Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: eUINIiHOFOcuL3BsFHOFf/48WCIud8CTm4PupScldjs=
Subject key identifier: AB:28:9B:44:EA:6C:A3:60:2F:2E:FA:83:1C:11:24:AF:D2:24:D6:81
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01993B703775AE6756076F80D0EB0FA41BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 1170
Signing time: Fri 12 Sep 2025 01:00:33 +0000
Manifest this update: Fri 12 Sep 2025 01:00:33 +0000
Manifest next update: Sat 13 Sep 2025 01:00:33 +0000
Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: I0HBVoWxsI7Yx4N/J4Cn+PHVA3m0Psg8KA+bk6BJnG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:70:37:75:ae:67:56:07:6f:80:d0:eb:0f:a4:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Sep 12 01:00:33 2025 GMT
Not After : Sep 13 01:00:33 2025 GMT
Subject: CN=ab289b44ea6ca3602f2efa831c1124afd224d681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:ad:47:73:c4:ed:99:bb:85:01:e4:70:d1:
b4:2e:93:02:b2:34:49:5a:ce:0e:ab:30:46:0b:05:
dc:3c:39:da:e8:bb:c2:64:ff:31:31:7d:f4:28:87:
4f:62:c3:85:cf:21:b6:9c:36:20:60:9d:39:94:66:
d6:25:64:84:f5:7b:17:2e:24:8c:3f:63:6e:07:84:
5b:d4:a8:c4:b8:7e:79:8b:2b:d1:73:dd:a7:37:0b:
a2:5c:77:c8:24:47:05:2c:3d:b6:05:61:70:de:3c:
2f:eb:d6:76:04:4f:1a:7c:76:5a:e3:d4:e1:67:8b:
14:75:b8:78:ae:18:cf:93:a5:d5:7b:e7:31:a5:92:
91:91:5a:49:4b:5a:e8:f9:eb:12:49:19:fb:36:b8:
9a:d5:35:f2:40:ac:9a:2e:1e:56:d6:1d:a7:49:a5:
b7:62:94:f9:d8:d9:8e:81:9f:97:6d:ed:3f:f7:ae:
ff:6b:2e:00:9c:6a:b0:5b:83:02:86:a7:83:00:74:
60:6d:a4:a9:e6:d9:f0:2b:76:1a:a8:a7:05:8b:bd:
0b:6a:ea:a3:ca:6c:ba:54:7b:79:d2:df:1d:e1:ec:
30:26:e6:3b:0f:d5:ea:94:14:80:b7:8f:8f:16:af:
5d:32:18:57:00:2a:89:bc:92:16:97:a7:2a:de:7f:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:9B:44:EA:6C:A3:60:2F:2E:FA:83:1C:11:24:AF:D2:24:D6:81
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ab:c5:49:76:c6:6b:7f:53:0b:35:a7:14:bd:54:5c:6f:c5:
c6:d8:c1:3f:ed:c7:13:46:7c:af:52:cd:45:80:1a:73:4f:b7:
c2:e3:88:75:bc:2b:5a:88:49:34:86:2d:cb:8c:1c:a3:15:4a:
7a:c8:80:be:66:89:a1:66:da:49:05:96:1b:b5:18:3d:28:07:
95:df:8b:4c:79:47:d8:8e:44:4b:62:30:80:1b:60:2f:82:35:
26:2b:6f:e9:c4:8f:c2:f0:bf:0a:97:0f:f4:a3:63:8d:72:b6:
84:94:33:a8:69:7b:59:4e:f9:85:8f:2b:0f:bc:e3:df:81:9b:
69:c3:35:38:40:bd:43:1a:35:ec:ef:d8:72:f2:af:2b:f5:69:
79:b0:97:e0:b3:45:80:58:e0:a6:b0:26:88:47:70:c1:db:d4:
bf:7f:4c:d7:10:c4:e1:cc:75:d3:2d:4c:51:23:ae:2a:1b:72:
ca:05:31:94:fb:46:d3:01:ea:3d:cd:74:0a:59:e2:84:67:bc:
de:f8:c0:90:c6:45:74:4b:4e:d3:76:64:44:da:d9:0e:83:cc:
61:1f:b3:1f:b4:83:d2:a3:25:29:ed:7c:ab:d9:73:80:92:24:
15:9a:86:d8:45:ad:ba:7f:45:74:45:c0:ee:0e:0c:e4:f5:cb:
5a:58:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 07:03:52 2025 by rpki-client