Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: AIunQmfcLsAkzH/7TAatcGIl9h5TwTrQYcT8Zx2bpd0=
Subject key identifier: 91:D9:E8:39:44:96:67:20:A0:0D:96:43:2A:15:27:A0:34:E9:8A:7C
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019A500774C873ADA89682CB822EED5AE8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 18:00:57 +0000
Manifest this update: Tue 04 Nov 2025 18:00:57 +0000
Manifest next update: Wed 05 Nov 2025 18:00:57 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: V3iMY+g02P2T9/88sj1INLgw392n+VC6WX6imWYCNbQ=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:74:c8:73:ad:a8:96:82:cb:82:2e:ed:5a:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Nov 4 18:00:57 2025 GMT
Not After : Nov 5 18:00:57 2025 GMT
Subject: CN=91d9e83944966720a00d96432a1527a034e98a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:0c:55:e1:b4:ce:ec:66:9b:e8:1a:b4:e4:
38:65:af:e5:9c:cf:42:11:99:e4:72:c3:91:a5:8a:
ff:71:e1:13:85:6f:f3:40:64:a1:08:eb:7a:ef:a8:
8d:a5:dd:a7:42:ab:d1:d5:30:b3:fd:35:7c:6c:2a:
be:e4:b1:26:b4:44:25:0c:da:c2:aa:8a:e5:39:65:
c6:f4:0b:58:0e:de:5e:b2:49:c3:61:59:44:e1:7f:
a2:4c:b2:e7:1c:d8:d6:a7:18:db:b2:97:33:ff:ca:
73:9f:c6:15:74:b8:36:85:9f:c6:fe:38:f9:5f:82:
25:9c:b5:32:64:6e:f4:e9:cc:e2:fb:7d:d0:f4:6f:
f8:1c:a6:b8:01:d6:ec:05:86:f9:7f:c7:35:8f:8e:
2d:92:f9:8b:54:30:99:20:55:c3:7c:6f:2a:3a:78:
bf:30:61:f9:af:b9:b2:15:5d:b8:41:83:31:c1:2d:
45:f2:06:fa:3b:92:51:f4:e0:0e:c4:61:b1:8f:9e:
dc:05:fc:97:f6:18:35:3e:0b:40:7b:ee:c8:75:4f:
d3:f1:42:27:e4:30:3f:e7:a5:f5:8d:d4:65:07:af:
51:8f:68:b6:15:2e:be:7b:c3:f0:d6:c3:35:9c:fe:
d3:da:03:68:e7:24:88:b4:d6:2b:74:87:94:d8:14:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:E8:39:44:96:67:20:A0:0D:96:43:2A:15:27:A0:34:E9:8A:7C
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:00:34:c8:a0:9a:f3:2a:1a:b5:89:5f:53:3e:61:b0:1d:
2e:d3:b0:07:07:f0:cd:42:ee:e5:99:a3:40:2c:9b:e5:e2:7f:
e0:60:25:e8:80:52:ac:41:87:c7:4a:b9:87:dd:97:21:a3:a8:
11:a7:7e:5c:91:05:a5:02:2d:92:a5:31:4b:4a:9b:d9:e1:be:
8d:f0:34:25:20:db:44:cc:b3:84:32:be:60:4d:ab:8e:a3:a0:
4a:e7:09:26:c0:19:e5:c8:cb:ab:8c:59:9c:7f:cd:19:c6:de:
d2:a1:ee:84:bd:9e:6f:fc:51:c3:5f:f4:b9:81:82:3d:f5:9b:
de:06:9b:f7:dd:0a:58:f1:cc:a2:31:62:5c:15:db:27:72:b7:
ab:72:18:9e:3f:ec:8c:c0:bc:68:33:c7:d5:2d:51:87:22:ea:
4a:1c:3f:63:7b:b6:d3:80:e6:b8:1e:f6:98:ec:5f:01:fe:3b:
a7:43:aa:cd:a9:52:56:a3:91:d5:fa:4e:f3:13:3b:bd:d4:29:
d7:79:2f:0c:b4:a6:28:f1:c0:3e:ca:5e:06:09:8c:28:88:4b:
48:64:b4:5d:fd:eb:48:af:2a:d9:91:33:b5:43:da:d0:35:da:
c4:2d:b9:51:7f:85:85:6b:a5:40:f4:83:35:45:fd:b5:b6:fa:
f9:e9:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:01 2025 by rpki-client