Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
File: SPEmUDG2es3hHypnONAjRpnRgBc.mft (raw, json)
Hash identifier: iHsdLJcwcYETzsSX3PMCfJB4dHKCuAUlVvblEQbJL48=
Subject key identifier: D9:CB:78:29:6A:23:FA:99:75:8C:B0:4E:D9:1D:6A:4F:DB:7C:D2:72
Authority key identifier: 48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
Certificate issuer: /CN=48f1265031b67acde11f2a6738d0234699d18017
Certificate serial: 019921B2202304672997979BD9EDDC13B592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
Manifest number: 88
Signing time: Sun 07 Sep 2025 01:02:25 +0000
Manifest this update: Sun 07 Sep 2025 01:02:25 +0000
Manifest next update: Mon 08 Sep 2025 01:02:25 +0000
Files and hashes: 1: SPEmUDG2es3hHypnONAjRpnRgBc.crl (hash: BjI7ZXieveV0GCj6RiRYS4OAR3A3hjskaa6Q42dDLN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:20:23:04:67:29:97:97:9b:d9:ed:dc:13:b5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f1265031b67acde11f2a6738d0234699d18017
Validity
Not Before: Sep 7 01:02:25 2025 GMT
Not After : Sep 8 01:02:25 2025 GMT
Subject: CN=d9cb78296a23fa99758cb04ed91d6a4fdb7cd272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:69:c0:78:c4:a5:e5:d2:25:4f:6d:bf:97:
83:6e:c3:54:63:a4:9f:6f:6f:75:8a:f2:a6:51:fc:
be:96:75:c2:cc:d2:05:6e:73:b8:c6:d2:9c:60:c8:
a3:3f:46:75:2c:dd:99:0c:57:8c:41:f3:8b:25:99:
75:45:cf:a7:16:70:dc:6e:b1:a1:a2:7f:ae:1b:42:
f2:77:3f:c3:3d:b8:78:00:41:d7:d6:b1:37:1c:95:
01:3c:1e:c2:01:28:b3:cc:e5:58:0a:fd:c5:ee:ac:
97:52:c2:a4:df:fa:7e:2d:1d:39:4b:34:3c:da:94:
1e:41:2b:a3:34:b5:45:9b:83:41:6d:f2:f4:fd:99:
b3:ea:28:49:7b:54:17:e1:26:fe:e0:13:93:1f:42:
56:3b:09:ac:e8:9b:60:39:31:37:30:82:35:d8:9d:
b8:98:09:16:48:42:d3:a5:0b:9c:fe:bb:4c:4a:f0:
73:7c:11:8b:e2:4c:a6:47:e6:f6:bf:5a:60:5d:ca:
77:6a:40:75:5f:43:ea:a6:f1:0a:1c:e4:85:89:37:
c0:e2:b6:33:85:c7:a5:6e:c7:91:67:db:79:fb:a0:
35:d5:15:c2:ae:1e:12:ea:3a:07:b9:ec:5b:5c:13:
f1:5b:60:f8:0f:79:38:55:06:39:5c:ad:79:22:42:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CB:78:29:6A:23:FA:99:75:8C:B0:4E:D9:1D:6A:4F:DB:7C:D2:72
X509v3 Authority Key Identifier:
keyid:48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:24:10:b6:5c:8a:57:10:10:92:b3:98:08:ce:d1:ff:60:44:
67:3e:d0:70:cb:f6:12:43:85:a4:28:62:c1:90:c6:8a:44:df:
f5:ae:4d:77:7e:ab:57:e4:f1:42:8c:97:15:85:96:ab:45:15:
36:10:8d:61:1d:48:4c:29:1c:9a:a9:f4:2a:4d:38:74:95:85:
83:fd:fa:fe:81:66:85:0f:41:67:5f:e5:11:ff:cf:d4:e6:4f:
a6:b9:c9:9e:db:e8:ea:15:64:5a:a9:c0:e1:99:89:b9:91:2a:
9b:03:78:5d:a8:2c:2b:f6:5f:f7:dc:b9:32:21:f1:61:d2:28:
09:ab:89:e2:68:dc:5b:ac:ac:ff:97:8b:e9:1e:96:17:37:8a:
1c:6d:47:b4:ec:d6:fa:41:40:2f:d4:5e:5d:e3:c1:a4:1b:c8:
db:69:a9:07:56:ee:3d:1a:26:6b:d8:8c:e4:86:9e:6c:8b:77:
e6:c6:be:8e:e8:bd:41:be:8a:62:44:e8:3b:95:d0:d6:f8:f1:
0f:4f:5d:f7:1d:98:f5:fe:a5:f4:26:a6:be:0f:d0:d2:02:5e:
ac:5f:01:a2:69:b7:ac:42:c2:bb:be:8a:1d:94:70:34:04:e3:
6d:a0:3f:ca:de:6d:77:2d:d4:02:f3:c5:65:b8:a7:75:27:df:
0f:f4:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:10 2025 by rpki-client