Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: 1HGLW0L0mgAvXfQ/luCLDeR4FKQ0yztxDa6nUt4LaOE=
Subject key identifier: 97:CD:47:36:74:5D:BB:39:5E:CD:2A:3D:A0:3B:BF:6C:71:93:CE:3B
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 019A70A4D538A9609ADF9598435570C2063F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0A95
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=)
2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: z6FFyCtJT0pFiFUIceRgTfQeMKJHVP8Klh4OyZugKNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d5:38:a9:60:9a:df:95:98:43:55:70:c2:06:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=97cd4736745dbb395ecd2a3da03bbf6c7193ce3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:f5:a5:85:3f:05:9b:10:7f:29:52:29:be:
64:04:47:40:17:c8:61:b8:7a:39:88:e5:b3:7c:88:
e7:f7:d6:9f:38:3e:7e:b9:31:be:b6:8e:f4:25:b1:
f8:26:8c:9e:10:5c:8f:54:01:6e:62:67:08:a1:ff:
9e:51:f1:a2:72:dc:aa:50:7c:68:0b:37:2f:30:88:
8e:18:e5:c7:4d:b0:1c:77:75:02:0f:f6:27:f1:3a:
3e:4d:e8:9c:58:76:45:5e:33:19:96:57:fe:87:78:
38:d1:43:c5:a9:7e:d4:3c:c0:1d:46:cc:c4:aa:00:
fa:19:1b:56:18:fb:9b:e4:92:bb:13:6d:55:3b:75:
73:91:45:e5:e2:42:1c:2e:7d:67:45:79:4d:89:3b:
40:16:ba:c9:4c:4e:f4:d7:0a:de:3b:2e:f0:38:16:
f1:6c:68:13:e5:48:0c:d6:08:73:8a:d6:c8:06:46:
0a:ff:23:d4:8f:15:07:53:a1:0f:aa:06:39:98:98:
94:2f:a4:e9:a6:1d:4b:b0:df:fd:78:76:40:85:cd:
c3:d8:3f:d7:c8:bc:8d:5b:4c:3f:4b:25:51:62:a1:
11:77:3c:49:5a:fb:c3:14:ea:11:31:ac:80:a3:1e:
08:64:15:20:38:41:bc:64:71:3e:e8:7d:20:49:b1:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CD:47:36:74:5D:BB:39:5E:CD:2A:3D:A0:3B:BF:6C:71:93:CE:3B
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3d:c3:dc:2a:16:06:01:b8:dd:16:74:fc:f6:47:a7:7d:18:
03:3d:05:35:0c:a3:ec:83:3f:49:08:ba:d2:8a:41:fc:82:64:
e5:35:5a:d3:57:17:80:be:c4:0d:fd:30:4e:03:91:87:0e:54:
6a:2a:9c:5a:99:c8:ec:10:cf:ce:fc:f8:b4:eb:08:38:de:47:
a5:7e:c8:cc:1a:9f:58:02:e3:3a:52:0a:00:79:ed:1a:67:bf:
e5:13:57:d6:2c:c8:af:e7:b7:34:13:11:2f:fe:6d:45:32:e5:
6c:86:00:79:92:4e:c6:27:9f:9e:89:ea:43:c9:85:3a:79:db:
f3:6d:83:9a:29:79:76:72:cc:b4:24:c8:2f:d7:50:2b:18:86:
7f:fb:16:f4:04:e4:54:f0:d1:df:d0:de:ed:c5:7f:68:79:ca:
fc:7d:15:cf:07:27:9d:b6:49:22:ef:6f:5a:09:7b:a3:7e:28:
78:14:01:17:49:1e:9e:91:46:35:3e:00:43:26:87:e9:d1:59:
3e:b1:54:b0:81:7f:bf:34:4e:52:de:a0:83:bf:66:92:1d:28:
c8:b8:09:6b:47:d1:95:a6:00:59:ee:ef:2c:58:12:27:bd:51:
2e:a6:f2:13:df:8f:cd:02:03:8d:6c:b1:69:3c:8c:6b:2e:e9:
ae:35:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:18 2025 by rpki-client