Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: RGVO8bwFzRwOdH9gPGl3Wu5ZGWspv8drOhL6pwAJSr0=
Subject key identifier: 25:FC:04:98:D4:2F:21:82:CB:3C:1B:72:4B:4D:23:AF:62:FD:F1:96
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 019A7112CA75C455154EE2B483E9BA17A504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 0321
Signing time: Tue 11 Nov 2025 04:00:48 +0000
Manifest this update: Tue 11 Nov 2025 04:00:48 +0000
Manifest next update: Wed 12 Nov 2025 04:00:48 +0000
Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=)
2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: +Ike5N+RjLH1CfhVZHs6alGY5RgtzaLEvVxRs2cwwow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ca:75:c4:55:15:4e:e2:b4:83:e9:ba:17:a5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Nov 11 04:00:48 2025 GMT
Not After : Nov 12 04:00:48 2025 GMT
Subject: CN=25fc0498d42f2182cb3c1b724b4d23af62fdf196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:2b:9a:ee:28:57:4e:69:c4:3f:a3:5e:62:
c1:28:3a:6a:7b:fa:f8:db:db:e2:67:e1:c8:c4:f8:
3b:7f:46:e7:77:9a:2c:05:6f:5c:13:b7:40:09:46:
43:b2:56:1a:1a:83:1f:bf:a5:38:3c:6d:6c:f8:34:
38:8c:1d:74:b0:11:eb:0d:65:e9:da:b1:82:01:b4:
06:1d:85:d1:41:b8:aa:d9:33:b8:77:9e:32:71:f7:
95:fd:e1:b2:e3:ab:ae:fa:58:48:dc:7d:1a:86:78:
22:70:13:6f:36:4e:ce:21:54:16:cd:6a:41:b5:23:
b6:5c:1b:ae:4b:26:dd:2e:6b:8c:77:65:f6:15:4d:
a1:e1:47:6f:f8:e8:83:32:a1:ec:24:bd:05:7a:53:
36:ac:72:39:d1:ae:18:e6:fc:c6:0a:10:3e:5a:30:
8d:b0:b1:08:52:8d:5c:91:64:43:10:3a:64:24:27:
e1:c1:20:93:ce:8b:01:c7:0b:62:61:b4:72:ed:1a:
6d:35:90:98:67:72:b5:95:4b:58:19:9a:0f:25:0e:
90:01:4d:a8:28:75:44:da:1a:72:bf:5e:3f:ef:69:
ec:0f:56:cb:5a:71:eb:83:1b:e8:9e:97:3d:fa:ef:
9b:80:a5:c3:df:d8:d4:c3:9e:af:43:2a:11:23:b0:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FC:04:98:D4:2F:21:82:CB:3C:1B:72:4B:4D:23:AF:62:FD:F1:96
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0a:02:06:14:84:38:fc:5d:13:ed:ec:b3:d8:15:c9:3c:a8:
f1:00:e8:88:0c:49:08:b5:fc:ae:7e:8b:1c:14:1e:f4:a4:91:
1e:b0:13:75:a8:7b:ce:b7:6f:4a:0b:b9:b0:ad:56:01:f8:ae:
33:01:e9:e7:8d:92:b8:46:9b:0f:7c:44:44:3e:dc:af:36:4e:
5e:31:73:bf:0a:1a:d1:58:ba:f9:45:ca:ca:71:a9:c9:d1:06:
af:18:69:dc:f3:28:dd:ef:1b:c5:8c:7c:26:bb:6b:4a:58:59:
fc:b9:bf:4a:46:c9:c4:93:f6:c9:2c:81:44:f8:c7:77:0e:8e:
fd:d5:90:0c:6a:ea:2f:a5:f8:4a:5a:bd:27:b8:66:08:b7:5a:
78:a2:84:78:80:ef:dd:bf:0b:2c:93:aa:f8:8b:e7:94:5a:0c:
88:e0:7d:86:83:60:89:90:ee:ff:bf:86:2a:fd:f9:f2:99:25:
44:c6:f6:88:a0:61:c4:b8:98:8d:2c:aa:24:bc:20:70:65:16:
69:96:2a:a8:70:e4:63:fb:6e:7a:6d:47:c9:ed:ef:9c:ad:85:
14:89:f9:7d:11:41:ab:68:ea:0f:b9:f0:fc:b0:70:e8:f9:4a:
bd:7b:5c:a2:07:f3:77:e3:a5:63:61:b1:1e:2d:35:f1:41:5a:
69:91:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:07 2025 by rpki-client