Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: SSVumGsBlIwTtqqKULD6wBtvAFz8GsCSQ0QWHO8gLTI=
Subject key identifier: 5C:E4:E8:82:0C:A8:82:1D:B5:CE:D1:8C:A1:B2:11:6D:67:59:78:73
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 0199228C2EA7F9A0832F495CD4C7DA1C0F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 1224
Signing time: Sun 07 Sep 2025 05:00:36 +0000
Manifest this update: Sun 07 Sep 2025 05:00:36 +0000
Manifest next update: Mon 08 Sep 2025 05:00:36 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: gRnSojjj/csSasAVrnQrw3WufhoIZ8ZlRftnzLV/GYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2e:a7:f9:a0:83:2f:49:5c:d4:c7:da:1c:0f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Sep 7 05:00:36 2025 GMT
Not After : Sep 8 05:00:36 2025 GMT
Subject: CN=5ce4e8820ca8821db5ced18ca1b2116d67597873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:a9:11:f1:51:d7:3b:06:75:34:95:87:9e:
6b:f7:1d:49:31:74:8a:b2:7f:12:3c:d6:25:5f:e0:
73:11:4d:d9:e3:e1:aa:8e:72:cc:1c:2e:5a:8f:68:
b0:5d:16:a5:9a:e1:79:1d:55:aa:d1:26:5d:fd:7a:
56:58:31:2b:5f:ba:8a:c7:1e:e8:f9:29:71:94:4a:
0f:79:2d:b6:6d:0f:90:c7:93:15:55:4a:bf:a0:67:
e3:57:51:be:03:73:ef:33:38:92:cf:7a:08:69:8b:
de:d6:a5:de:a7:0c:7e:17:5b:2a:51:79:1e:a0:0f:
41:7b:53:91:8f:9a:c8:bb:06:3e:af:70:4e:86:ae:
5e:4d:8c:50:da:66:b6:f5:06:cd:15:70:0b:6f:24:
ae:ad:f3:45:fc:d3:f3:23:8f:9e:6e:a4:bb:03:bf:
be:32:cc:b1:42:8b:92:2c:60:37:af:28:7e:6e:04:
c7:be:31:63:f8:35:e9:c1:72:46:05:0a:17:7c:03:
c0:23:48:f1:6a:4a:79:7f:2d:6a:b6:81:af:d7:84:
03:b2:52:a7:c4:81:c9:d3:df:5c:c2:60:c2:9f:ee:
08:13:81:3e:fc:45:ad:23:f3:c5:54:5c:c6:4c:78:
e9:63:ab:ae:24:6a:87:42:cc:ac:13:4a:e5:5a:11:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E4:E8:82:0C:A8:82:1D:B5:CE:D1:8C:A1:B2:11:6D:67:59:78:73
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:69:03:cb:f0:93:05:d4:12:d1:76:44:f5:b4:96:94:6e:8e:
7b:e2:f6:17:0b:11:44:ab:4e:a2:8c:a1:42:2f:0f:c4:21:d9:
03:15:41:67:22:c8:f1:2d:ae:48:fb:2d:e7:f4:8e:f4:e3:f3:
b1:3b:b4:cc:b9:0f:af:b6:dd:b6:96:9e:42:2f:13:e0:dc:21:
74:84:75:a5:ae:be:7c:49:57:d7:0a:96:bf:40:f9:48:04:2a:
47:d2:d3:c9:70:f0:7b:39:f4:55:78:fe:6a:b3:da:fa:92:c2:
50:11:73:7e:8d:41:d6:57:24:14:06:fa:75:b7:54:95:74:32:
3a:5c:36:d2:db:d0:01:54:54:4f:00:47:f9:46:b3:d2:84:c4:
04:48:60:29:68:fe:37:90:ed:f5:22:13:ed:4f:7b:a5:a7:d9:
ca:14:a3:fe:5a:77:98:14:de:14:7b:d4:05:bc:62:90:a5:b0:
8d:7e:53:59:24:5c:c2:5e:a3:c2:a6:9d:79:10:df:d3:6f:c6:
06:82:c0:0d:ef:c6:85:b3:0e:e8:3c:18:bb:21:d4:15:e0:c2:
e2:8a:b8:60:d8:8c:79:d4:fb:b8:6f:01:2f:5a:7d:b0:72:04:
a8:2a:61:7e:12:59:91:29:fb:57:82:b2:1a:4b:2d:30:03:81:
b3:3a:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:55 2025 by rpki-client