Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
File: SPR6MRcvtUnGlhMogMaCT7B3e1U.mft (raw, json)
Hash identifier: D4HzrhUaqEmo6oaz7E8nkscnFIRKXJqtEp6THqpsdek=
Subject key identifier: 76:6E:12:C4:31:AD:AC:7F:E8:F0:E3:2C:00:AC:E0:AC:40:23:62:08
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 019A729346DA39820B4015094389ECBF053D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: HtsTG6s-kcm9WojEK08774k0rJc.roa (hash: /wQlqHI/CmQ5Pya/uTc2dYg4WEQ4lzOuNWS6NcGcmr0=)
2: SPR6MRcvtUnGlhMogMaCT7B3e1U.crl (hash: 6T+490IQJf3guxxHeDGzM8Zu5bRIJCs6jG0YCJ91DgU=)
3: V_dMITyg0o4yHp4v8D9mTe6CxKs.roa (hash: 5xss2ydVOa64bp1JjgZlBG0W1rKDvC4+6oZPPOh4X4M=)
4: zy5WJgdKGUnXTOnuh1U59K7_6Ag.roa (hash: M8nI7yJHs6mCq2HtD8BhE8mXk6HAwCrsH6pt0+lEi+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:46:da:39:82:0b:40:15:09:43:89:ec:bf:05:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=766e12c431adac7fe8f0e32c00ace0ac40236208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:9f:bf:12:41:fb:1b:bd:43:6f:8f:69:6b:
7a:8e:7d:97:fa:69:13:46:03:31:35:6e:ba:91:9e:
e3:f5:a6:69:f7:27:06:9f:11:9c:4d:68:5e:ec:b8:
61:a3:ae:fa:c7:98:f1:c8:fb:21:96:c3:ee:09:28:
b1:bf:d8:b9:da:1b:c5:d8:2c:9c:f2:c8:64:89:de:
b3:95:71:b8:13:62:96:1b:6a:87:d6:fd:02:88:a0:
9c:04:ef:a3:f1:8f:77:10:3a:09:c0:d3:4c:06:37:
eb:3f:7b:33:8e:27:09:42:b5:ff:3a:25:1c:b6:f5:
74:36:8d:e4:14:ef:45:7b:52:25:a6:2a:7c:9f:12:
19:96:f6:e5:0d:16:90:e8:45:c9:9c:e9:62:e9:67:
02:8b:ca:3d:b5:e5:fa:d0:68:06:df:2e:c8:69:f3:
c9:14:a4:07:cb:23:e9:a2:d2:e1:c8:c5:6a:10:c7:
aa:cd:0f:d7:3a:4c:e2:d2:9b:75:c4:55:ab:14:03:
88:75:4a:c6:88:8d:fc:26:d3:54:01:9f:9c:94:0a:
10:d8:47:bb:9d:1a:97:7f:1b:63:94:f1:1a:6d:0c:
ba:1d:e1:f2:2d:ec:b5:16:27:46:80:d0:cb:ca:06:
ff:cc:33:51:2e:ac:25:fe:e4:71:78:47:1d:c3:15:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6E:12:C4:31:AD:AC:7F:E8:F0:E3:2C:00:AC:E0:AC:40:23:62:08
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b1:60:82:2b:ff:1e:b3:12:2e:d4:73:e7:c7:23:b7:c3:0a:
98:3c:3f:e9:34:63:fc:90:be:94:1e:d2:cd:64:48:e5:5f:93:
c4:50:1c:91:3d:8e:78:1e:64:37:5a:9a:ce:c5:99:c5:d9:a2:
9f:d3:7d:42:20:b2:69:61:c3:51:88:76:83:bb:8f:34:76:7d:
73:f6:4a:ee:08:45:4f:8f:d4:ca:3b:dd:bf:64:a3:a0:1f:ad:
b6:19:a6:7b:09:13:98:8a:c5:66:7f:ba:23:3f:85:64:bf:46:
57:41:18:7c:2f:21:10:b9:aa:12:e1:87:2c:c3:09:79:f4:39:
fb:56:10:aa:4b:d3:db:18:0e:aa:58:1a:d7:f1:a2:98:55:59:
31:4d:a4:5f:7e:6b:a6:04:cc:42:bf:08:76:9d:b7:48:66:a4:
ef:18:e5:6a:ec:87:5d:08:b3:12:94:ef:f7:63:87:30:5e:d7:
ca:b3:b9:ab:51:74:20:da:0b:2a:de:5d:65:cb:88:22:6f:d3:
5f:ef:db:91:14:a6:ba:c5:c4:ba:14:06:99:ea:90:2e:4d:1f:
16:2b:21:fb:45:36:15:28:4c:53:cc:69:d9:43:6f:8e:7b:03:
9e:4d:bd:cc:d9:72:e2:72:46:54:99:e2:32:77:64:f9:a1:da:
5c:4a:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:28 2025 by rpki-client