Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: bKurqusi6ZyTmsOAFX3asOWiYs/yw8aXFuQbtG2Cv+M=
Subject key identifier: 04:E1:64:52:68:2A:C9:45:9E:B8:9A:D5:F9:C1:D6:EB:22:25:01:A8
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 0198D5BBA2C34CDDFDAE786196E0C57C6A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 024C
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=)
2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: NXmukIotERandUA/PbDMeWqYSrfGecNoJcYY90FQ/iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a2:c3:4c:dd:fd:ae:78:61:96:e0:c5:7c:6a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=04e16452682ac9459eb89ad5f9c1d6eb222501a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:d2:b6:c0:d5:6a:17:fc:65:c6:d0:9e:b0:
9e:8f:eb:7f:ad:f2:b5:2b:54:09:e2:6f:4d:80:08:
36:e9:95:76:ef:c8:71:3c:78:5f:01:54:ea:7d:ab:
fc:29:98:56:6d:56:64:58:fe:e9:11:5a:46:12:7c:
85:c6:f1:a6:b1:fb:44:bb:7a:a6:9f:49:e1:5d:70:
aa:cb:bb:6e:67:12:45:a8:04:da:ec:95:2e:87:98:
3a:df:b9:f9:30:0f:d0:e9:65:fe:e4:59:2b:b5:b8:
38:fe:4f:4d:3d:aa:8b:57:4d:02:7d:fc:57:02:1b:
23:18:c0:17:fa:73:6c:a7:57:15:58:46:a7:fb:d0:
51:97:d2:2d:24:47:2b:4e:db:a7:69:17:70:31:33:
a1:f2:52:3b:f3:ab:79:b9:35:d0:fe:91:32:44:ef:
72:88:9b:e9:ca:34:b1:58:d3:4b:b5:64:92:db:45:
8a:e8:58:bc:79:27:00:73:ca:b5:8a:55:b2:36:b4:
2a:e7:0d:36:50:3b:c1:dd:34:76:3a:eb:dc:7e:00:
af:58:c4:2a:1b:d9:14:86:3a:03:f1:57:11:15:9d:
59:d0:0e:a4:54:8e:ba:d4:83:94:f3:65:82:52:b0:
41:25:86:75:04:fc:8a:72:d6:97:f6:30:b1:63:7e:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:64:52:68:2A:C9:45:9E:B8:9A:D5:F9:C1:D6:EB:22:25:01:A8
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8f:f5:48:20:64:cd:ef:80:8b:d2:c8:b2:89:a2:71:c4:30:
48:a0:84:36:37:38:b5:88:eb:e9:18:7f:4e:60:75:b8:ff:6b:
31:ff:07:6d:7f:d2:b8:ef:93:79:6f:b8:7c:83:f4:d5:45:b5:
7d:33:c4:dc:cf:85:bb:56:e4:5c:e4:23:f3:38:7a:80:7c:79:
69:d9:08:60:84:bf:1b:79:62:ba:7d:7e:f2:b3:f5:54:dd:0c:
19:b3:e6:fb:db:53:74:b2:55:cd:19:4e:62:ac:98:c1:14:a7:
fb:a0:3c:49:61:09:33:be:fa:4c:18:46:c5:2c:e6:8f:cf:f6:
f9:8e:6e:ba:17:d0:90:58:4e:55:d2:1b:87:84:ac:6d:0c:80:
70:ad:84:51:06:be:3c:e0:9a:af:ed:e2:57:5a:b1:de:8d:ac:
88:90:87:92:aa:aa:ee:d4:54:d9:b5:9e:a1:ac:57:e1:f4:b0:
4b:60:ef:29:8e:9f:77:21:75:4e:41:e9:f8:24:04:67:0e:10:
75:7f:99:ef:17:a0:ff:1b:81:81:4a:29:f2:cd:ba:40:35:dd:
d2:c1:8d:86:40:0e:2d:9f:48:45:e8:1c:a6:f0:3d:b9:44:c6:
ef:4c:80:1e:ca:d6:51:71:d2:ea:d2:5d:09:cd:10:9d:ab:aa:
56:f6:62:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:53 2025 by rpki-client