Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: w0bMDCKJtM26KRnTmAqtC6A37vdKimu9VAOqD00Q1P4=
Subject key identifier: 19:73:E3:9A:0F:22:2E:2A:77:61:B0:16:D9:70:38:EC:08:54:ED:AF
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 0198D54DFF188EC6743CD3DDDF848152E93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 09C0
Signing time: Sat 23 Aug 2025 05:01:55 +0000
Manifest this update: Sat 23 Aug 2025 05:01:55 +0000
Manifest next update: Sun 24 Aug 2025 05:01:55 +0000
Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=)
2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: EfNcwVBC+W/nouHljysbrLwNgOqkDXik2De4Um++zXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ff:18:8e:c6:74:3c:d3:dd:df:84:81:52:e9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Aug 23 05:01:55 2025 GMT
Not After : Aug 24 05:01:55 2025 GMT
Subject: CN=1973e39a0f222e2a7761b016d97038ec0854edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:a7:f6:ee:63:7c:96:6a:97:fc:65:f2:2a:
06:53:af:c3:53:1d:9c:fb:8f:8d:fc:a5:db:bd:09:
78:94:e7:8f:b2:69:57:01:7c:d7:ea:2f:87:b4:55:
ec:75:34:f6:fe:c6:94:d1:88:bc:73:59:6c:2a:ef:
29:30:9b:52:3c:bd:07:a1:3b:c4:4b:1c:fa:ef:95:
7e:ee:ed:43:06:ca:02:14:3c:ec:6b:1e:60:16:a4:
f7:42:c1:b2:74:c7:01:c2:f1:cc:cd:3e:e8:0f:62:
79:25:67:a6:f6:d7:03:ac:ff:e3:0e:84:83:9a:51:
53:c4:ad:13:1c:56:08:b8:3d:30:a9:83:0c:7f:86:
39:b6:12:87:eb:3f:ad:e6:65:35:41:9b:84:a0:4b:
cf:be:2f:91:bd:8c:e8:37:5d:3d:3e:33:0a:39:ea:
a8:c3:db:fb:b2:96:18:e7:df:ab:ae:61:9f:4f:1b:
5f:ab:1c:62:00:83:ae:e9:a5:72:19:f4:2e:f6:37:
ff:21:90:bd:e6:bb:d3:51:08:01:2b:ca:cf:1e:00:
89:83:cc:14:87:3f:93:39:41:b8:54:ad:83:a1:94:
f2:cf:e2:2e:ea:f2:a3:96:25:b3:d0:86:55:af:aa:
de:df:ae:f3:c8:4d:e6:3f:95:1f:97:2f:4a:30:6f:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:73:E3:9A:0F:22:2E:2A:77:61:B0:16:D9:70:38:EC:08:54:ED:AF
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:99:cf:df:65:f9:ea:e9:9b:7a:76:02:33:bc:3f:41:21:6f:
ba:8b:54:a5:42:94:4b:03:e7:db:8b:2f:6f:13:f5:af:c7:a8:
fd:48:dc:fe:b7:ce:29:9c:43:d6:4f:2c:e0:6d:e9:3e:94:ab:
2f:4d:1f:db:55:e2:bd:df:9c:9f:53:21:c7:bb:60:9b:b7:8e:
a6:c8:c6:1d:cc:1f:c5:3f:c2:25:c2:6e:8d:91:b3:a1:8d:65:
44:5e:ea:10:79:fd:51:cc:5f:53:cb:89:92:3a:b9:a9:2f:38:
3b:82:4a:19:94:ea:9c:a7:ba:08:0d:57:c2:8c:79:76:14:1b:
e3:dc:e0:9a:7b:29:67:06:73:41:fe:f6:43:01:94:0f:4b:41:
7b:8f:e2:aa:1b:f1:94:32:9f:c0:1a:08:d0:6d:50:9e:0a:0d:
0a:64:e2:ca:90:ce:b9:cf:49:7e:14:71:97:8d:ec:c7:a9:6e:
4f:76:c4:be:c1:04:79:a5:e9:e9:56:24:6b:94:da:e1:8b:46:
ef:30:28:ef:aa:43:99:9f:a6:5b:9d:d8:49:e2:d7:6f:35:12:
8e:ed:0c:02:42:be:c7:5d:43:37:45:33:f9:d1:ee:99:03:08:
16:b0:64:68:bc:e5:a3:1c:fb:43:be:dc:89:47:b4:48:81:57:
b6:b8:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:02 2025 by rpki-client