Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: s/GbKEeXMsWmGfHM8XNaFIhjoQMJmGmWiFsv1iGasBU=
Subject key identifier: 57:56:57:7E:48:96:DF:6A:FD:77:78:B3:14:06:48:97:EA:07:62:1F
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 0197B6A0F0B1F3A28A72FBE115FBAD4D78A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: JgvY/S5G1M+pUztR5Naq3R3sZ4WRYFWdc5lZeTza0Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f0:b1:f3:a2:8a:72:fb:e1:15:fb:ad:4d:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=5756577e4896df6afd7778b314064897ea07621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:ad:71:77:de:43:7a:d5:b7:e1:49:54:9d:
30:4d:8c:9c:75:7b:28:e6:48:4c:16:5e:0f:8d:e3:
87:d4:77:61:6e:35:31:b3:de:75:46:21:47:13:12:
b2:40:d8:cd:b0:a7:f6:c0:19:1a:49:77:1f:95:43:
e4:90:df:24:b2:ba:40:8c:19:e5:39:bc:22:86:a3:
3c:ee:6c:b2:3d:5e:1a:c9:eb:eb:45:aa:03:45:99:
eb:4c:f5:35:07:d0:45:05:7e:ff:4d:dd:1e:76:08:
9f:ad:00:99:f8:3d:1d:e1:64:39:ae:fd:15:4f:24:
88:0d:5a:e0:d1:7b:79:ec:e3:f3:1f:d5:4a:71:a9:
ec:fe:c6:84:43:6e:f2:a4:fc:8f:48:2d:cf:24:3b:
7a:89:c3:82:a1:4c:b9:a7:e8:ca:6f:2c:94:3a:98:
bd:24:8f:6c:48:69:72:fb:0f:73:0d:45:8d:63:da:
9b:6f:5e:cf:91:27:39:0f:c4:65:e3:b7:77:4b:fd:
5a:c0:ad:66:4e:f6:70:e2:81:97:45:17:ad:8b:1b:
5b:1d:05:1e:fd:ae:a3:e9:fc:63:4e:f9:8d:8b:50:
10:a9:38:ac:ca:ea:90:be:94:70:4a:45:d6:32:67:
14:ec:9b:dd:51:e7:b4:8c:01:0a:de:ab:20:fd:30:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:56:57:7E:48:96:DF:6A:FD:77:78:B3:14:06:48:97:EA:07:62:1F
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:67:8c:e9:a1:55:df:c8:f3:51:42:96:e5:a1:fb:cc:1d:55:
e6:4d:ec:bd:2a:db:0e:4c:74:33:34:85:80:4e:88:ca:4b:3f:
3a:bc:f7:c4:65:0a:aa:e7:0f:b3:02:08:19:e8:bf:50:ad:76:
85:55:ab:58:61:aa:bc:35:20:ef:ee:68:73:96:ae:60:af:be:
e5:d8:18:b7:df:c3:ff:f3:62:e6:74:2e:23:c9:db:9a:c9:d0:
8a:6a:89:d2:88:a5:c1:9d:4c:c3:ba:91:76:c9:6e:d1:e4:1b:
98:a3:d6:b8:ee:0b:be:13:14:57:96:92:41:23:7b:ca:28:1e:
2f:c0:de:70:ab:49:f1:2d:06:14:cc:f1:05:65:6c:cf:7b:31:
f2:ef:8d:fa:9d:da:ae:57:b1:7c:fc:77:a7:b3:16:d8:73:66:
1d:3e:c7:a7:17:2b:30:f4:37:a6:b7:a4:7f:ab:50:9a:f2:49:
cb:8a:94:0a:75:cd:61:71:54:d9:91:15:85:aa:f2:38:82:3f:
49:08:e6:17:67:60:ec:5a:4c:d1:56:27:47:d2:3d:77:22:d0:
78:01:bc:8d:69:3b:eb:40:18:52:61:b7:f1:88:04:13:c2:c4:
9f:70:7a:39:20:c1:ef:d1:e8:39:74:2d:7f:ec:c6:9b:ac:8c:
83:f8:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:03 2025 by rpki-client