Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
File: spK68_TAei7dR9iMKxW2Wir33q0.mft (raw, json)
Hash identifier: SgXkbdJqZG4vPiNdfDTcO2jOXxEKSF6u0BNsQryEmX8=
Subject key identifier: A9:1F:AB:9C:86:7A:F0:5E:08:A8:E1:55:F8:B6:6E:98:02:E8:17:0E
Authority key identifier: B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
Certificate issuer: /CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Certificate serial: 0197B6A1D63DD58F677B7176FB7A741142B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
Manifest number: 0C4D
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: spK68_TAei7dR9iMKxW2Wir33q0.crl (hash: G20vbptP5K1y6DPrfYaSmGm7wMKz2hg104LyE6lW3LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d6:3d:d5:8f:67:7b:71:76:fb:7a:74:11:42:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=a91fab9c867af05e08a8e155f8b66e9802e8170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:a8:af:05:cf:e3:03:8a:73:08:0b:73:8f:
69:ee:d1:cd:02:ce:75:ff:ee:04:80:bd:09:9c:39:
09:25:f6:93:35:c5:22:67:72:18:99:f8:95:cc:33:
67:3a:04:51:f8:4a:b0:34:23:fd:d7:54:f6:07:ce:
99:89:17:bc:6a:a3:2c:d1:ce:c0:75:9c:ba:88:de:
8e:50:ed:3a:96:bc:f6:67:ce:a8:81:1c:73:a1:4d:
0b:e5:ab:22:48:97:d1:b4:49:63:a8:0b:ec:01:de:
48:d0:9d:f5:5b:47:7b:c7:f3:95:0e:20:3b:e0:df:
61:5a:a7:6f:cf:76:72:9c:3f:3f:e5:c6:f6:da:86:
bf:90:f3:54:fd:27:aa:02:3e:11:d8:5d:c0:71:ae:
fa:02:ad:60:c8:b2:f6:9d:e3:3b:0c:ad:79:14:f3:
11:7b:cf:a6:2b:57:40:88:46:1a:08:a3:1c:d6:c1:
e0:4a:1b:6c:2c:17:1c:12:e7:9a:03:b6:0a:a1:a5:
8d:73:37:81:df:a4:a6:25:45:5c:8c:42:1d:b8:db:
f5:27:4b:5c:af:99:57:b4:58:9d:28:9a:31:af:7b:
57:db:5f:f8:9b:9f:fc:93:0a:bf:e1:0f:ac:92:c6:
33:a4:fb:c4:a6:f1:96:d8:86:f4:48:76:f7:fe:b6:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:AB:9C:86:7A:F0:5E:08:A8:E1:55:F8:B6:6E:98:02:E8:17:0E
X509v3 Authority Key Identifier:
keyid:B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1a:cf:f5:5e:aa:cb:7b:ab:a7:f7:f5:20:83:3e:d6:fe:0a:
8f:09:80:9f:3e:a2:10:97:6c:6c:64:ff:61:46:5a:13:de:c2:
85:dd:8d:97:f9:1a:a5:79:26:69:f8:cc:63:b5:75:d9:7b:85:
d2:c5:27:58:21:89:4d:bd:a2:53:5c:2d:aa:cb:fc:0c:6a:4a:
f0:a4:21:0f:a2:ce:1a:92:51:f7:35:99:17:c0:84:7a:af:1e:
c2:b6:d2:71:f7:76:c3:71:a3:db:47:0d:42:f0:4f:1c:40:d0:
25:a3:e0:5f:0f:7d:cd:31:44:b9:1d:f4:7a:d4:2d:77:f7:72:
fd:8e:4d:2a:5b:18:11:c0:51:eb:b9:67:66:53:37:ba:38:cc:
73:9c:b7:ee:0d:74:d5:85:99:d1:6e:95:12:9c:85:6e:43:94:
1b:d0:a3:1b:c1:1d:18:cd:46:5c:b9:33:fa:51:d1:f8:3e:61:
f9:78:ef:d9:35:34:b0:e8:53:3b:80:3b:bf:f6:cd:25:69:b2:
f7:c6:e2:68:e1:20:23:43:e9:3d:0e:4d:4d:ad:a0:7f:61:67:
b7:2a:41:40:c9:ff:ab:d6:a6:1b:e4:f2:b4:bc:bf:87:4e:22:
3d:57:0e:2d:f1:bf:6d:15:d5:2d:e2:0d:de:7b:f7:4d:6f:83:
9c:92:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:40 2025 by rpki-client