Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: V0t9X7a2tV4Lx4IHosxa7xmwNyF4eleWourIt6N30ss=
Subject key identifier: D7:1C:88:2E:2F:5F:97:74:99:2D:9C:FE:28:E7:6A:F2:B7:54:4D:E0
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 0197B7EA4ED5A5230A067A62741F9408E694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 01B8
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=)
2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: o/DClbFR0z55DCVgmqHQBUxP6hQhO4qOFRWfus0LMA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4e:d5:a5:23:0a:06:7a:62:74:1f:94:08:e6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=d71c882e2f5f9774992d9cfe28e76af2b7544de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:2a:0b:2b:ac:6e:3d:fe:6d:99:e6:13:24:
1b:95:77:7c:94:e1:29:f4:a2:67:f4:14:e4:e9:33:
8f:6d:8f:6c:34:21:56:3e:76:f3:2c:2e:57:db:89:
ed:90:8c:91:2e:f6:98:18:37:c8:7b:45:6f:94:8a:
59:a4:41:ec:77:d1:7f:5d:70:85:ed:a2:7c:97:16:
82:11:9a:ec:ed:7c:96:0b:a7:55:c7:45:58:a2:52:
65:d8:5c:2f:a9:7a:ad:76:2c:5e:bd:a0:ba:6c:3c:
8c:c6:72:89:ac:c0:79:45:37:50:fd:da:f1:63:3a:
d2:40:1b:37:49:fe:b2:0d:49:38:43:ba:1c:29:e6:
b1:be:3c:00:93:af:94:cd:4f:2d:87:13:d5:4a:43:
57:b9:2b:cf:3e:a4:6d:3e:bf:d4:41:fa:0c:62:0c:
9d:3a:e0:65:39:5b:09:24:a6:e5:30:5a:c0:26:df:
ae:ed:23:85:2b:fe:93:e2:96:c6:56:45:23:69:e5:
db:02:d8:09:af:7c:5c:4b:27:49:1a:b1:16:0f:0b:
8f:c0:a7:e8:5b:28:85:fd:be:9c:02:a8:c0:07:62:
5d:dc:86:17:b9:68:cb:0f:7a:15:e1:6d:9d:22:09:
eb:28:31:3c:1f:81:1c:6b:93:ed:85:96:eb:27:0d:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:88:2E:2F:5F:97:74:99:2D:9C:FE:28:E7:6A:F2:B7:54:4D:E0
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f1:d9:bd:82:d2:98:9b:ae:b4:b1:15:46:30:ae:17:61:11:
aa:fc:48:db:54:f5:b1:4c:5d:8f:41:e4:8f:ae:d0:1e:6d:2e:
79:ec:1e:31:8c:00:de:0c:dc:74:ec:be:9e:3a:ab:e6:32:66:
00:7b:7f:87:90:be:bd:2d:ef:80:c2:3c:55:a1:03:9d:78:97:
bd:92:e4:b3:ae:23:00:ad:7d:e5:a5:25:bd:c9:95:18:0d:ab:
ad:90:42:b9:2f:94:c1:67:63:91:4e:f0:7c:97:f1:eb:7f:cf:
df:93:4c:c2:96:7f:fd:01:ca:e5:a5:fd:72:b0:92:b2:44:21:
af:24:0b:bf:23:3a:61:d0:17:ae:54:9d:0a:93:85:9b:27:d0:
d2:d4:12:9b:45:a5:84:73:25:b8:90:cc:28:d5:3f:41:4b:e5:
46:5d:d8:7d:f9:4f:71:2a:91:00:aa:1b:f7:2c:d9:b5:dc:20:
87:e2:e8:e6:4d:81:70:d6:49:bb:34:3c:cb:39:af:1a:e8:ad:
2c:46:b7:37:b6:ff:dc:ec:8c:05:41:39:24:2a:18:e9:ea:15:
32:72:dc:d0:0a:0e:75:51:68:7c:4f:6d:b0:e0:40:69:8f:e6:
f2:5f:73:d9:a2:87:d5:b0:3e:bc:c0:59:ed:70:e5:f0:50:b9:
a4:89:38:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:45 2025 by rpki-client