Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: oh01Bck9Ite/sY25zSqacROhgUVOerTiA/Kf0QRu9ao=
Subject key identifier: A0:F9:8C:03:D9:54:14:BC:82:FC:FA:43:3E:55:BC:28:19:B0:2F:28
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 0198D65F5A78FFE84412C2467B9CCE32253C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 154F
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: tI0MCIclTf1QAzXxWD80Uy1IpkFUJE9oEoaiFkqFg6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5a:78:ff:e8:44:12:c2:46:7b:9c:ce:32:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=a0f98c03d95414bc82fcfa433e55bc2819b02f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:22:d4:88:62:cf:95:c0:04:12:91:ad:31:
cd:ac:e1:68:96:6b:d1:f4:ee:af:82:9c:bc:6a:75:
b3:20:28:26:21:d4:cb:7f:00:81:1d:43:3c:8e:71:
93:12:6b:ea:94:18:08:ad:ad:63:c8:9f:dc:74:cc:
46:d9:3f:0c:70:6f:aa:12:4d:52:ae:01:2f:89:e3:
63:7d:ce:12:25:3a:92:67:ff:22:68:f9:cf:6b:9c:
ba:a1:14:4e:d1:d6:48:a6:0d:7b:5f:88:9f:f1:db:
be:aa:ff:86:0d:af:fa:ab:7f:78:45:16:bb:67:45:
7b:74:89:19:5c:85:3d:f5:d2:e2:ff:5b:18:4a:ba:
5f:ee:ba:1d:74:8b:b0:ec:bf:ab:31:b4:74:1e:14:
c1:be:08:dd:74:04:d1:90:6a:05:88:54:10:6a:2e:
6d:18:59:2b:1f:c4:61:e8:71:ce:08:55:15:66:46:
72:77:81:0e:25:f4:7f:0b:93:1a:57:33:e4:a6:07:
e1:7c:5b:ab:f1:1e:2d:0d:d3:5e:28:fd:e6:52:be:
b0:bc:e7:fe:9c:1c:19:e9:40:c4:fa:07:07:2a:d7:
91:f7:f6:ee:66:50:f7:57:9c:cc:b9:ae:0f:e2:77:
93:62:b9:6a:bf:89:7a:79:89:87:0e:87:d7:61:7f:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:8C:03:D9:54:14:BC:82:FC:FA:43:3E:55:BC:28:19:B0:2F:28
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c0:e1:97:22:e5:ce:e3:7e:a9:c9:22:eb:af:b5:75:82:a1:
e1:05:f3:3d:da:08:8d:ab:06:e8:a0:02:0d:12:88:34:96:2d:
6f:9e:f4:db:ea:af:17:45:97:78:22:c8:ae:ab:11:4b:0a:b1:
46:45:b0:8f:df:73:e7:1d:f7:06:10:75:d3:e9:04:30:a4:bd:
18:c0:48:8d:e7:7b:3b:42:80:be:38:51:da:3c:b9:0c:bd:fc:
00:29:07:3d:cc:63:d9:d1:73:6e:2b:50:6b:6f:24:e8:68:41:
74:77:e9:7a:7e:39:bd:fc:cc:cb:c4:05:d3:94:b2:47:83:0d:
1f:24:c6:f6:91:93:38:d3:20:23:e3:cd:4f:e5:2d:c8:dd:77:
52:97:9e:f0:e8:a9:6d:10:cb:88:25:e8:b6:b9:84:f1:7c:24:
8d:24:83:81:97:06:e9:f3:08:f1:51:59:8e:84:31:91:e6:4f:
64:30:9a:9e:09:7f:d8:37:f5:70:2b:cf:49:31:89:97:33:8e:
6f:77:c4:16:b7:1c:f1:9d:54:d8:56:ca:4d:00:fd:e0:b5:ea:
e6:d5:08:7d:19:bb:0a:c6:91:6a:76:e2:1a:57:86:0d:29:be:
54:d1:be:15:e6:55:6c:34:60:d1:fa:7f:62:d4:8d:74:e5:35:
5c:43:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:18 2025 by rpki-client