Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json)
Hash identifier: vZxapJG63m5VxzcvLRmQFIMWOxcLR0Lzq9Cj5aLleus=
Subject key identifier: 57:D2:94:AF:F0:18:9E:69:DF:4E:E5:FD:74:07:98:25:FC:73:69:6E
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 019893DB15794A494F59EEAE5A823020E482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
Manifest number: 15BA
Signing time: Sun 10 Aug 2025 12:01:05 +0000
Manifest this update: Sun 10 Aug 2025 12:01:05 +0000
Manifest next update: Mon 11 Aug 2025 12:01:05 +0000
Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: WXxFX/DnW54hkzLJWjqfVjNq7oHVyQC68yAabQN7rHs=)
2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:15:79:4a:49:4f:59:ee:ae:5a:82:30:20:e4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Aug 10 12:01:05 2025 GMT
Not After : Aug 11 12:01:05 2025 GMT
Subject: CN=57d294aff0189e69df4ee5fd74079825fc73696e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:6f:1b:82:6f:a0:b3:ff:3c:de:d8:f8:a2:
fc:3a:a1:4e:cc:de:43:d7:4a:06:79:12:e7:a5:82:
2d:86:28:26:2a:63:4f:d7:aa:52:69:22:59:42:d0:
d8:82:2d:a6:fc:d1:ef:8f:e5:0b:68:c0:75:b2:92:
27:a5:8d:c1:9a:04:b2:aa:7e:f2:fd:c1:61:02:31:
4b:6e:db:16:f4:af:b8:00:b5:aa:dd:74:22:06:b6:
97:8c:59:77:d0:15:17:9a:fe:42:df:90:23:19:79:
f6:5b:21:e4:40:d7:4f:9e:86:8f:be:2b:68:f1:38:
cf:d3:48:f5:22:39:05:5e:6a:7c:75:5d:b1:fa:d7:
e7:eb:6b:d0:46:78:60:eb:ba:25:b0:ba:eb:49:b5:
5a:3b:cc:a9:26:ca:d8:e3:3b:9e:e3:a6:eb:1b:f9:
0d:e1:f8:03:01:ef:d6:4b:ac:65:b2:bf:74:1a:0c:
50:b9:e3:c7:ef:28:b6:94:4f:0e:44:df:27:48:1a:
05:33:58:15:a2:c2:73:03:bd:dd:13:bf:72:a1:8e:
03:9d:83:97:6e:2e:36:2f:04:bf:fb:8f:4a:9c:a9:
22:0e:c4:94:59:af:e9:b6:dc:11:2a:2a:cf:87:9e:
49:b9:9c:cf:27:24:27:32:b2:82:b7:27:51:de:22:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D2:94:AF:F0:18:9E:69:DF:4E:E5:FD:74:07:98:25:FC:73:69:6E
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f5:ac:d4:2a:c8:eb:dd:a5:b7:aa:62:45:7f:26:37:b0:ee:
fb:b9:fa:6b:b2:da:ea:d1:b8:69:cf:8e:72:de:9d:28:c2:c2:
6d:45:9d:da:6f:db:7d:54:66:b3:d6:d8:90:a9:14:7f:e7:31:
25:4b:5a:1d:95:6b:8a:d4:a7:ad:71:79:81:65:c0:27:94:96:
5a:8e:26:8f:18:dd:0c:0b:e6:48:a2:63:ed:68:f5:9a:c6:b2:
d1:e0:4b:04:56:fc:14:95:56:ad:8a:ac:70:08:61:6c:0d:f8:
4d:33:d5:8c:e2:0c:25:1c:a6:75:99:98:04:b1:d7:28:24:8e:
6e:03:0b:bb:1f:4a:09:17:fa:2f:bb:d9:e5:ee:a0:fe:d0:3e:
e3:bc:50:95:10:0c:d9:92:ba:67:9d:0e:15:d3:7d:12:f5:cd:
52:3d:b5:a4:75:66:93:69:b6:91:b4:19:3c:7d:8f:c7:41:65:
01:80:f0:b5:42:20:b4:ca:3f:ca:c9:98:30:41:5e:42:f0:36:
96:2c:43:79:f9:75:d1:6b:50:5f:20:66:30:02:4c:9b:f7:f6:
04:7d:61:e1:24:12:ee:14:ca:56:ea:76:78:26:6a:a9:60:ca:
0d:21:29:0d:82:0c:89:48:9a:e6:61:b7:0d:24:44:ff:1c:64:
07:d6:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:03 2025 by rpki-client