Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: XkQx2TBv7cxzGe4NgQu2lDhWRCBTgMKBprb4/Sr4Cbs=
Subject key identifier: FA:11:6A:51:53:52:93:0C:18:E0:5A:6E:90:6A:9D:F6:96:08:F5:3E
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 019A7293673FABF4F10AF0D7BCDFC7372FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 12D2
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: lgS0QHgyHODLxK9+4Ukq9FpB1ZnikiClwho8ww+y9vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:67:3f:ab:f4:f1:0a:f0:d7:bc:df:c7:37:2f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=fa116a515352930c18e05a6e906a9df69608f53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:69:6e:24:2c:78:60:5e:63:f4:89:28:0b:
e0:9a:04:00:5c:06:61:2e:64:75:2b:ae:3e:5f:02:
76:9a:7a:af:25:f7:bf:ee:72:99:3e:76:6e:52:b5:
54:72:57:3a:b5:65:93:8a:89:5f:46:33:fb:74:28:
8c:59:d1:dd:31:e6:60:f9:74:82:02:54:ab:6d:c0:
66:55:90:de:d0:b7:37:ee:0e:c5:b9:79:11:9c:2e:
43:7b:74:53:13:1c:b3:98:ca:74:3d:f7:b9:58:de:
f5:64:fc:07:e7:a5:d2:25:60:d0:18:0c:99:19:51:
6d:69:b7:50:56:30:c4:64:f0:fe:64:a8:c3:a0:41:
b2:b9:4a:b2:dc:aa:b3:23:bb:35:e6:50:33:40:58:
51:9f:73:62:e6:d6:49:1f:8b:e2:41:8f:4e:fe:24:
a3:bf:70:1f:0b:2c:f2:fd:e2:35:c6:ba:1f:33:35:
0e:00:2e:07:bf:a5:64:15:4d:9a:4f:ea:e5:57:0e:
6b:6d:59:c8:dc:54:a4:8a:81:36:13:90:84:81:78:
35:61:56:31:50:0f:dd:7f:cd:97:a2:d8:5e:12:4f:
ad:b7:12:66:6d:bf:a8:17:ab:28:96:89:52:f3:81:
fe:cd:09:74:70:1f:12:59:77:ed:b4:81:72:24:b2:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:6A:51:53:52:93:0C:18:E0:5A:6E:90:6A:9D:F6:96:08:F5:3E
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:6e:85:da:8b:32:b0:b3:43:e4:e8:23:31:53:c3:f7:03:
14:db:3e:8f:d0:e6:bc:dc:5a:ad:a8:98:90:ef:eb:ef:0b:83:
e1:24:ca:87:d3:4c:63:65:a9:ba:b1:9d:bc:4d:df:8b:90:66:
84:a6:d8:96:53:4f:2c:c2:93:18:a5:b1:a2:42:2a:86:d2:fa:
dc:21:c2:c8:82:ef:14:21:0e:22:84:ec:3c:e8:21:74:61:6d:
91:ca:3e:4a:62:b7:ac:4f:68:1f:ba:96:01:bb:b5:bf:7f:92:
bb:46:9a:83:c3:e8:b9:ae:ec:f6:0f:55:ef:25:93:93:ff:7b:
e1:26:6d:a1:62:b3:f1:68:43:08:e7:5a:ee:ad:a8:85:db:ec:
44:73:8c:57:fe:8c:cc:94:e7:d4:38:09:e9:63:d5:ca:9b:db:
65:a9:eb:60:a9:20:1d:59:3d:56:f5:ff:7d:4d:af:b1:9b:88:
fe:32:f3:c4:e2:bc:f8:45:e1:a4:cf:62:d3:19:b7:4e:07:24:
44:1e:be:71:bf:4e:da:60:ce:a7:79:cf:3c:ea:29:c2:5b:e8:
e9:df:b1:b8:6f:88:a8:de:b1:ff:10:d5:b6:94:41:ee:9e:e9:
76:69:0b:0a:fc:f9:7e:0b:97:63:84:fd:78:b0:a1:de:b9:99:
4f:ab:e1:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk2c/q/TxCvDXvN/HNy+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZmRmODFmYmYzYWY0MzA2NzJhNGJmNjQyNzczYjk1OWM0
NTA4YTYwHhcNMjUxMTExMTEwMDU0WhcNMjUxMTEyMTEwMDU0WjAzMTEwLwYDVQQD
EyhmYTExNmE1MTUzNTI5MzBjMThlMDVhNmU5MDZhOWRmNjk2MDhmNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCNpbiQseGBeY/SJKAvgmgQAXAZh
LmR1K64+XwJ2mnqvJfe/7nKZPnZuUrVUclc6tWWTiolfRjP7dCiMWdHdMeZg+XSC
AlSrbcBmVZDe0Lc37g7FuXkRnC5De3RTExyzmMp0Pfe5WN71ZPwH56XSJWDQGAyZ
GVFtabdQVjDEZPD+ZKjDoEGyuUqy3KqzI7s15lAzQFhRn3Ni5tZJH4viQY9O/iSj
v3AfCyzy/eI1xrofMzUOAC4Hv6VkFU2aT+rlVw5rbVnI3FSkioE2E5CEgXg1YVYx
UA/df82XotheEk+ttxJmbb+oF6sololS84H+zQl0cB8SWXfttIFyJLK0bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoRalFTUpMMGOBabpBqnfaWCPU+MB8GA1UdIwQY
MBaAFEj9+B+/OvQwZypL9kJ3O5WcRQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTIt
MDgxZDEyMTQ2ZmEzLzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTItMDgxZDEyMTQ2ZmEz
LzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViZuhdqL
MrCzQ+ToIzFTw/cDFNs+j9DmvNxaraiYkO/r7wuD4STKh9NMY2WpurGdvE3fi5Bm
hKbYllNPLMKTGKWxokIqhtL63CHCyILvFCEOIoTsPOghdGFtkco+SmK3rE9oH7qW
Abu1v3+Su0aag8Poua7s9g9V7yWTk/974SZtoWKz8WhDCOda7q2ohdvsRHOMV/6M
zJTn1DgJ6WPVypvbZanrYKkgHVk9VvX/fU2vsZuI/jLzxOK8+EXhpM9i0xm3Tgck
RB6+cb9O2mDOp3nPPOopwlvo6d+xuG+IqN6x/xDVtpRB7p7pdmkLCvz5fguXY4T9
eLCh3rmZT6vhXA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:57 2025 by rpki-client