Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: SdWbujgaXktXchkMxSZJTW/77wzog2W4f6PIUyJmKUc=
Subject key identifier: 3A:07:D8:9E:73:2D:00:8B:F9:86:86:AA:B3:C1:55:93:F9:74:15:78
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 0199FEEC11CE0C751671397603E6EE899AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 00:01:47 +0000
Manifest this update: Mon 20 Oct 2025 00:01:47 +0000
Manifest next update: Tue 21 Oct 2025 00:01:47 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: E9nQWldv7/ublW3fehHGBaxNsk3xGKoGiDKirT+1QSo=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:11:ce:0c:75:16:71:39:76:03:e6:ee:89:9a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Oct 20 00:01:47 2025 GMT
Not After : Oct 21 00:01:47 2025 GMT
Subject: CN=3a07d89e732d008bf98686aab3c15593f9741578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:6f:e6:81:7f:86:25:2e:1f:99:59:22:ec:
31:27:a7:74:d3:f5:0d:62:e0:9e:b3:bc:06:6b:28:
30:df:bd:d2:d1:03:4b:03:6a:b0:fe:d5:d1:67:62:
0e:36:4a:36:71:54:89:e0:28:14:1a:1d:1a:a9:a9:
d0:b6:c0:37:4a:5a:21:40:7b:0a:28:1b:7d:55:de:
ba:52:6f:30:7d:9e:85:21:86:ab:d3:65:13:f1:e3:
40:d6:13:21:e6:31:73:5b:a6:4d:f6:d8:2e:78:f7:
86:a2:d7:29:82:02:ba:ae:1d:ef:bc:fb:de:af:79:
22:f2:19:e9:cb:74:df:30:fb:6a:39:49:9d:88:4c:
47:42:1f:fe:f0:58:03:2b:25:eb:a4:01:a0:05:62:
3d:f1:54:10:09:13:15:af:16:f6:9d:ee:f2:dc:7c:
84:56:89:d7:57:c0:31:38:fd:ab:d4:39:ef:a7:77:
00:63:3a:cf:31:07:84:3c:21:43:91:45:a7:1f:7b:
02:25:6e:e4:a3:3d:73:7d:42:af:ab:a3:3d:a0:c2:
4d:ba:2f:89:9b:13:d8:eb:52:85:f2:ad:a3:26:1a:
16:87:d8:49:c0:7a:c8:64:47:d5:6a:83:ed:cb:4f:
0a:18:6b:c5:2d:27:7b:20:2b:73:c3:bd:6f:72:99:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:07:D8:9E:73:2D:00:8B:F9:86:86:AA:B3:C1:55:93:F9:74:15:78
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:55:43:4e:ad:db:7a:74:d9:8a:52:27:64:b9:da:bc:51:2b:
d8:d4:74:79:74:ee:44:f0:01:6a:8d:d4:cd:7b:94:37:9d:8d:
f8:b5:d2:0d:63:d6:f2:b4:75:d2:33:d2:1d:83:04:df:30:b6:
56:86:c1:4b:10:13:35:e6:08:92:4e:01:58:a6:14:87:4c:96:
82:08:3e:57:8f:b0:3d:f7:d2:d0:69:ad:0b:67:86:7a:90:c4:
62:96:e9:9f:7f:4f:ad:bd:ae:94:35:f5:ba:92:99:bc:45:13:
34:4d:02:15:24:4f:25:c0:dd:82:b1:a0:ee:43:86:3c:bd:90:
26:3e:14:d9:b3:32:ba:62:31:2e:a6:a6:3a:5d:52:77:be:0c:
5c:24:76:fd:ff:68:a6:7a:c2:ab:37:72:b1:9c:5c:f3:1e:48:
5e:5d:0c:48:35:c6:3b:06:50:3b:e8:20:cf:99:ef:7f:f1:5f:
7e:dc:18:51:36:e4:da:29:f9:aa:fb:ad:f3:8e:ff:52:44:35:
a8:cc:5c:e9:70:b7:b6:0c:72:56:1a:f4:34:f9:be:b9:48:62:
54:de:e1:94:1a:06:43:22:53:d7:01:30:b6:cb:c5:a5:c0:24:
2f:0c:4e:69:7a:e6:8b:c5:34:92:54:80:64:4e:6c:7e:e4:2d:
6f:97:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:02 2025 by rpki-client