Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: Qm6eM/O33FnfGJVM3/XIKbolh0ADcuhiwheLczEKG7Y=
Subject key identifier: 00:D4:02:0C:2E:B6:F5:26:D8:C1:EB:F6:E4:2B:5B:0C:E6:74:01:FD
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 0198D583E07BD0F10CC68E940671B0C3928D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: dB/FsWKC2GTeigvnMcGoW/53VzPEm0iO4/0kGrs0Czs=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e0:7b:d0:f1:0c:c6:8e:94:06:71:b0:c3:92:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=00d4020c2eb6f526d8c1ebf6e42b5b0ce67401fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:11:0e:34:e0:84:e0:26:51:a2:de:27:6e:
ca:f2:cb:33:a4:81:e5:d0:3c:af:b3:c2:7a:7b:36:
0b:99:e4:d0:53:f5:dc:b6:35:c1:1a:52:9f:5a:94:
f3:3a:78:a9:9e:ff:00:c0:f0:1b:15:a2:48:fb:3f:
05:69:b9:39:0c:44:53:98:ec:11:89:a3:82:73:95:
92:db:b9:db:5b:da:64:a8:0a:77:fd:4b:72:5b:5a:
17:12:ca:1a:07:99:09:2d:dd:65:a9:46:91:1d:67:
cf:6f:e0:72:d1:71:c8:e8:4c:dc:4f:56:2c:4c:a5:
7c:86:8c:75:b6:2b:c3:16:e6:7b:c5:5e:7f:ca:ed:
70:97:19:a1:c7:34:69:a0:53:e5:65:9d:bb:4a:a4:
28:5d:39:85:89:a7:dd:97:f6:f1:14:07:d7:9d:4c:
c5:ca:d3:08:b7:77:1c:40:64:23:eb:13:77:ae:16:
5b:b0:6d:2f:1d:d2:65:b8:1f:86:b4:f9:ad:f5:a8:
32:43:0d:a1:07:20:4b:5b:00:8b:04:4b:c7:d6:11:
19:f6:c1:d2:c4:1d:0a:d8:82:b5:66:16:50:cf:c5:
3b:c7:06:60:3d:e4:b2:04:2d:62:f9:96:d7:ee:25:
70:01:71:49:bc:a8:c0:8f:97:1e:2f:4e:33:2c:6b:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:02:0C:2E:B6:F5:26:D8:C1:EB:F6:E4:2B:5B:0C:E6:74:01:FD
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3a:f4:19:6c:c6:08:55:80:8b:36:0b:9c:d1:bb:c0:1f:5c:
2f:a7:01:85:73:29:9f:61:45:7e:ba:ee:04:88:60:36:26:2e:
61:eb:05:1c:0c:0f:0c:1c:42:8c:2f:e9:b8:71:70:01:6b:18:
7a:27:73:78:4b:3b:68:97:08:51:4f:71:c8:a6:9b:0d:ce:53:
13:fa:58:43:f8:1c:69:14:78:ad:75:3a:e1:3a:15:84:c5:69:
62:e0:23:29:af:0f:eb:d1:5a:95:1c:85:05:23:97:62:fb:2a:
98:95:36:97:cd:d3:7d:f4:ac:26:20:9b:17:80:94:25:03:ed:
c0:e2:b2:bf:d8:fd:fc:34:b8:2b:88:c2:ef:87:1b:60:e6:26:
46:3d:84:6a:eb:16:3d:24:b8:92:b2:ce:87:71:6d:17:7c:5d:
e6:4b:66:cb:8b:c7:89:2b:c3:02:10:8a:6e:5d:e6:cc:48:cd:
a1:8c:d8:6c:cb:f3:ee:b1:ea:31:9a:d6:ee:85:f1:cf:c9:65:
79:a6:2c:fb:49:0e:86:89:f9:cb:c9:51:0e:26:f7:7a:f9:00:
f4:77:8b:6a:4c:6e:53:de:6a:2d:d5:ba:c5:a1:30:5d:b5:48:
11:2c:3a:8c:a8:26:20:23:af:a0:0e:75:d4:22:39:ae:e0:50:
0b:de:5c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:38 2025 by rpki-client