Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: pcxt/TKGwZUnd9a8IhCwrb6HZqirxIbfDMTaEEncsdk=
Subject key identifier: C2:46:5E:64:07:AE:AF:5C:7D:F4:99:E7:F3:A2:4D:E9:E8:0B:A6:0F
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 0198D54DF6E9192B4DC3D54E9705D14F3420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 11FC
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: 6y8UBIqWP18b0e7MjlHL/hIQanb8gtfkK8xS2l1fEvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f6:e9:19:2b:4d:c3:d5:4e:97:05:d1:4f:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=c2465e6407aeaf5c7df499e7f3a24de9e80ba60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:ce:12:95:54:f8:df:e9:73:ee:74:f7:0f:
fe:16:3b:b0:89:4a:5e:32:43:3d:64:d3:6d:68:bf:
d1:38:07:76:c2:69:3a:7c:20:7d:f1:ad:bc:fd:15:
5f:38:3e:36:82:c3:3b:68:02:31:25:5c:af:57:e8:
49:89:a4:e1:6d:a3:2a:85:b6:d7:cb:0c:57:90:0e:
fb:17:c9:34:b9:cb:bc:f1:a5:61:e1:10:ce:94:55:
60:d6:61:a5:fd:39:77:9f:80:eb:76:65:14:1a:3e:
a9:ec:cc:49:90:b3:14:40:fb:95:b8:c7:de:fe:cf:
6a:9a:86:e6:58:88:ce:85:99:ed:1b:45:9a:82:2f:
a0:c3:0d:b0:eb:5c:03:47:ad:52:81:3b:ca:a0:2d:
f3:05:d7:6f:4e:90:46:6d:d7:b5:3d:5b:c8:e4:67:
ac:65:ca:16:24:d8:70:2a:a9:16:37:23:f9:63:05:
56:d9:9a:ed:6d:68:d7:f9:3c:74:d6:f8:35:1e:6c:
52:dd:8b:e9:a9:a9:aa:5a:0f:87:ae:24:ca:6b:94:
8f:ec:23:c6:88:9b:df:e9:e8:38:24:a3:dd:fa:8b:
7b:f8:c8:b8:7c:aa:c8:19:ad:5c:23:9d:d4:bd:10:
bc:2a:e0:51:6f:69:3d:fa:6b:eb:28:1e:a3:ff:a4:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:46:5E:64:07:AE:AF:5C:7D:F4:99:E7:F3:A2:4D:E9:E8:0B:A6:0F
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:92:94:23:69:d3:86:fc:7d:15:60:6b:51:ba:69:64:24:f0:
ed:ce:15:69:72:f1:e2:32:3c:42:3d:be:47:30:da:db:53:ab:
4d:d4:68:b2:54:61:85:fc:b2:46:09:d9:bf:56:a1:36:ad:10:
13:d2:a8:f1:ac:75:ae:a9:31:8e:a2:f2:64:6b:f1:82:86:e2:
5c:49:30:ee:f5:f4:52:55:60:35:79:c4:2f:dc:62:5b:c3:62:
7f:d1:28:a4:b7:c7:e0:61:66:9e:93:01:c2:1f:b7:b2:72:52:
7a:51:35:2f:54:1b:7d:64:47:06:33:84:91:0d:43:4e:db:a6:
64:a2:65:c7:f3:3d:a9:bc:ff:77:93:0f:85:72:14:c7:ea:df:
85:5f:0c:47:f5:e2:6f:8c:28:a8:00:a9:5d:93:2f:37:5e:12:
93:cd:d4:8b:5a:d9:2a:cf:9f:8e:a9:b2:48:6f:1f:02:71:60:
af:c2:01:fb:5c:4c:9d:ad:e9:d5:ea:0b:03:46:af:ec:0b:14:
a8:91:01:f9:78:c3:a8:46:78:67:ff:31:d5:a0:1e:f6:3d:63:
f7:44:ba:09:6f:f6:35:c6:2a:20:c5:47:6b:ab:5f:41:13:c8:
b5:43:2a:80:70:4a:2a:0a:31:31:03:03:ec:e5:b7:94:f6:5e:
96:96:e0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:09 2025 by rpki-client