Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: u/hgjYXgaDlh/zAtXJp1+FaomMy/24L3SvvsKPY83xw=
Subject key identifier: 09:54:E9:55:E2:BF:62:AC:6A:E4:04:98:E4:37:AE:7F:DE:56:55:72
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 01984966D114DE91DCB723E05FC908A93308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:02:11 +0000
Manifest this update: Sun 27 Jul 2025 01:02:11 +0000
Manifest next update: Mon 28 Jul 2025 01:02:11 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: smvRR2LNU4bbPx7mEJJ+jnqoRsI0WvqsYSETgeIOUlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:d1:14:de:91:dc:b7:23:e0:5f:c9:08:a9:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Jul 27 01:02:11 2025 GMT
Not After : Jul 28 01:02:11 2025 GMT
Subject: CN=0954e955e2bf62ac6ae40498e437ae7fde565572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:cf:78:44:5b:28:b1:c9:a0:53:1f:28:74:
3d:84:58:a4:95:a1:6d:6c:c5:19:c0:fc:ff:88:4c:
4d:d7:75:78:7f:8b:ed:20:c0:c5:8f:47:d0:a0:10:
52:76:88:0f:20:9b:d5:04:06:0c:bf:c0:4e:54:5a:
33:e4:55:f6:6a:38:ec:8a:18:10:18:60:49:60:a0:
9e:f8:06:1b:ef:29:29:90:c7:41:aa:6d:af:5d:73:
45:bc:78:8c:c6:a6:5f:75:b2:2a:24:bd:1e:79:7a:
d5:a9:1d:1b:de:ea:f3:40:3d:e5:ed:dd:6d:48:e3:
86:a1:fe:59:02:d1:4c:c7:a6:66:a4:a5:ca:52:78:
cf:e6:40:ec:e8:6a:ad:50:55:b1:1e:73:34:94:58:
b1:50:9d:49:d8:d0:d5:a4:84:1a:da:c5:79:9f:8a:
d5:37:2f:22:69:ac:62:ff:b0:f5:17:bd:9a:7c:a7:
9b:cb:41:26:77:49:72:7c:04:87:ed:08:76:94:08:
90:8a:d8:cd:0a:05:62:cb:f9:12:b4:d0:4f:20:8b:
4f:d1:7e:c3:8a:86:e8:08:7c:86:c2:6d:87:a6:4f:
f0:c6:04:9f:8d:d9:0e:e6:2b:41:ed:e7:e3:4e:fc:
84:77:73:e5:c5:aa:08:f7:5b:78:34:68:1a:e5:d0:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:E9:55:E2:BF:62:AC:6A:E4:04:98:E4:37:AE:7F:DE:56:55:72
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:75:2e:1b:d9:3d:2e:9e:34:a0:71:d6:ca:a1:e8:2f:62:c6:
42:6e:67:b1:eb:57:09:41:59:59:7d:91:e3:de:83:23:56:d4:
04:6b:c0:ad:a4:3e:52:af:ef:11:57:9b:14:9a:d9:ff:35:51:
d5:94:a5:46:ed:bb:05:37:44:78:de:45:f4:10:e6:61:35:9e:
21:30:27:af:9a:f3:0b:c1:f3:94:59:1f:15:fd:b5:4b:77:98:
93:14:a0:9e:b3:cb:d1:0a:34:42:8b:90:a5:cd:83:63:cf:4f:
bb:0b:ea:fa:52:8b:8c:e1:d0:80:94:f3:60:d2:30:a8:c2:e6:
13:5e:2e:d0:f6:39:55:25:d0:ea:78:fb:76:23:a5:ab:c0:66:
dd:71:a8:97:2e:5e:90:89:24:24:1a:bc:e3:ce:c2:28:3e:ee:
fd:3e:90:c9:56:14:46:09:10:fe:76:6d:2d:fc:1f:87:ef:cd:
9f:60:16:14:fa:3b:9f:2c:97:81:53:10:ba:a5:cb:e7:ab:ae:
4c:40:7b:69:dc:de:17:69:7e:46:56:a4:6a:03:e8:f8:fb:e1:
73:16:bd:ce:41:f6:1b:e4:d5:9b:1c:5a:67:c1:fe:8b:af:7f:
39:38:5e:5a:82:f5:44:26:6f:be:88:cb:5f:0e:8c:e0:35:25:
42:1a:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:21 2025 by rpki-client