Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: bs0cLNvB312hSTGxVbdvFuHZsxM2ioKqTuWbn4RY3+I=
Subject key identifier: 01:34:35:F2:64:80:78:65:23:FE:61:48:2E:C1:78:EB:0E:BF:E2:73
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 0199FBEC05AB8731B87265044A8BDE753F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: CwDzbI+2PUbO8bw0GCtmF/S+pKZtvl8F2RE36O2dDBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:05:ab:87:31:b8:72:65:04:4a:8b:de:75:3f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=013435f26480786523fe61482ec178eb0ebfe273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:f8:37:17:b7:d5:63:6f:1e:03:20:60:e1:
fa:d5:d9:fe:2b:bb:b0:63:19:bc:6e:04:55:67:53:
be:ba:13:5d:ac:d0:cf:56:3d:22:6d:c7:13:d9:c4:
8b:78:7a:56:e4:21:2a:fb:a3:39:e4:20:4a:5e:73:
df:8a:2e:87:66:9c:ab:a8:27:74:8f:02:67:20:20:
b7:20:31:e3:81:24:d0:a1:1b:13:e5:c0:29:55:8c:
d7:da:e4:d1:5c:1b:66:c3:30:3d:0b:3c:f0:51:93:
16:be:56:76:fc:26:a9:6d:03:26:64:f4:5d:7a:c1:
9c:a9:9c:79:e7:8b:d7:bb:85:4f:89:0b:8a:61:ee:
e7:63:15:75:1c:2b:79:c0:66:9c:82:2b:d2:af:c9:
a9:68:aa:d3:89:c4:a4:bb:58:fe:97:bb:0c:56:a0:
fd:c3:9c:1b:3b:b6:3a:7b:df:68:9f:49:8a:f8:3c:
51:3c:4e:17:9b:7d:aa:47:59:29:89:c0:d6:09:7b:
18:01:74:54:80:87:b2:17:02:8c:59:44:23:65:0f:
c4:fe:1d:1a:2b:1d:03:82:ad:68:c9:ee:bb:d1:ba:
c0:73:d7:f9:c7:f3:ba:e8:2b:f2:f5:83:44:ff:dd:
90:0e:5e:15:01:3f:d3:01:07:ca:5f:58:93:3a:dd:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:34:35:F2:64:80:78:65:23:FE:61:48:2E:C1:78:EB:0E:BF:E2:73
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bf:03:c7:9e:e7:21:10:cf:71:fd:72:ca:20:e8:59:ce:ec:
2e:c2:29:57:84:d6:a6:8f:a8:6e:28:12:b6:28:ed:93:57:7b:
8d:72:a6:7a:b5:99:69:55:d0:e9:8b:7f:ad:df:90:80:6f:30:
95:d7:19:d2:b8:f7:ac:a2:a6:05:b8:bc:09:58:82:03:95:e4:
dc:b4:76:cb:eb:dc:17:6c:82:2a:ce:e9:a3:46:13:59:5a:4b:
08:e8:d1:20:bd:c4:32:fc:d0:97:2b:24:7b:89:89:ad:e4:54:
71:97:5f:fb:af:bf:b9:3e:6e:cb:0a:84:44:50:1a:51:b5:3a:
6c:4a:ad:b4:e2:33:e3:58:66:16:7f:8d:2c:45:db:90:98:ca:
17:b9:21:dc:53:41:06:0d:05:04:e2:82:cd:3a:ec:0b:e6:ba:
57:45:ab:f7:32:cb:e5:d9:0c:e4:e6:30:77:80:9c:ae:ef:69:
56:d6:23:e3:05:cc:90:96:e2:29:9f:b7:11:26:6a:a6:8c:e1:
5c:25:a2:0f:31:3f:fc:e5:a7:29:da:2d:9e:fa:df:eb:dd:6f:
93:c5:87:6f:ae:e3:5b:3b:48:80:80:7d:4b:79:76:40:fd:a6:
74:30:cf:ee:d0:18:cc:53:ec:48:24:75:b2:ef:df:ae:6a:8f:
bb:6d:03:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77AWrhzG4cmUESovedT92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOWI4ZDY4YTgyMDc1NmFhYTNmODk3OTUxZDVhZmQ2N2Zk
YjNkYmIwHhcNMjUxMDE5MTAwMjUzWhcNMjUxMDIwMTAwMjUzWjAzMTEwLwYDVQQD
EygwMTM0MzVmMjY0ODA3ODY1MjNmZTYxNDgyZWMxNzhlYjBlYmZlMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhz4Nxe31WNvHgMgYOH61dn+K7uw
Yxm8bgRVZ1O+uhNdrNDPVj0ibccT2cSLeHpW5CEq+6M55CBKXnPfii6HZpyrqCd0
jwJnICC3IDHjgSTQoRsT5cApVYzX2uTRXBtmwzA9CzzwUZMWvlZ2/CapbQMmZPRd
esGcqZx554vXu4VPiQuKYe7nYxV1HCt5wGacgivSr8mpaKrTicSku1j+l7sMVqD9
w5wbO7Y6e99on0mK+DxRPE4Xm32qR1kpicDWCXsYAXRUgIeyFwKMWUQjZQ/E/h0a
Kx0Dgq1oye670brAc9f5x/O66Cvy9YNE/92QDl4VAT/TAQfKX1iTOt0t7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAE0NfJkgHhlI/5hSC7BeOsOv+JzMB8GA1UdIwQY
MBaAFLKbjWioIHVqqj+JeVHVr9Z/2z27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jOTdiMTctNjcxYi00MTAyLTkyNDEt
MWMxZWIxNThiMDJkLzEvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jOTdiMTctNjcxYi00MTAyLTkyNDEtMWMxZWIxNThiMDJk
LzEvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl78Dx57n
IRDPcf1yyiDoWc7sLsIpV4TWpo+obigStijtk1d7jXKmerWZaVXQ6Yt/rd+QgG8w
ldcZ0rj3rKKmBbi8CViCA5Xk3LR2y+vcF2yCKs7po0YTWVpLCOjRIL3EMvzQlysk
e4mJreRUcZdf+6+/uT5uywqERFAaUbU6bEqttOIz41hmFn+NLEXbkJjKF7kh3FNB
Bg0FBOKCzTrsC+a6V0Wr9zLL5dkM5OYwd4Ccru9pVtYj4wXMkJbiKZ+3ESZqpozh
XCWiDzE//OWnKdotnvrf691vk8WHb67jWztIgIB9S3l2QP2mdDDP7tAYzFPsSCR1
su/frmqPu20D9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:01 2025 by rpki-client