Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File: mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier: nAfoVRJqlOqFtxo5piNddIFFzjLWprSyh6SLD6fWxCg=
Subject key identifier: 12:55:F6:53:7C:9B:B4:AE:B3:EF:CD:EC:95:99:D4:B5:04:87:BA:3F
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial: 0197B88FB0734FD6BE57DB24B2AA712814BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number: 04B2
Signing time: Sat 28 Jun 2025 22:01:53 +0000
Manifest this update: Sat 28 Jun 2025 22:01:53 +0000
Manifest next update: Sun 29 Jun 2025 22:01:53 +0000
Files and hashes: 1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=)
2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: KmYiPgzwEd2nmI9q9flDxC9dGzFOUYY0DTk4tgmJK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b0:73:4f:d6:be:57:db:24:b2:aa:71:28:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Validity
Not Before: Jun 28 22:01:53 2025 GMT
Not After : Jun 29 22:01:53 2025 GMT
Subject: CN=1255f6537c9bb4aeb3efcdec9599d4b50487ba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:d7:3f:37:c7:e0:5f:2c:1d:5b:ec:ff:b8:
f7:45:9f:f1:f6:5c:3b:d2:88:63:26:a3:03:a6:d3:
7b:22:2f:b5:63:55:00:e4:75:fe:d5:76:5b:7f:19:
17:d1:bf:e8:fe:84:1e:f3:bd:5c:13:46:7b:7c:a8:
71:ee:52:c0:9e:c5:d3:56:1d:33:0a:dd:5b:70:5c:
e7:ee:e3:a8:07:49:41:d4:1f:5a:4b:29:c9:8e:fe:
ae:e6:f5:29:a4:00:41:40:58:17:f7:40:fc:ee:7c:
50:84:89:58:27:a9:2b:38:0f:0c:da:02:a4:e9:36:
cb:d7:89:73:ba:c0:b0:1c:69:1a:6e:99:e3:b2:3b:
6d:18:46:fd:2e:06:e6:4b:62:5d:4f:a4:ec:62:f3:
b9:fe:cf:14:c3:8f:5a:c7:c8:45:c9:29:68:1b:97:
48:7c:88:d3:8a:32:ad:09:78:74:09:9d:3d:b4:0d:
46:10:fc:25:36:d0:42:92:17:78:8b:27:95:e1:78:
fb:b4:f2:54:35:67:df:41:06:2f:7c:b0:4b:91:65:
cf:08:f2:7c:9a:63:78:35:4d:c3:14:a7:d5:87:52:
8b:db:ce:38:ab:25:77:5f:37:d7:c6:7f:48:87:b6:
3c:6d:c6:35:7d:d3:41:d0:42:20:9a:38:cb:25:a1:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:F6:53:7C:9B:B4:AE:B3:EF:CD:EC:95:99:D4:B5:04:87:BA:3F
X509v3 Authority Key Identifier:
keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:77:5b:35:73:8f:e9:e5:52:81:b1:c0:9a:f6:55:bd:15:40:
20:f1:a4:21:d9:52:61:a3:12:a1:97:97:12:52:10:27:b5:52:
06:57:2f:13:7a:c2:61:43:f6:c2:fb:bb:fd:97:91:ff:b4:c3:
5c:cf:2e:6a:19:e1:e9:58:8c:00:5c:aa:31:4d:10:08:ea:6e:
06:20:56:b1:25:fe:e9:79:8b:be:3f:df:af:1d:00:e9:f3:8e:
34:6f:27:96:09:12:61:8d:52:50:48:74:f5:7b:d3:6c:34:1a:
94:8d:c5:7d:3f:fe:82:c3:6b:56:52:7c:e4:12:b2:4c:92:40:
d4:88:d9:14:a1:5e:ec:aa:38:1f:6a:f0:ae:d8:5c:bc:bf:4a:
ab:12:33:32:5d:ff:cd:e0:42:aa:b5:45:55:de:95:d2:ad:ee:
21:64:c0:da:7e:7b:41:e8:d2:48:e6:f5:7c:6d:76:30:c3:b9:
6c:75:36:67:62:5e:b8:6f:c2:b6:5a:7e:26:b6:f9:56:ec:e6:
54:aa:07:68:60:b6:b7:92:ee:43:4f:af:74:4f:3b:dc:cb:bc:
7a:9c:de:dd:4c:8e:0e:0d:ae:55:8d:9c:a7:1d:5c:0f:82:ab:
d1:4c:02:fb:23:a4:61:d8:1a:5b:40:6a:d7:46:90:22:dc:2a:
6e:9b:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:19 2025 by rpki-client