Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
File: spK68_TAei7dR9iMKxW2Wir33q0.mft (raw, json)
Hash identifier: DVUIhJAiLEwoZdTzSWd8Cl2j9mG5pbbwcdl2bE6OHt4=
Subject key identifier: C5:96:FA:83:10:0E:D7:91:87:19:D6:3D:8C:3C:B4:CB:88:76:C5:34
Authority key identifier: B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
Certificate issuer: /CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Certificate serial: 0198D47330BA6FCD1F74F176C361335B6240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
Manifest number: 0CE1
Signing time: Sat 23 Aug 2025 01:02:55 +0000
Manifest this update: Sat 23 Aug 2025 01:02:55 +0000
Manifest next update: Sun 24 Aug 2025 01:02:55 +0000
Files and hashes: 1: spK68_TAei7dR9iMKxW2Wir33q0.crl (hash: uOUy9kbTW3C0lXc/MNOgeCEXETHuN94dJc/uozSceFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:30:ba:6f:cd:1f:74:f1:76:c3:61:33:5b:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Validity
Not Before: Aug 23 01:02:55 2025 GMT
Not After : Aug 24 01:02:55 2025 GMT
Subject: CN=c596fa83100ed7918719d63d8c3cb4cb8876c534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:32:32:58:7c:e6:40:77:2f:c2:a4:3e:7c:
10:b4:3b:e5:91:62:8b:a8:52:40:47:f0:54:cb:7b:
e2:51:c0:80:19:dd:45:b2:e0:c8:85:d8:6c:f4:bd:
5a:24:b1:93:97:24:41:45:c8:16:7d:5e:94:23:15:
aa:43:67:cd:f2:d3:ed:3c:e3:df:50:df:81:55:f4:
dc:22:ea:7b:17:9c:e0:77:37:5c:09:f4:c5:2f:cc:
21:b6:20:82:c0:a6:05:1e:1f:e3:ab:dc:5a:8f:b4:
83:65:75:6f:86:0c:a0:4d:50:35:0f:c7:6c:5a:70:
58:98:7d:bf:d2:da:fa:7f:3d:da:3b:68:21:4c:07:
44:a2:08:08:29:a4:1d:79:f7:6b:76:f7:92:a9:e7:
09:5f:b1:2d:8b:0e:71:f1:30:7f:79:b8:48:3f:bc:
8c:b2:32:7e:6e:d4:a9:16:7c:7b:bb:42:f5:6c:52:
8f:3d:72:12:ca:09:5c:b7:13:df:69:1e:48:3e:d0:
78:c9:e5:e9:97:db:b0:4e:2f:5d:6d:be:b3:90:34:
21:52:54:73:ee:b6:d7:81:3e:4e:6c:99:67:cc:6e:
a9:ab:fe:74:06:8f:76:b8:85:35:db:a6:e6:d1:1c:
7f:09:80:75:59:a6:27:67:0b:67:6e:d9:30:4a:99:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:FA:83:10:0E:D7:91:87:19:D6:3D:8C:3C:B4:CB:88:76:C5:34
X509v3 Authority Key Identifier:
keyid:B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a8:9a:71:ba:5f:65:0b:aa:52:f1:05:f6:a8:ba:dd:a0:f3:
66:fa:fb:50:37:5d:b4:34:5a:a2:e8:fb:ff:d0:13:01:de:07:
90:a2:35:c3:38:98:22:e1:ec:6e:a0:ce:2a:85:f3:e8:fa:3a:
51:cb:84:e1:ad:e6:d2:74:78:d3:80:b6:a7:96:2b:e1:47:26:
3a:74:d8:6c:f3:47:0e:0c:d8:e3:0e:03:bf:27:21:13:a9:59:
14:06:b6:88:3c:0a:37:92:63:63:07:59:f1:84:69:e7:85:bd:
15:1a:22:e2:7f:c0:a3:b6:d2:42:e4:f9:59:2d:52:c8:ba:88:
53:c0:03:33:c9:0f:b3:24:d3:77:b2:bb:41:1a:7a:de:3d:f5:
01:b6:81:6f:15:2d:34:97:11:76:9d:58:20:b8:81:d5:93:75:
dc:73:6e:f5:5b:d4:97:ea:58:04:49:7f:b2:2f:f7:70:e0:28:
6a:4a:e0:26:d4:26:04:66:50:18:f5:e1:58:c2:f6:ff:70:55:
d3:38:9b:b5:e8:f3:5f:bc:f9:a7:3e:f6:25:c1:57:7a:8e:24:
d8:c1:cb:a3:98:fc:bd:26:46:ea:2e:6a:aa:95:04:7f:53:4a:
fb:c1:9f:99:fb:87:c4:e0:93:dc:84:4a:7d:bc:fa:91:45:0f:
65:1c:31:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUczC6b80fdPF2w2EzW2JAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOTJiYWYzZjRjMDdhMmVkZDQ3ZDg4YzJiMTViNjVhMmFm
N2RlYWQwHhcNMjUwODIzMDEwMjU1WhcNMjUwODI0MDEwMjU1WjAzMTEwLwYDVQQD
EyhjNTk2ZmE4MzEwMGVkNzkxODcxOWQ2M2Q4YzNjYjRjYjg4NzZjNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6IyMlh85kB3L8KkPnwQtDvlkWKL
qFJAR/BUy3viUcCAGd1FsuDIhdhs9L1aJLGTlyRBRcgWfV6UIxWqQ2fN8tPtPOPf
UN+BVfTcIup7F5zgdzdcCfTFL8whtiCCwKYFHh/jq9xaj7SDZXVvhgygTVA1D8ds
WnBYmH2/0tr6fz3aO2ghTAdEoggIKaQdefdrdveSqecJX7Etiw5x8TB/ebhIP7yM
sjJ+btSpFnx7u0L1bFKPPXISyglctxPfaR5IPtB4yeXpl9uwTi9dbb6zkDQhUlRz
7rbXgT5ObJlnzG6pq/50Bo92uIU126bm0Rx/CYB1WaYnZwtnbtkwSpno9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWW+oMQDteRhxnWPYw8tMuIdsU0MB8GA1UdIwQY
MBaAFLKSuvP0wHou3UfYjCsVtloq996tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3BLNjhfVEFlaTdkUjlpTUt4VzJXaXIzM3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jMWY4M2EtZGZjNy00OTRkLTlhNGIt
MmE3MmMyODU4YmFjLzEvc3BLNjhfVEFlaTdkUjlpTUt4VzJXaXIzM3EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jMWY4M2EtZGZjNy00OTRkLTlhNGItMmE3MmMyODU4YmFj
LzEvc3BLNjhfVEFlaTdkUjlpTUt4VzJXaXIzM3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaiacbpf
ZQuqUvEF9qi63aDzZvr7UDddtDRaouj7/9ATAd4HkKI1wziYIuHsbqDOKoXz6Po6
UcuE4a3m0nR404C2p5Yr4UcmOnTYbPNHDgzY4w4DvychE6lZFAa2iDwKN5JjYwdZ
8YRp54W9FRoi4n/Ao7bSQuT5WS1SyLqIU8ADM8kPsyTTd7K7QRp63j31AbaBbxUt
NJcRdp1YILiB1ZN13HNu9VvUl+pYBEl/si/3cOAoakrgJtQmBGZQGPXhWML2/3BV
0zibtejzX7z5pz72JcFXeo4k2MHLo5j8vSZG6i5qqpUEf1NK+8GfmfuHxOCT3IRK
fbz6kUUPZRwxfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:49 2025 by rpki-client