:78:04:91:23:22:34:72:fb:5b:f8:4b:30:
f0:2b:16:68:c3:65:97:96:e9:9f:91:ad:67:20:c4:a7:a2:cb:
be:2c:a4:a6:19:ae:c2:3b:e1:26:99:3c:8d:8e:a6:a7:a2:06:
2b:0f:2f:4a:d8:51:4e:ab:da:f5:ca:37:3e:9f:73:eb:b1:20:
a5:0a:91:76:db:39:de:9d:30:62:4b:05:61:fc:c5:0c:df:05:
32:64:df:b0:d7:b5:14:3a:c5:d3:6c:eb:7a:d6:80:17:12:d7:
86:60:89:a5:6f:cc:ba:8c:5d:3f:f8:c6:e8:20:f2:e7:57:4c:
dd:69:f3:c9:40:a9:33:07:bd:99:f7:80:cc:82:b2:ad:45:a6:
10:88:da:b2:d7:75:60:86:21:b2:c5:0b:89:2a:25:da:f5:b8:
83:53:22:f0:02:0e:e0:2a:82:10:23:74:d6:b8:eb:96:3c:31:
c6:72:b6:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwG65fcSsFK5G5qDO/U1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi
NDRjMjYwHhcNMjUwNzI2MjIwMDI3WhcNMjUwNzI3MjIwMDI3WjAzMTEwLwYDVQQD
Eyg2NjJkOWQ1NzQzZDNlZmExNWVlMjZiNDRhNjMwMzQxMWFhM2YyMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhltzxSRML2W6n/U+s/yjfisVgctU
7M+UUF1/aJOwR4v6TfiFgLxC1aEdibQlh4ak5ISk1oUQmCETpCwCE9URWy/hrV2f
I2z3vZ6/0jkpqAQR4rTXr6RUpRbbTEEd6zEGNJ8e3FOre0JxRjePhrOvcLrTpfhu
KmVWp3fZem7sYCa9FnuQ8kTnkzAvahWP+TTiTC5AIOQWHWByYaSQZ5GAvUmgQY67
XU48WDBVka0uwa+02q8mY2g6U9bfqMzFS5bKK5mgqPueh78t43VyuY4cnpfXzIVZ
a7suDWgEpvpBEgKMDj0qlC8GUhgErjbIq9Zx1Rcn6OWo0znKh44ZI91aywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYtnVdD0++hXuJrRKYwNBGqPyLiMB8GA1UdIwQY
MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt
OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh
LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBGaYtRi
3kK2In9Sr5DCSgOtZXhJGZok9qKr78mc+X5jG989SApX93GWy1LxZCSgCneXxoGW
MgJFCVPv9C7eklj3sQpF0Nj0Qoz47oaZeASRIyI0cvtb+Esw8CsWaMNll5bpn5Gt
ZyDEp6LLviykphmuwjvhJpk8jY6mp6IGKw8vSthRTqva9co3Pp9z67EgpQqRdts5
3p0wYksFYfzFDN8FMmTfsNe1FDrF02zretaAFxLXhmCJpW/MuoxdP/jG6CDy51dM
3WnzyUCpMwe9mfeAzIKyrUWmEIjastd1YIYhssULiSol2vW4g1Mi8AIO4CqCECN0
1rjrljwxxnK2Rg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:25:32 2025 by rpki-client