Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: fHz9zwyVHgMG3ElO/HgS4i3zWP8uyhw2OT755dLqKWE=
Subject key identifier: 6E:D1:2D:AF:F3:29:28:92:DB:88:B5:4B:0B:11:D7:B6:9B:4B:8E:E6
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 01984AAF00C93CBA775FC14607B45992935A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 0204
Signing time: Sun 27 Jul 2025 07:00:39 +0000
Manifest this update: Sun 27 Jul 2025 07:00:39 +0000
Manifest next update: Mon 28 Jul 2025 07:00:39 +0000
Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=)
2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: hxOWv9FwKX96sVPSvmHZpZljOGv+nzUIegUqUNdEqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:00:c9:3c:ba:77:5f:c1:46:07:b4:59:92:93:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Jul 27 07:00:39 2025 GMT
Not After : Jul 28 07:00:39 2025 GMT
Subject: CN=6ed12daff3292892db88b54b0b11d7b69b4b8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:c8:da:59:74:3a:cb:55:68:56:04:37:89:
10:36:ce:d7:c9:c8:69:64:46:9b:39:f3:24:21:f3:
86:c8:47:17:1a:43:76:30:81:52:9d:31:c6:25:89:
ae:0a:8c:1f:10:80:58:8a:e6:7d:b2:66:b1:cc:bf:
c4:15:3d:61:20:02:33:5d:6f:c4:15:0b:0e:5e:13:
7c:22:dc:63:d2:39:a4:13:77:26:8a:58:88:da:0d:
82:f5:13:23:bd:31:23:96:1b:76:d0:d2:bb:ae:57:
f7:c5:a7:2c:82:91:e5:82:cb:85:91:6d:29:9a:38:
ee:6f:64:fa:86:ac:2e:43:1f:50:2b:ec:98:ca:0a:
48:f5:a7:b1:ab:7a:a4:bb:37:e5:ac:4b:12:56:bb:
42:21:7a:c9:98:ce:95:6c:9c:8f:be:89:b4:c1:92:
ca:b7:fd:a6:e5:2f:66:c0:c1:3e:7a:01:07:e8:e0:
33:ce:d8:54:eb:83:51:16:6b:c1:25:dc:e6:67:cc:
79:51:be:ba:50:47:77:94:8b:42:3a:c3:f4:b0:ef:
9c:fd:54:2e:80:45:d9:60:a3:43:d8:cc:35:ce:42:
a3:4c:c4:d5:ac:a8:ab:a7:46:d1:0e:29:77:84:99:
99:30:eb:48:fb:1d:31:38:a8:1d:35:31:c9:38:5f:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D1:2D:AF:F3:29:28:92:DB:88:B5:4B:0B:11:D7:B6:9B:4B:8E:E6
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c7:36:d9:09:12:e3:d2:3b:ba:0d:e5:e2:8a:ae:6e:3b:12:
d7:1c:df:f1:12:43:63:85:ed:27:04:9a:c5:37:5e:89:2b:b3:
9f:62:df:2b:b3:c1:9c:a2:46:4c:0e:ed:01:60:f9:75:77:4a:
07:bb:52:d4:72:0b:4a:88:f0:61:e2:b3:12:63:14:2e:17:1f:
28:5d:f7:60:82:13:a2:8d:df:32:dc:29:d0:8f:6a:a3:d4:72:
d5:58:38:64:cc:2f:2f:7b:e6:33:b0:fc:84:42:9d:70:96:b6:
ad:33:0a:22:ac:18:2f:0a:49:06:bb:ee:fc:1a:2b:58:1f:e2:
f2:aa:93:c9:25:89:03:69:af:f9:39:c2:3d:3c:2f:37:59:6e:
21:e7:e6:8a:fd:f3:45:a1:ca:99:14:18:40:c3:61:68:12:0b:
64:20:63:a3:2f:8e:14:66:4c:78:99:f5:17:32:3a:a6:0c:f2:
75:e6:78:b2:57:78:49:5f:83:4a:98:fd:70:d2:79:92:fc:fd:
78:0e:03:11:b6:c3:44:7a:88:bc:47:28:0d:7b:ea:d4:33:37:
00:73:b2:53:28:8d:c7:c4:86:5a:c9:f0:8a:e3:b7:a0:27:93:
1d:23:f0:29:09:83:79:bb:33:48:30:81:2e:84:2d:d7:6a:40:
3b:5f:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:29 2025 by rpki-client