Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
File: SPaKoudVqgrGmnD-jv6-pMIzVhE.mft (raw, json)
Hash identifier: Rt6mNH0Cl61/9Q6e8ygGSmgA2rUhlyMs79TXK3+njhU=
Subject key identifier: 5D:8E:FE:D6:78:FD:FD:C6:D2:CC:96:21:AC:A7:64:08:94:E8:A7:E5
Authority key identifier: 48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
Certificate issuer: /CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Certificate serial: 019A70A571A11FC5962CF5F439840BF39F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:21 +0000
Manifest this update: Tue 11 Nov 2025 02:01:21 +0000
Manifest next update: Wed 12 Nov 2025 02:01:21 +0000
Files and hashes: 1: SPaKoudVqgrGmnD-jv6-pMIzVhE.crl (hash: aHJNaxiE58JciTt6JaSPNTmcMPWChr+UiPfd1FtqhBQ=)
2: zdcU1X_muklbr0PsAXf5FfLi2-4.roa (hash: xVhUBfvK07juxF0BpH1Z7Z8zQ9yW0QLwTqhNif5nVRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:71:a1:1f:c5:96:2c:f5:f4:39:84:0b:f3:9f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Validity
Not Before: Nov 11 02:01:21 2025 GMT
Not After : Nov 12 02:01:21 2025 GMT
Subject: CN=5d8efed678fdfdc6d2cc9621aca7640894e8a7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:60:3d:7b:da:e8:c3:b1:cc:08:5f:32:60:
8c:e4:7b:f6:36:80:ba:32:e9:41:5a:24:b5:cd:cd:
c8:dc:26:9d:d6:8f:0f:a0:4b:53:4f:b9:33:a6:86:
04:56:f7:c9:4d:7c:1a:d5:57:04:e2:45:a1:cf:da:
0d:09:21:e4:54:8b:50:bf:4d:a0:92:72:bc:ca:21:
75:3d:69:c7:8a:58:e7:32:58:e5:46:d3:7d:55:37:
96:d1:6b:00:97:2e:ff:6f:ae:46:b5:64:28:19:1c:
ff:2c:3f:9a:84:da:26:df:cc:e9:a0:c5:30:38:eb:
6b:86:22:f5:76:ca:91:58:39:58:83:4c:f9:93:c0:
b8:9d:6d:97:fb:43:75:30:e9:86:ad:27:e2:9a:3c:
5d:ec:d1:9f:f4:43:1a:a3:c0:f5:18:9c:c5:a7:0e:
15:47:39:49:2d:28:e1:4b:82:9b:87:a0:ca:17:6d:
7b:9d:40:84:07:c0:de:7e:88:cd:53:27:e0:85:ff:
48:b3:63:df:8b:99:7f:42:a4:4f:84:fb:a0:67:cc:
f2:44:55:5e:dc:fd:57:f1:38:bb:28:8c:d6:2f:b6:
58:ca:b5:8f:92:17:c5:28:be:f9:2b:c3:4b:b9:e6:
56:27:29:02:b6:8e:e3:22:18:80:a7:12:97:aa:57:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:FE:D6:78:FD:FD:C6:D2:CC:96:21:AC:A7:64:08:94:E8:A7:E5
X509v3 Authority Key Identifier:
keyid:48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:47:be:38:90:49:2f:fa:62:5f:02:4c:1c:2a:2e:4d:71:24:
bd:66:9a:7c:af:74:e9:a5:fe:f6:e4:2e:9e:e1:55:81:bc:08:
7f:aa:1a:a4:db:10:9e:8a:49:a3:97:85:e8:27:aa:99:31:1e:
21:a5:9e:7c:fa:85:ca:7b:01:78:b8:60:f6:3c:6a:d7:6a:70:
df:67:ec:52:72:a9:69:ee:93:95:cd:96:07:80:79:59:50:1d:
f8:11:bd:26:62:11:55:29:1d:80:a8:70:df:ba:b3:52:53:d6:
f3:38:5e:0a:49:bf:51:ac:89:d7:bd:f7:4d:a0:b4:a5:aa:c2:
70:57:6b:70:62:a7:9c:6d:85:59:49:f2:db:87:9f:92:2a:1c:
0f:fa:f3:a7:94:92:fe:87:f0:b0:f5:11:df:3e:a7:fe:e0:a4:
39:5d:22:57:a8:64:f9:4b:fb:7c:d1:10:0d:5e:52:b9:23:30:
50:e5:7b:3f:f3:48:05:80:dd:23:fb:c7:78:5a:e9:ac:b9:98:
04:d2:82:23:6e:18:25:a4:28:07:ee:2f:1f:01:72:91:a7:16:
b9:45:ef:60:dd:b8:14:ae:67:46:8e:1c:c5:32:52:12:19:e5:
60:8a:2f:9a:41:fc:89:7b:01:b0:bf:ca:e4:d1:8d:0b:f6:52:
a5:c3:02:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpXGhH8WWLPX0OYQL859FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjY4YWEyZTc1NWFhMGFjNjlhNzBmZThlZmViZWE0YzIz
MzU2MTEwHhcNMjUxMTExMDIwMTIxWhcNMjUxMTEyMDIwMTIxWjAzMTEwLwYDVQQD
Eyg1ZDhlZmVkNjc4ZmRmZGM2ZDJjYzk2MjFhY2E3NjQwODk0ZThhN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xJgPXva6MOxzAhfMmCM5Hv2NoC6
MulBWiS1zc3I3Cad1o8PoEtTT7kzpoYEVvfJTXwa1VcE4kWhz9oNCSHkVItQv02g
knK8yiF1PWnHiljnMljlRtN9VTeW0WsAly7/b65GtWQoGRz/LD+ahNom38zpoMUw
OOtrhiL1dsqRWDlYg0z5k8C4nW2X+0N1MOmGrSfimjxd7NGf9EMao8D1GJzFpw4V
RzlJLSjhS4Kbh6DKF217nUCEB8DefojNUyfghf9Is2Pfi5l/QqRPhPugZ8zyRFVe
3P1X8Ti7KIzWL7ZYyrWPkhfFKL75K8NLueZWJykCto7jIhiApxKXqld0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2O/tZ4/f3G0syWIaynZAiU6KflMB8GA1UdIwQY
MBaAFEj2iqLnVaoKxppw/o7+vqTCM1YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lYzI4N2QtZWZhYi00MzQxLWJlNTMt
ZjJiNTQ0YjBmZTdiLzEvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lYzI4N2QtZWZhYi00MzQxLWJlNTMtZjJiNTQ0YjBmZTdi
LzEvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUe+OJBJ
L/piXwJMHCouTXEkvWaafK906aX+9uQunuFVgbwIf6oapNsQnopJo5eF6CeqmTEe
IaWefPqFynsBeLhg9jxq12pw32fsUnKpae6Tlc2WB4B5WVAd+BG9JmIRVSkdgKhw
37qzUlPW8zheCkm/UayJ1733TaC0parCcFdrcGKnnG2FWUny24efkiocD/rzp5SS
/ofwsPUR3z6n/uCkOV0iV6hk+Uv7fNEQDV5SuSMwUOV7P/NIBYDdI/vHeFrprLmY
BNKCI24YJaQoB+4vHwFykacWuUXvYN24FK5nRo4cxTJSEhnlYIovmkH8iXsBsL/K
5NGNC/ZSpcMCJg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client