Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: 7FgPe/s1iFejZwiHwzBi8X03spPC46HMvupV1iuIQ3w=
Subject key identifier: 19:12:4A:56:FA:41:98:7E:DD:7B:58:29:09:58:B7:EB:4B:25:34:2B
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 0197B7EAC92C6F695E30AB601D24E1AE3DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 09C3
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: L5FXC/sY8lUJdZ6DZxtcM9/SVbwp20SnTuUCCMqXzwg=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c9:2c:6f:69:5e:30:ab:60:1d:24:e1:ae:3d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=19124a56fa41987edd7b58290958b7eb4b25342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:9c:8f:71:d8:53:e8:88:20:9c:10:0f:6c:
06:fe:d8:19:00:cf:58:8e:aa:e8:2a:6d:02:63:62:
c7:a7:36:30:9d:69:16:a4:68:1a:22:5c:bf:56:51:
52:61:db:80:d6:7a:8b:37:f9:1d:37:13:0e:95:fb:
dd:f0:93:7c:47:08:9d:ac:ca:8b:fe:37:03:e4:ee:
b9:33:11:b1:67:ac:a9:9e:61:dc:f0:88:19:0a:f7:
73:6e:1f:6f:93:bb:ed:c0:d7:3d:bd:da:c4:5b:35:
72:e0:b0:13:f4:8f:db:cc:b1:d7:20:f0:b2:d3:2c:
fb:c9:42:9c:a4:3c:05:e2:9b:21:73:42:47:bb:b1:
6f:95:ec:c0:d2:38:19:d6:ac:ff:32:6a:cf:2f:44:
7a:b5:e8:ce:f9:37:7d:ef:69:c9:40:a1:2e:c6:8e:
db:94:11:54:7b:8e:19:9a:24:4a:a7:cc:1c:99:53:
3a:3a:45:91:15:34:fe:cc:15:bc:46:54:56:cc:4c:
72:9d:55:ff:b1:b4:70:ca:d5:22:d9:93:6a:99:c7:
bc:c8:fb:d9:ec:08:58:e3:60:2c:c0:5d:7c:f3:c9:
7c:ea:bf:9b:f3:96:42:12:ac:5a:cc:7f:2f:63:0f:
10:40:91:36:81:39:a1:76:a9:73:ce:5d:86:53:bf:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:4A:56:FA:41:98:7E:DD:7B:58:29:09:58:B7:EB:4B:25:34:2B
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:cc:9a:12:e4:e6:c4:47:a9:3a:ca:4a:85:55:a7:ac:15:
e4:89:9b:04:dd:ca:11:cd:9f:1d:99:f0:41:8f:ce:65:6a:62:
64:42:35:24:8c:31:b4:1a:81:3a:be:e9:f6:56:88:0e:8a:dc:
e1:16:d6:7f:a1:bf:f8:59:cd:81:72:36:47:2f:99:50:f6:12:
d1:7e:dc:a6:9c:e7:9f:93:ec:6f:2c:e6:6c:e4:6e:5c:ce:6c:
5a:72:ff:01:69:68:b4:ef:19:30:19:c5:84:54:83:47:f1:00:
da:36:57:97:ee:dc:96:f8:8a:2b:be:8a:95:72:b9:6b:b4:29:
93:1e:f6:12:a1:bf:f6:98:9b:ad:83:98:26:5e:e8:82:ea:f9:
df:29:e7:38:7b:ec:6c:8b:f7:09:f1:cc:9f:90:52:17:89:8d:
31:cb:aa:58:52:02:81:4d:28:32:ff:e7:e0:f3:9f:eb:02:81:
48:8d:67:8e:4f:2b:99:a9:ee:8d:3a:d1:ec:4f:51:a9:6a:49:
d4:45:75:01:2e:84:83:e6:40:b7:39:94:35:4a:04:07:9d:2b:
0f:87:27:3a:94:fc:cb:d2:2c:74:1e:6b:18:99:7a:42:f0:8b:
93:82:1e:31:12:0f:f5:d3:45:e2:1b:8f:d8:38:80:d4:1b:3f:
7f:8d:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:25 2025 by rpki-client