Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier: toRC2gFwYzba7kiBKC8o3fZqhN8dZ7Ok3kheUBfZgXc=
Subject key identifier: 78:C4:7B:0B:BB:90:F9:08:BA:5E:BC:88:1E:0A:70:9C:56:98:86:20
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 019A722627407FD183315DBD3886BC0DCF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number: 1477
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: Nw5CKyX+AiN6LNTD1nF3q7kvLscjebWp6kqoDI4H118=)
2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:27:40:7f:d1:83:31:5d:bd:38:86:bc:0d:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=78c47b0bbb90f908ba5ebc881e0a709c56988620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:cc:71:24:bf:4b:3e:8f:9b:f9:b5:82:26:
64:25:de:e9:df:3f:ba:a6:a1:ea:7a:5f:47:df:a7:
20:38:57:8e:20:f0:f6:ba:b0:7b:df:92:47:41:de:
dc:cc:e7:96:59:78:4c:d6:8d:f2:6c:5f:13:dd:c9:
e7:14:52:f0:d0:3d:c2:24:f3:09:24:86:8c:8c:c2:
98:3e:01:b9:e8:3a:7a:48:9b:da:79:30:73:78:f4:
f1:4b:87:3a:a0:87:e5:11:d6:5b:0a:72:40:e5:0a:
0c:85:96:e7:c3:e7:d8:d3:68:b1:8e:83:66:8d:3a:
ab:b6:10:70:e7:1e:80:82:12:89:76:ad:ee:81:e1:
34:9e:fc:b9:fd:c0:45:24:01:de:cc:94:e8:dd:f3:
05:41:56:db:51:0c:67:e6:42:8d:5d:93:e1:99:70:
77:56:40:b1:30:f5:3d:75:1d:20:ba:ea:01:ea:82:
90:3a:da:a8:b9:23:af:ce:eb:75:61:95:88:b2:4c:
f0:62:f8:6f:dd:c9:ed:8b:19:4d:f0:6d:ab:2c:89:
30:95:1b:05:61:6f:af:8a:a6:42:07:d6:3f:bb:15:
21:14:f2:73:8d:51:45:95:ee:b5:0e:a1:70:90:58:
4e:f8:0d:fb:86:0a:b0:27:81:84:72:d7:20:cd:03:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:7B:0B:BB:90:F9:08:BA:5E:BC:88:1E:0A:70:9C:56:98:86:20
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:df:ac:d9:af:de:ed:07:7b:47:90:73:22:d8:19:90:f5:
ed:91:21:70:e3:2c:e8:8f:fe:a2:41:af:ef:d7:71:ab:a7:98:
a8:3e:6c:cb:44:0d:ec:27:09:bb:26:62:5c:32:f7:6e:af:25:
25:62:92:0c:f3:bb:39:03:39:7f:48:a2:46:39:9c:cd:93:79:
f0:fe:fa:ae:3d:cf:2b:05:e4:22:9c:c6:52:d1:51:4c:63:5c:
c9:32:19:a4:4b:e9:23:7d:0f:58:76:20:5b:f3:23:6f:59:d3:
d7:9c:8a:7f:ef:c0:2e:b8:6a:f9:50:54:b1:94:6d:17:78:c8:
0c:36:90:c8:d1:bb:0f:ff:36:89:81:61:a1:32:33:c8:71:b0:
34:1b:a4:5d:63:0a:c6:bb:56:9c:78:e5:cc:77:09:22:60:eb:
1c:8f:4d:53:de:54:de:d3:d2:f9:65:7d:28:83:d7:12:da:fe:
e9:33:31:24:f5:d4:d1:53:4d:29:93:56:bb:20:17:13:33:7a:
a2:5f:30:78:02:c4:1c:38:9d:e7:41:43:2e:2d:40:d8:0f:70:
15:a9:dc:9a:40:49:8f:0d:b1:bd:eb:e3:19:ec:73:27:01:7f:
89:2f:a4:04:52:92:6e:1d:cb:2c:9b:23:10:a4:42:8b:dd:da:
c3:e8:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:39 2025 by rpki-client