Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: 6lLr2o3RHfdLRaakMAFuZXbiMPIol+8iVvbGF0jIlzw=
Subject key identifier: 3B:3D:5F:24:14:5A:18:A1:4B:2B:2B:07:C3:23:D1:51:6D:65:00:C7
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 0197B7B30F280D83A225CA7DF9E72B66163E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 18:00:54 +0000
Manifest this update: Sat 28 Jun 2025 18:00:54 +0000
Manifest next update: Sun 29 Jun 2025 18:00:54 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: NP8lBsSg8lQMoBONFlMAfL6H8+buQ5CwysNe/ACLhu4=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0f:28:0d:83:a2:25:ca:7d:f9:e7:2b:66:16:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Jun 28 18:00:54 2025 GMT
Not After : Jun 29 18:00:54 2025 GMT
Subject: CN=3b3d5f24145a18a14b2b2b07c323d1516d6500c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:80:8c:f6:9d:86:1f:80:c2:b3:f4:e5:67:
64:3c:9f:e4:c0:6a:48:14:43:0d:44:2d:d2:3f:4b:
b0:3b:6d:29:6d:e3:d2:27:20:fb:bf:69:8f:cb:59:
5d:35:f3:86:f8:65:7d:b9:59:b6:cc:5d:44:9b:8b:
04:92:d4:f6:b1:e0:d3:f4:4b:5c:95:c9:cd:0d:87:
30:90:c5:49:4d:69:c3:d2:ce:b9:40:9e:b0:b7:bd:
41:12:9e:07:3a:51:5c:0a:0c:6b:af:cc:c0:65:22:
81:3d:81:fc:a6:81:89:9b:be:de:fc:85:96:af:84:
ee:1b:ba:27:68:fe:92:20:49:81:12:cb:38:b5:ec:
84:b7:bf:d6:59:cc:3d:6f:55:99:0c:aa:09:b0:76:
81:18:11:61:cf:4b:5e:78:35:e0:38:f3:b0:40:91:
77:2d:35:a3:1d:30:dd:36:77:c0:a5:17:0f:51:7b:
da:dc:b3:aa:65:4c:ab:e1:08:ac:37:fb:c9:4a:04:
72:35:85:a1:ad:13:c8:36:86:b7:6b:73:40:f0:b8:
73:64:69:60:bb:c3:6e:45:23:0f:eb:fc:f5:ee:52:
14:ab:8f:25:6e:52:ed:35:0d:23:60:77:47:b3:60:
1e:d5:53:93:f9:43:54:4d:7e:b7:6b:e9:b9:93:cc:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3D:5F:24:14:5A:18:A1:4B:2B:2B:07:C3:23:D1:51:6D:65:00:C7
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:01:b3:82:8d:5e:46:bd:ed:b2:75:74:dc:59:96:bc:99:10:
48:1d:ac:7b:f4:a0:68:42:76:18:9a:76:6c:03:2f:c8:9a:19:
3f:12:9a:ad:06:07:16:b2:34:2d:34:8a:71:dc:9e:2b:e1:d4:
d2:77:e3:2b:42:61:d3:31:ce:ae:12:05:1a:60:d9:93:2f:f6:
c6:dc:b5:38:ca:1d:31:98:77:e4:c1:7f:f1:90:85:06:cb:43:
e2:00:67:06:ff:41:74:db:6a:cb:c5:ad:dd:07:cb:39:38:97:
05:de:10:e6:ce:2e:98:38:b8:93:8f:ea:98:51:d2:7c:1a:69:
22:60:1e:3f:d6:ef:77:e3:ab:6a:98:b9:a3:83:a0:4b:ad:41:
22:70:5f:f1:80:99:dd:10:cf:da:a8:42:1f:e7:ce:10:fb:7d:
fc:44:0a:27:ea:84:de:9b:df:fc:8d:0f:eb:ab:8d:a9:99:ff:
26:b9:83:d8:0a:59:46:28:39:93:38:a7:3d:81:4f:e9:5c:e5:
5f:6d:5e:01:f4:d2:7a:43:af:38:c3:9d:c8:99:2f:8e:c2:a5:
24:82:85:58:4b:bb:13:83:4a:54:50:93:8c:62:de:c9:7b:9b:
42:c3:0f:cb:2e:1d:cf:bc:7a:05:ee:0a:ca:44:33:92:a0:b9:
87:97:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:43 2025 by rpki-client