Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: +XeD9t6251l7mJsUd2SF32sedHuSRfCzyYr+Tco6UPA=
Subject key identifier: 15:7F:70:8A:C0:AE:70:7B:67:48:38:B7:AF:8E:77:E0:9B:CC:51:01
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019A0E94DDF0733E165DD9B74E7B4DB4E80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0AF9
Signing time: Thu 23 Oct 2025 01:00:28 +0000
Manifest this update: Thu 23 Oct 2025 01:00:28 +0000
Manifest next update: Fri 24 Oct 2025 01:00:28 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: JtmeU3bCtIxjXqK87ofl+azjVtDeITItR51ogcUou1c=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:94:dd:f0:73:3e:16:5d:d9:b7:4e:7b:4d:b4:e8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Oct 23 01:00:28 2025 GMT
Not After : Oct 24 01:00:28 2025 GMT
Subject: CN=157f708ac0ae707b674838b7af8e77e09bcc5101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:3e:59:7b:0d:d5:d1:5b:94:95:d0:0d:5d:
15:18:19:bc:80:dc:42:bd:c9:67:cc:43:1d:05:b7:
1a:88:f4:67:30:4a:03:2d:ce:4d:13:7d:76:85:eb:
8f:70:eb:76:b2:dc:25:95:5c:ee:9c:80:59:fc:61:
a1:a4:97:46:f6:4a:8a:44:10:e5:5b:24:20:f6:8f:
ae:8a:b2:35:27:f3:b7:32:d6:97:3d:cb:96:9c:25:
b8:94:2f:72:cb:49:67:1b:a1:6f:82:df:47:54:32:
27:64:7b:09:1c:77:bd:fa:73:0e:72:d2:35:f2:88:
30:02:7a:27:c1:41:c3:82:16:2b:00:0c:00:50:25:
31:3d:c0:0b:c0:50:ad:f5:cc:e5:68:31:86:33:e7:
d9:e9:59:6d:b7:b1:57:08:66:90:94:80:ab:73:ed:
51:53:0f:dc:b1:8d:2b:c2:c7:f5:61:6c:2f:cc:6b:
1a:b9:bc:9b:89:ba:b0:d6:31:01:78:51:a0:d5:16:
14:ca:80:0e:0b:c7:1d:39:43:ee:1e:e9:05:dd:63:
98:a0:de:c7:58:80:d1:54:cd:48:e3:df:3a:36:18:
59:69:7f:06:39:3f:6a:f1:0b:ab:c7:ab:5e:20:e3:
16:88:0b:1a:7a:1f:71:69:3c:5d:ca:b3:85:c8:ca:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7F:70:8A:C0:AE:70:7B:67:48:38:B7:AF:8E:77:E0:9B:CC:51:01
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:73:37:ad:51:af:66:39:18:ae:23:5a:4b:55:e7:a7:5b:b5:
66:b7:db:1f:44:49:53:7f:fb:4f:54:dd:b8:4f:4f:b9:3a:86:
db:c5:65:7f:ed:dd:61:12:5b:c7:52:a2:5c:0a:72:7b:32:15:
99:9a:e6:f3:82:2f:a9:16:02:56:a4:8b:06:79:94:99:9d:64:
19:16:06:73:7b:0c:5b:12:a7:4b:6a:e4:0b:e6:8a:20:df:8f:
65:da:ed:c0:4a:2f:b7:66:ce:a6:9a:a7:8c:81:a5:4e:06:ba:
76:c8:5b:61:0e:81:d9:e2:c6:78:74:c3:e8:63:c1:45:71:87:
06:c6:ad:81:0e:71:57:26:e7:90:b6:9b:48:f0:d1:1f:00:af:
ef:ab:fe:21:be:19:f0:73:2a:aa:87:3d:2a:f3:7e:82:5a:fd:
31:e5:67:c1:44:f2:d6:01:1f:57:58:88:58:4c:83:cb:ad:da:
51:81:00:5b:9b:1c:bf:7c:59:fc:78:d4:6d:11:2e:32:10:08:
16:d3:9c:da:66:d9:8b:1c:e1:20:cd:78:59:c4:db:e7:e6:3b:
df:9d:99:40:83:2a:cc:3d:ed:bf:6c:d8:42:30:07:83:93:48:
3f:47:24:89:f5:93:b6:fb:b9:0d:94:a2:79:c9:cc:16:46:d3:
64:bb:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:24:46 2025 by rpki-client