Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
File: SpR3QFKci4QPf4kzCXmshyyj-rg.mft (raw, json)
Hash identifier: fIcdIHh11tGeO31e0eCE/frj63q15LQy862NMCJTyKM=
Subject key identifier: C9:BC:87:6E:84:36:BB:16:E3:9D:5B:93:6F:6A:C0:B1:2E:07:5A:79
Authority key identifier: 4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
Certificate issuer: /CN=4a947740529c8b840f7f89330979ac872ca3fab8
Certificate serial: 01975234393CD47AE65E314FBE9A7F29830E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
Manifest number: 012B
Signing time: Mon 09 Jun 2025 01:00:43 +0000
Manifest this update: Mon 09 Jun 2025 01:00:43 +0000
Manifest next update: Tue 10 Jun 2025 01:00:43 +0000
Files and hashes: 1: SpR3QFKci4QPf4kzCXmshyyj-rg.crl (hash: C3WRIdZLHR8+2eZj98QcciKTxDMk5/PYa28c2tmxq0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:39:3c:d4:7a:e6:5e:31:4f:be:9a:7f:29:83:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a947740529c8b840f7f89330979ac872ca3fab8
Validity
Not Before: Jun 9 01:00:43 2025 GMT
Not After : Jun 10 01:00:43 2025 GMT
Subject: CN=c9bc876e8436bb16e39d5b936f6ac0b12e075a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:04:93:eb:80:76:06:c4:ef:5e:a7:93:ca:
33:4a:8c:71:22:bc:15:6c:a9:15:2c:54:c1:3f:82:
a4:20:b2:ab:c5:d8:9c:2d:48:59:7f:81:cf:35:f9:
20:f7:8f:cc:ef:77:ea:47:97:73:01:df:0a:61:c6:
f2:19:29:36:07:2d:d2:36:5d:c9:a7:f2:13:c9:36:
d3:25:de:d9:f9:e5:25:ce:14:02:c9:50:fa:ed:87:
97:2d:8d:eb:40:ca:ce:d0:a8:ed:13:6b:bf:be:06:
06:80:3d:8a:6e:2b:61:6f:6e:e4:96:c3:35:45:82:
2a:eb:19:06:e1:dc:3f:a3:88:1d:22:85:5f:d7:20:
f6:b3:0d:13:45:3a:b9:84:48:5c:41:c3:67:2b:a3:
0d:34:06:6d:af:0d:55:af:fe:31:ce:f2:05:1b:ae:
d9:f8:d7:bb:05:09:63:c3:da:6c:52:0b:6b:a7:39:
6f:4e:24:ff:a0:30:b5:d5:c3:21:47:4a:dd:7c:6b:
83:8a:8d:9e:c1:2e:c2:33:97:0c:e0:c4:1e:99:33:
e6:ee:75:ed:ff:fe:f1:7c:c0:b1:d3:fb:8d:6b:d8:
80:3e:10:96:fa:1c:d3:a4:ee:39:b1:08:e9:3c:3f:
a2:8c:4e:09:cb:5e:9e:3b:b6:24:99:eb:6e:65:b8:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BC:87:6E:84:36:BB:16:E3:9D:5B:93:6F:6A:C0:B1:2E:07:5A:79
X509v3 Authority Key Identifier:
keyid:4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:76:f2:4e:d4:0a:e0:dc:f9:1c:93:27:11:f3:eb:75:1b:
d6:ef:1f:89:3d:0e:ab:a4:3f:4f:67:b1:e7:e3:dd:92:26:b8:
19:5c:07:b3:6a:4c:76:39:1d:d0:9f:68:02:27:2d:74:fd:72:
65:05:8e:7f:12:eb:aa:43:3a:5a:c5:fc:65:6a:3a:23:f0:a1:
38:49:65:b4:c4:b9:35:c1:37:7b:7c:76:9b:a5:b0:00:08:9e:
83:99:96:75:49:76:7a:d8:b2:0c:87:d9:3a:b1:bf:23:83:ef:
b6:09:5f:61:02:95:a0:f2:36:46:dd:11:e6:a6:30:4e:4d:f5:
94:76:cf:10:30:5c:19:a1:99:fb:81:de:ad:65:65:f3:9a:ab:
09:39:20:b6:b6:05:4e:4a:6e:42:71:14:25:cd:15:93:88:9e:
11:85:5c:70:f3:dc:da:c0:e6:e1:30:5c:47:1b:a3:3d:61:f8:
d5:35:6f:96:66:ec:cf:80:e0:b1:e9:56:45:ce:ac:9a:e3:57:
c6:76:3c:a6:c5:21:1e:b3:a2:3d:0b:73:9c:13:4f:95:be:a6:
0b:56:2b:c3:49:d0:04:1c:3e:68:a1:f0:cb:7c:bb:69:4d:51:
78:99:c6:03:d1:f3:f4:c6:28:47:85:67:0e:52:87:d0:f9:13:
ae:ee:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:48 2025 by rpki-client