Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: WDJ2HrLg9NIBkZcT2KT/PmudYrZgBikOsW4IJoQyqzo=
Subject key identifier: 64:1A:6A:A1:D3:C0:01:FE:84:3E:B0:77:0D:95:10:E8:DD:7D:DD:AB
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 0197B6A1799300389E5CD70D2FD531D18D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 14BA
Signing time: Sat 28 Jun 2025 13:02:05 +0000
Manifest this update: Sat 28 Jun 2025 13:02:05 +0000
Manifest next update: Sun 29 Jun 2025 13:02:05 +0000
Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: WORSiQtvTt+bzFsNjKRIxIHw5VU/BeIe6E3iJRrSQdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:79:93:00:38:9e:5c:d7:0d:2f:d5:31:d1:8d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Jun 28 13:02:05 2025 GMT
Not After : Jun 29 13:02:05 2025 GMT
Subject: CN=641a6aa1d3c001fe843eb0770d9510e8dd7dddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:69:15:11:97:76:a1:c8:70:8a:95:9c:0c:
42:6f:70:79:3e:c9:cf:ab:72:fb:f5:b8:d5:ce:dc:
11:f1:14:39:b3:70:59:24:a1:3f:f4:42:d9:2f:aa:
5b:d4:d4:42:36:d5:d3:57:3a:e5:68:8f:f1:cd:3a:
9a:20:59:1a:49:ee:fe:52:64:43:0d:b2:0c:19:39:
79:86:12:36:24:47:49:61:51:7d:64:9f:23:e5:75:
56:08:df:9b:a8:4b:43:67:fb:d5:af:0d:02:bc:ed:
7f:2e:0b:da:5e:e8:e0:43:f5:53:12:33:dd:52:ea:
e1:79:04:74:b7:b1:39:88:b0:f3:b2:ee:e5:c4:09:
42:97:c6:1b:3d:75:8e:99:8f:ed:cd:1a:f1:cb:16:
fc:9e:87:11:ca:43:2f:06:f5:e5:d9:4c:10:a9:9a:
eb:72:7b:b1:eb:b4:14:2a:4a:00:0e:e6:0c:b2:35:
2d:f6:9f:1a:e6:82:53:9b:33:31:bb:18:a9:74:18:
e3:14:55:17:1c:a3:3b:d0:6a:03:38:4a:36:0f:55:
c5:7b:6a:59:3c:eb:5f:32:5e:56:d1:70:09:89:b8:
0e:0f:48:91:22:d7:ed:a4:c1:c7:6b:2a:fc:78:d3:
8b:19:68:69:2b:00:d0:41:c8:23:20:a6:a8:53:af:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1A:6A:A1:D3:C0:01:FE:84:3E:B0:77:0D:95:10:E8:DD:7D:DD:AB
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:74:8f:34:af:18:a1:28:af:62:af:e3:38:53:6c:05:fb:51:
e3:ba:da:78:11:10:b5:41:2d:17:99:b3:f8:be:cd:24:90:95:
cd:7b:c2:77:e9:6b:47:b7:20:6b:df:1b:7c:2f:cf:bd:13:b5:
1a:e7:54:68:1f:9d:26:b5:79:34:66:ff:4d:37:00:37:7e:40:
a4:a7:12:fc:c3:42:33:2c:5b:de:a7:50:c2:2f:03:3c:e3:a9:
5b:bb:0a:96:cf:ff:e9:a6:0b:e6:ca:be:8b:22:c1:1b:54:79:
dc:91:97:56:d2:bb:1f:26:fa:9e:aa:66:dd:ec:24:92:be:1a:
fb:ef:b0:07:3f:b3:5c:4b:f2:dd:f4:22:d8:15:84:a5:48:6d:
af:86:dc:bc:73:ec:ca:ae:78:b7:22:7f:09:a3:3a:a1:7d:1f:
60:d0:82:cf:60:60:85:4d:c5:ac:5f:30:b5:75:19:aa:f1:5b:
d7:d5:63:b8:6c:82:0d:25:a6:82:37:b7:b1:28:bd:96:2c:06:
98:59:5a:1f:c5:48:82:16:1f:cb:3a:13:79:df:7e:1f:d9:46:
05:3c:26:bc:4b:e3:62:10:52:01:fa:25:4c:cb:4e:8a:cc:ad:
40:6a:ac:49:d9:4b:58:39:86:94:8d:ad:0d:57:32:bb:a0:90:
e0:a5:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:07 2025 by rpki-client