
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: 8WDr2TZhmQTQlhp4UyOYaP2+H4hKuEuxdgOfnviCFS8=
Subject key identifier: 65:10:F2:AA:5C:6E:AE:B1:31:EF:C0:5F:D8:F8:35:54:44:47:FE:B0
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 0199FBEB730BDC49C99B27BAEB032D5A60F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 15E7
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: O6aXmQU6T4sHMK67oeH4X3EBU3N07I9QUWRBdxKf/48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:73:0b:dc:49:c9:9b:27:ba:eb:03:2d:5a:60:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=6510f2aa5c6eaeb131efc05fd8f835544447feb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:25:f0:f5:72:c0:1d:9b:c7:0e:93:39:63:
c5:c6:ac:1f:25:d0:2b:a8:65:59:09:3d:bb:bd:03:
6f:6c:23:14:57:68:f0:67:fa:90:eb:79:64:1d:95:
d3:72:91:31:8d:02:03:c7:15:51:29:80:21:ad:8c:
93:61:7c:c5:2d:23:d0:2b:45:cc:38:04:33:18:d9:
76:52:02:08:a5:47:d7:c0:95:b0:7a:60:95:0d:33:
d5:a3:fd:94:f5:04:4b:7a:fb:35:04:e1:29:25:0c:
6d:a0:03:a8:e9:49:15:2a:83:7c:0a:f3:e9:c0:7a:
93:0b:f3:65:63:58:57:7e:f8:fc:62:56:a2:53:78:
6a:61:3d:e7:75:21:d5:5f:b3:f7:15:26:07:79:45:
68:0d:7f:06:87:b1:78:99:cb:92:b6:b2:aa:35:5c:
b2:84:a2:56:3e:2a:5e:8d:62:40:29:22:29:b9:9a:
9b:2d:12:66:3f:c3:b6:4b:0b:23:b0:2c:e8:7b:b3:
7d:52:20:fa:05:98:5c:06:ce:86:4e:42:a9:7d:df:
bc:0c:f0:a2:0e:19:81:cf:bf:3e:4c:66:60:50:ac:
7b:6a:ad:33:e5:8e:c1:28:b7:70:f2:50:e4:f0:c2:
40:fd:4e:02:99:80:81:9a:1d:37:c7:35:a8:3d:b1:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:F2:AA:5C:6E:AE:B1:31:EF:C0:5F:D8:F8:35:54:44:47:FE:B0
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:32:89:f8:2e:af:fd:d9:1f:7f:5b:f7:48:e5:20:6a:44:e9:
08:eb:47:cf:a0:e5:5e:12:83:d6:72:14:d1:50:87:57:51:80:
39:69:28:6d:60:83:97:71:a5:35:bc:59:7d:12:14:ee:45:8f:
f4:91:eb:0b:35:69:d6:41:a5:3f:33:6b:6e:64:1d:e5:52:47:
02:86:3a:cc:09:b1:78:b6:07:fd:25:81:14:55:ef:79:18:96:
23:08:8b:8c:0d:b7:94:bb:db:23:ca:a6:b8:c1:e5:72:99:48:
38:3d:57:e6:0f:85:79:07:1e:7a:1e:b4:7f:94:9b:6c:e0:9b:
33:94:25:c3:b9:0e:1d:16:a7:69:15:2a:bc:7b:72:0c:ea:ea:
fd:c7:aa:73:d6:31:00:99:2f:73:65:02:eb:d7:23:de:78:ae:
69:2f:61:78:b4:a3:9a:0e:e0:35:a9:04:2b:9c:17:eb:f8:ed:
00:1c:bc:02:23:34:4f:4d:2c:80:d9:56:05:de:53:c7:71:9b:
e8:47:f2:3b:0e:59:9c:8a:40:d4:d0:5c:2a:ac:18:40:2d:04:
d5:4f:c5:23:2d:24:34:11:5a:81:d2:0e:e7:36:e2:d0:82:03:
5c:75:29:18:1f:e5:97:f6:fb:1e:c2:24:af:5f:fb:e7:ea:f9:
1e:c5:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:54 2025 by rpki-client