Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
File: SPaKoudVqgrGmnD-jv6-pMIzVhE.mft (raw, json)
Hash identifier: 3AjZo3/d0PSYTW+zLfy1Fhedvd7FO7XgfvokNfXFzyU=
Subject key identifier: 19:A5:AA:31:0B:75:08:C7:4F:4B:3E:EA:D5:09:78:BA:6C:4E:84:37
Authority key identifier: 48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
Certificate issuer: /CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Certificate serial: 0199FAD80CBE8349DEC4E4674F16E3011898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:26 +0000
Manifest this update: Sun 19 Oct 2025 05:01:26 +0000
Manifest next update: Mon 20 Oct 2025 05:01:26 +0000
Files and hashes: 1: SPaKoudVqgrGmnD-jv6-pMIzVhE.crl (hash: nL2crxX8NWtMAx65ZHlodfqbOA0FtfH9z0+x9RgK7tc=)
2: zdcU1X_muklbr0PsAXf5FfLi2-4.roa (hash: xVhUBfvK07juxF0BpH1Z7Z8zQ9yW0QLwTqhNif5nVRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:0c:be:83:49:de:c4:e4:67:4f:16:e3:01:18:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Validity
Not Before: Oct 19 05:01:26 2025 GMT
Not After : Oct 20 05:01:26 2025 GMT
Subject: CN=19a5aa310b7508c74f4b3eead50978ba6c4e8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:76:1a:cd:4a:2e:5b:2a:ff:7e:0a:f3:87:
87:8f:61:8d:1c:cd:e0:66:8f:eb:98:38:c2:0f:dc:
91:84:98:bf:94:1e:74:fa:f3:c6:eb:b9:49:e0:be:
10:e5:8f:22:00:10:5c:20:da:78:f2:99:b8:2b:a3:
a7:c4:b1:f6:5a:1b:2d:92:7a:52:79:96:75:d4:2d:
8b:b6:3d:94:6b:96:23:34:14:3f:2c:47:04:a3:98:
0f:46:66:e6:d2:1c:07:f9:e9:4b:70:a9:9d:2e:4a:
13:fc:13:77:18:c1:4c:79:db:50:ea:14:e5:0f:34:
2f:ad:32:7a:da:89:1b:90:1d:f2:d7:dc:e0:6d:48:
98:b9:42:b7:93:55:9c:46:b6:64:5d:40:20:e6:f3:
9f:de:4b:c0:0e:35:9a:36:a3:84:04:60:0e:1f:f9:
55:a0:8b:b5:ac:fd:48:4e:c8:c0:58:dd:9a:ba:93:
d1:5a:83:16:c1:33:ed:3d:68:f9:80:4e:60:bb:88:
8e:33:da:7a:36:41:95:aa:42:18:38:14:e8:ca:3f:
44:98:93:dd:0a:6d:91:8e:f6:8f:22:d3:85:3a:ba:
24:0b:3a:a2:46:80:86:3b:fc:60:88:40:4d:fc:5a:
17:c1:c1:ad:93:c4:0b:b0:a1:70:03:c6:57:54:f4:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:AA:31:0B:75:08:C7:4F:4B:3E:EA:D5:09:78:BA:6C:4E:84:37
X509v3 Authority Key Identifier:
keyid:48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5e:db:78:46:50:02:29:78:c1:61:da:33:a7:2d:bd:df:d4:
63:93:4d:4a:37:31:0a:14:f5:70:36:5a:97:95:d2:a2:0f:68:
b5:d4:6a:db:3d:85:7b:45:40:3e:bc:3d:c1:58:ec:96:04:e2:
2b:c9:6c:4f:5f:54:96:20:23:0e:ee:38:c0:50:5f:d5:ef:6c:
2e:01:9f:67:72:d2:67:e1:06:88:a2:fe:ce:45:f6:c4:15:a0:
8d:55:57:52:d1:e4:7f:9e:15:6d:cc:2e:c7:74:00:17:ba:4a:
e4:a7:02:a8:d4:ae:4d:e8:13:4a:ff:61:d2:fa:cb:56:88:97:
8e:ce:a2:88:af:97:bd:10:f6:81:27:ea:6b:b4:65:81:16:af:
49:93:c0:a2:ae:f1:c6:e1:d2:93:2f:1c:a0:5f:0f:1b:8c:9f:
ad:1d:c3:12:08:7c:a3:59:af:65:82:d6:b7:fe:93:71:07:01:
51:1e:d5:bc:8c:a1:cf:e3:4e:b4:1f:a6:4c:16:d7:ea:12:e0:
31:29:cb:54:c8:9c:82:a6:12:c5:dc:1c:27:fd:2b:91:e4:1a:
cf:b4:3e:59:09:56:1b:63:18:5d:b7:b3:29:c3:ff:9f:59:42:
b8:fa:91:b8:53:f2:8f:47:8c:1f:d3:54:ff:ee:16:74:60:c0:
6f:ce:6f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62Ay+g0nexORnTxbjARiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjY4YWEyZTc1NWFhMGFjNjlhNzBmZThlZmViZWE0YzIz
MzU2MTEwHhcNMjUxMDE5MDUwMTI2WhcNMjUxMDIwMDUwMTI2WjAzMTEwLwYDVQQD
EygxOWE1YWEzMTBiNzUwOGM3NGY0YjNlZWFkNTA5NzhiYTZjNGU4NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyF2Gs1KLlsq/34K84eHj2GNHM3g
Zo/rmDjCD9yRhJi/lB50+vPG67lJ4L4Q5Y8iABBcINp48pm4K6OnxLH2WhstknpS
eZZ11C2Ltj2Ua5YjNBQ/LEcEo5gPRmbm0hwH+elLcKmdLkoT/BN3GMFMedtQ6hTl
DzQvrTJ62okbkB3y19zgbUiYuUK3k1WcRrZkXUAg5vOf3kvADjWaNqOEBGAOH/lV
oIu1rP1ITsjAWN2aupPRWoMWwTPtPWj5gE5gu4iOM9p6NkGVqkIYOBToyj9EmJPd
Cm2RjvaPItOFOrokCzqiRoCGO/xgiEBN/FoXwcGtk8QLsKFwA8ZXVPQ59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmlqjELdQjHT0s+6tUJeLpsToQ3MB8GA1UdIwQY
MBaAFEj2iqLnVaoKxppw/o7+vqTCM1YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lYzI4N2QtZWZhYi00MzQxLWJlNTMt
ZjJiNTQ0YjBmZTdiLzEvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lYzI4N2QtZWZhYi00MzQxLWJlNTMtZjJiNTQ0YjBmZTdi
LzEvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV7beEZQ
Ail4wWHaM6ctvd/UY5NNSjcxChT1cDZal5XSog9otdRq2z2Fe0VAPrw9wVjslgTi
K8lsT19UliAjDu44wFBf1e9sLgGfZ3LSZ+EGiKL+zkX2xBWgjVVXUtHkf54Vbcwu
x3QAF7pK5KcCqNSuTegTSv9h0vrLVoiXjs6iiK+XvRD2gSfqa7RlgRavSZPAoq7x
xuHSky8coF8PG4yfrR3DEgh8o1mvZYLWt/6TcQcBUR7VvIyhz+NOtB+mTBbX6hLg
MSnLVMicgqYSxdwcJ/0rkeQaz7Q+WQlWG2MYXbezKcP/n1lCuPqRuFPyj0eMH9NU
/+4WdGDAb85vDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:30 2025 by rpki-client