Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: 98KNqfdfK5e43X+oH6uM8tSOu41z/tKJYEMODNJ2pko=
Subject key identifier: 53:93:57:FA:67:E0:AC:08:BD:42:81:5B:3F:35:79:07:33:33:01:B2
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 0197B96AC341F87C490831727077E88B105D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 1169
Signing time: Sun 29 Jun 2025 02:01:10 +0000
Manifest this update: Sun 29 Jun 2025 02:01:10 +0000
Manifest next update: Mon 30 Jun 2025 02:01:10 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: 9nYW/QYZ27AZNxZi1nTxfkQt7+kn5yEiojOxyPyJXJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:c3:41:f8:7c:49:08:31:72:70:77:e8:8b:10:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Jun 29 02:01:10 2025 GMT
Not After : Jun 30 02:01:10 2025 GMT
Subject: CN=539357fa67e0ac08bd42815b3f357907333301b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:a2:4e:89:32:9f:1d:2d:14:e0:d1:b9:f0:
1b:d0:a1:74:19:d2:ca:f1:7d:bb:4f:bd:c6:e6:b1:
39:04:3c:43:b0:6d:48:7e:27:ba:92:38:06:b5:97:
b4:62:35:c8:c2:be:ff:cf:c1:37:10:0c:02:fb:3c:
13:50:e6:37:5a:81:4f:4f:8c:29:f6:2f:db:a2:17:
45:2a:1a:39:85:a6:84:9d:ee:43:70:b6:74:76:b3:
5f:2e:cc:d1:38:1c:41:75:2d:e6:c1:56:81:35:ba:
c3:5a:fe:1f:61:e1:de:37:83:de:14:4e:02:63:8e:
e2:60:bc:27:f7:1f:f9:32:5b:b2:4a:d3:ba:25:1e:
28:d0:76:24:9e:ad:19:2a:69:b2:20:fe:ef:eb:50:
2d:1c:f4:12:6f:66:e6:7b:a9:74:6a:57:b2:c9:8f:
d8:bc:2c:b3:21:56:96:a9:d1:06:bf:09:b5:7e:bc:
19:f3:d5:22:00:13:8e:c0:b0:e7:1f:ca:45:09:f1:
11:ab:bb:7b:34:d0:fa:56:06:07:d0:47:f0:c1:88:
1d:eb:dc:e1:d1:8d:61:cd:db:df:3c:3a:b2:07:7a:
1d:08:c4:f5:b0:f8:7b:5f:98:e8:bb:0f:a1:5e:93:
8a:77:26:bb:48:ff:bc:af:b0:a2:5b:4b:3d:e0:e3:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:57:FA:67:E0:AC:08:BD:42:81:5B:3F:35:79:07:33:33:01:B2
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:8b:d7:23:5f:7a:ed:b6:bf:90:a1:33:b9:a6:e9:90:5d:
34:d5:18:16:45:52:3d:06:77:86:31:69:e0:d0:e1:25:67:c4:
d3:a0:6c:4d:5e:f2:26:ea:09:f7:02:f1:ad:5b:6e:6d:85:01:
3c:ad:cf:9d:c6:0b:b6:52:d5:8e:b8:ff:71:11:c6:d0:97:a8:
cc:af:9f:ec:1a:8d:e6:2e:dd:7d:59:ee:a0:e0:a0:92:cb:7d:
4e:73:09:0a:da:33:be:cd:32:73:a8:4d:88:03:b0:b5:fc:20:
72:57:31:cc:10:29:1f:a8:55:a7:5b:fe:54:03:53:e6:d9:e9:
7f:6d:73:82:3d:fb:9d:a3:f8:b2:08:50:37:c0:49:b8:c9:7a:
d6:00:bc:91:a4:a4:96:98:f4:6c:bc:81:83:18:c7:48:6e:18:
b6:22:a1:47:05:38:20:7d:33:4b:f7:37:f5:d3:23:13:fb:87:
16:f7:8d:da:43:f4:ee:c4:d8:01:5f:30:37:93:ae:6b:37:05:
3c:dc:b0:c5:85:f5:8f:36:47:c6:9e:eb:be:7b:70:ed:22:57:
d0:c7:a2:74:c5:f2:97:9f:f0:76:a2:7d:be:3c:e3:f6:30:32:
1a:c9:f8:a5:a8:e0:81:7b:a9:d4:90:43:fa:c3:95:1e:4e:91:
69:ec:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:10 2025 by rpki-client