Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: epNAloY7xi5cZKX9uVDBnYcGl2/zZd/aXx2Za09nCLo=
Subject key identifier: A6:BA:66:8B:CB:56:32:3F:38:FE:FF:84:5E:0C:D6:82:D7:12:B9:ED
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 01974D7C415499F1A294B122623A7E32E2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 03:01:18 +0000
Manifest this update: Sun 08 Jun 2025 03:01:18 +0000
Manifest next update: Mon 09 Jun 2025 03:01:18 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: krfjEoAvJLdiOd3EZHIvrYIbNc9YWdUPXsZ9+daTm4Y=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:41:54:99:f1:a2:94:b1:22:62:3a:7e:32:e2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Jun 8 03:01:18 2025 GMT
Not After : Jun 9 03:01:18 2025 GMT
Subject: CN=a6ba668bcb56323f38feff845e0cd682d712b9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:26:db:12:b8:7b:22:22:4b:89:1a:fb:f4:
24:9b:05:5b:81:e6:1b:95:50:55:19:e3:90:a7:c0:
a4:d6:1d:c2:9f:e5:7b:62:e7:46:ee:6c:ff:89:76:
2c:a5:ac:e4:d5:85:da:5d:df:84:db:80:ea:8c:9d:
5d:e7:74:f7:69:a0:5a:44:5c:6d:6c:3c:d6:ef:30:
8b:6c:9c:4b:a9:59:98:31:2f:92:27:ba:43:c6:fc:
dd:b2:da:d4:30:be:17:91:e4:7c:d7:8a:f8:26:f8:
00:8e:9e:10:79:6b:62:a6:7c:cd:9d:76:7b:64:62:
88:03:17:da:56:f3:71:07:00:85:e8:35:c1:bb:eb:
81:b4:fb:f2:9b:6b:4d:52:74:08:45:9f:87:1a:47:
af:fa:df:03:d5:60:e2:a4:9d:3e:b8:84:dc:f5:aa:
97:32:1c:84:dd:1d:91:a0:4f:8a:7e:6e:96:c4:ed:
fe:e7:6b:51:29:26:10:78:e3:37:55:e1:4e:1c:fd:
53:41:d1:58:71:fb:52:84:81:58:d8:6f:71:21:c2:
fb:db:30:a1:e6:df:ce:76:e9:8c:da:a7:dc:ec:37:
cc:5f:0d:e6:42:93:72:12:97:a1:01:72:32:d4:a5:
fe:e3:2e:aa:a6:42:df:06:22:58:02:5a:9e:cb:a3:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BA:66:8B:CB:56:32:3F:38:FE:FF:84:5E:0C:D6:82:D7:12:B9:ED
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:45:7d:a9:ee:87:58:b8:4f:fa:0d:4d:7a:6c:69:2d:3b:27:
b6:9e:9f:51:12:8e:fb:32:f1:6e:5c:d9:6c:11:63:6e:77:a0:
71:11:3e:fa:83:8d:74:37:92:eb:91:18:da:36:b5:ed:d9:40:
7a:27:24:c1:0d:e6:a0:61:57:6a:30:4c:1a:a9:8d:e2:29:ee:
90:ca:2a:67:96:0a:cb:bc:5d:86:80:ee:89:21:9e:4f:c1:c4:
4d:e9:c8:f6:2a:9e:7b:a2:7e:f3:ff:d4:bf:a4:52:25:a9:22:
42:81:d1:b6:d6:72:89:0b:48:7f:98:98:75:3e:aa:89:05:63:
9a:04:ca:33:ea:05:fc:d9:7a:1b:b1:95:0d:2f:fb:18:81:23:
5e:92:d0:f0:1d:40:56:b8:dc:4a:92:ef:7a:74:be:12:40:06:
01:14:0c:1f:50:b5:5b:d7:41:a6:3b:9e:53:bb:d0:02:e1:eb:
a2:69:23:1d:c5:c3:d4:fa:a7:23:7d:86:c2:65:f9:a1:29:11:
18:93:06:dc:5e:01:1f:12:c2:cf:b1:2d:57:9d:eb:e4:a7:ab:
b9:89:2c:e0:e2:3e:58:7d:cf:77:fd:ba:9d:dd:8d:d0:0f:b3:
00:58:8c:45:9a:89:04:63:25:0c:db:34:e8:ed:c6:8c:b9:50:
49:c2:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:24:40 2025 by rpki-client