Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier: OBkmPSYZuJAW5hbMNbPQm89MzEOcGlZ7pufhFDFVW5A=
Subject key identifier: DE:35:2F:AD:1B:26:75:D1:4E:90:04:AD:3D:D7:34:AB:C6:C8:CA:AD
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial: 0199FE47203E23845D2F30E1E7DC668802F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number: 143B
Signing time: Sun 19 Oct 2025 21:01:37 +0000
Manifest this update: Sun 19 Oct 2025 21:01:37 +0000
Manifest next update: Mon 20 Oct 2025 21:01:37 +0000
Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: mWihi3s4ZvC2MVxT+XQGl+gp44Vg6yJdSsG6q/r+cOU=)
2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:20:3e:23:84:5d:2f:30:e1:e7:dc:66:88:02:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Validity
Not Before: Oct 19 21:01:37 2025 GMT
Not After : Oct 20 21:01:37 2025 GMT
Subject: CN=de352fad1b2675d14e9004ad3dd734abc6c8caad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b8:8b:65:b1:4c:1f:5b:12:1c:48:03:69:00:
2d:61:6a:f2:57:ca:59:bb:0e:75:b1:4b:35:a7:c2:
71:0d:32:c9:4d:19:8d:c1:16:74:61:3c:b4:0b:dc:
23:f4:2b:fb:da:67:92:cf:e3:57:c8:b8:6b:43:3a:
51:ba:5c:fb:9b:32:a9:84:42:9f:37:10:13:af:96:
5c:3d:52:fb:82:6f:81:44:55:cc:8c:80:c2:5b:2f:
cc:7f:f8:0e:33:e3:d8:47:3b:20:77:15:fe:56:9e:
e4:14:c1:de:24:be:40:26:2a:1c:5f:6d:f8:c3:78:
75:ac:e0:af:ed:97:14:88:a4:92:8c:53:50:67:3e:
02:15:bf:17:b8:b7:3a:48:9f:e8:51:ee:a5:4d:7a:
09:53:79:5f:1c:84:17:58:91:01:f9:98:08:20:34:
2a:38:46:c2:5a:71:41:b7:66:52:1e:97:78:86:94:
59:7a:18:c7:a6:be:85:43:1f:58:3a:65:de:1b:08:
df:fc:e0:e7:77:e9:41:83:7d:d0:68:0d:f6:98:bf:
7b:62:8c:b6:ff:41:6d:d9:13:a9:b3:03:5d:31:f9:
29:f3:12:01:ab:e1:ae:5b:fe:20:27:21:58:4e:cc:
8d:fb:59:d1:8f:38:e5:ce:67:78:39:40:cb:66:6a:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:2F:AD:1B:26:75:D1:4E:90:04:AD:3D:D7:34:AB:C6:C8:CA:AD
X509v3 Authority Key Identifier:
keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ef:48:d6:67:0b:2a:1a:8d:39:17:d9:4e:c0:57:a0:cc:fa:
5a:c7:48:b3:48:d3:2c:30:e3:03:41:07:26:0d:cf:39:d2:40:
6b:47:64:d8:4b:55:d0:7a:43:96:fe:0e:03:ce:4e:27:ca:9e:
ee:58:3d:8d:5c:97:16:b2:21:6c:a1:72:5e:b4:4c:8a:16:94:
31:92:ad:88:61:18:25:de:26:54:a6:c1:32:d5:8a:1f:9d:bf:
8e:64:81:de:d3:d4:19:fb:01:b9:93:c6:21:a4:c8:42:42:e0:
c9:1f:05:d8:2b:dd:a7:14:78:eb:0d:a8:e0:de:b2:e0:0d:36:
3a:a0:eb:99:b2:0a:64:df:fe:9a:d1:34:e0:1b:e0:42:4c:b7:
d5:65:e8:c0:3c:00:b3:e6:56:63:ce:bf:9b:bb:bc:b3:b4:4f:
f7:97:02:ff:2e:08:de:47:e6:34:94:78:66:59:21:d8:3a:50:
31:68:f8:cf:63:2e:85:a2:24:70:67:a5:92:ad:7a:3b:45:40:
ff:70:83:57:b5:4b:1d:67:42:e5:0e:bb:6c:e9:d5:1a:f0:82:
f8:53:73:cb:b2:44:9a:3c:68:14:27:bd:80:f9:ad:fa:f6:04:
1a:51:9b:a1:65:81:0b:b6:23:c4:5d:cb:db:a4:11:77:f9:bb:
38:7a:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:24 2025 by rpki-client