Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: El6eNGeay/BSq4dcQgTkAJ4/U5FYpGf8GGFXwYOGQsk=
Subject key identifier: 13:D4:96:2D:9F:9F:07:3F:9C:6B:FB:D4:15:27:B6:F0:EE:10:06:A8
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 0196B710D423817FB71E6CB187F2EEA93B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 0133
Signing time: Fri 09 May 2025 22:00:55 +0000
Manifest this update: Fri 09 May 2025 22:00:55 +0000
Manifest next update: Sat 10 May 2025 22:00:55 +0000
Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=)
2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: gaUiWd8zWeG6STWWQ7N598yn1Gu6vcQmW3bI8ZWPsws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:d4:23:81:7f:b7:1e:6c:b1:87:f2:ee:a9:3b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: May 9 22:00:55 2025 GMT
Not After : May 10 22:00:55 2025 GMT
Subject: CN=13d4962d9f9f073f9c6bfbd41527b6f0ee1006a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:8b:3b:6e:21:d8:1a:84:6e:9e:27:79:84:
19:98:83:18:82:b5:06:5c:96:d5:10:2d:2b:ec:d6:
24:95:03:1c:c9:6c:6b:3b:0a:6b:cb:77:92:0b:2c:
27:46:ad:03:43:2f:d9:a3:63:99:dc:8d:3c:9e:09:
cc:41:eb:8f:4f:1f:86:3f:26:7c:20:4d:b9:f7:ba:
f1:5b:20:b0:88:dc:14:e8:01:28:09:b3:2a:f8:34:
d4:41:af:d3:b0:6b:7b:6d:5f:67:fb:8e:81:e1:19:
a8:b6:81:98:61:e4:3a:9a:26:d4:84:55:a5:2c:89:
80:c3:0d:3c:aa:3a:cc:03:ad:d1:ba:d6:91:6b:a6:
94:c6:24:63:47:64:26:0d:fb:fb:bb:27:7c:74:eb:
47:aa:fc:52:79:14:f4:a0:44:f5:46:f0:ae:93:c5:
0c:82:f3:31:8c:4c:20:bd:cc:2e:e2:86:92:5d:94:
08:4c:1d:09:0c:07:8b:92:c3:0c:e3:26:e6:c4:16:
75:fd:b5:4b:e2:30:b7:0d:c6:de:06:c7:9c:2e:e8:
a0:73:b4:bc:aa:94:1a:c8:3a:a8:12:33:79:8d:fc:
c8:54:67:3d:63:b4:63:e1:dd:c9:49:27:49:fa:62:
59:65:fe:3e:63:94:93:27:06:f8:5b:d0:4b:54:87:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:96:2D:9F:9F:07:3F:9C:6B:FB:D4:15:27:B6:F0:EE:10:06:A8
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:db:44:93:5f:3b:a5:8f:39:00:99:26:0e:57:63:ec:9c:62:
17:7b:e6:a3:cf:44:17:d3:b8:45:dc:71:b1:c6:a5:46:7a:de:
ea:27:a6:ae:2d:19:3e:fb:12:2b:ba:99:03:56:0e:72:a4:20:
9b:73:3a:85:a7:9b:97:ac:dd:22:73:08:af:34:0a:c8:19:e4:
5e:e2:63:43:0f:e2:c9:35:b1:12:f2:27:6b:11:6a:dc:fc:68:
31:4c:19:44:83:16:15:8e:90:b2:be:25:bb:24:ec:53:3a:d3:
ab:b6:64:51:cf:df:7c:fd:e8:59:d2:6d:d9:25:de:cf:35:6f:
cf:a4:c9:97:e6:f2:18:24:1c:41:e7:c2:3d:20:f7:44:5a:ee:
0b:ad:9f:57:27:af:42:6a:46:7c:b0:4e:0f:f5:6b:5d:8a:4f:
fd:ba:f5:f1:a9:72:3a:65:55:f9:83:fa:d5:ed:15:91:7f:20:
3d:11:38:7d:6d:d1:13:d6:5b:8c:e3:fc:ad:6b:b9:60:4b:dc:
aa:29:62:51:63:97:ff:30:96:21:3a:bc:14:04:86:c4:66:8f:
16:34:17:f2:22:86:22:28:9d:ea:fd:5a:31:4f:e4:ff:9b:fc:
af:0d:6d:74:59:7b:95:20:f9:64:1c:3e:9e:9d:d1:59:e5:57:
34:1f:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:47:22 2025 by rpki-client