Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: WWxRMB4wPBBcqN4gxbjyhU5XO3vyP6/bOtajK8y0qKY=
Subject key identifier: 64:A8:CE:FB:CA:7B:04:51:0D:29:94:19:6E:09:3A:38:2E:A4:45:A1
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 019A4EF4C04117155588B3A1E08071B66E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 1612
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: GVs/1mBkwF+iaekfA0ZGPoxJMBOz7cvbipm6icDrSyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c0:41:17:15:55:88:b3:a1:e0:80:71:b6:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=64a8cefbca7b04510d2994196e093a382ea445a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:84:3c:e8:3a:fd:86:05:a4:71:96:9a:a6:
97:66:55:13:68:62:4d:eb:71:78:84:7c:85:19:72:
87:a9:99:bc:d0:ff:0c:a5:ae:db:c1:67:31:26:3b:
cd:87:32:a1:df:51:bb:ea:1f:d0:21:20:c6:6d:db:
21:cc:11:2a:b5:4b:29:7c:36:0f:c8:de:36:78:e4:
1c:ae:84:3f:e1:fa:72:bf:9d:10:72:b4:79:ed:4b:
fa:80:a1:2f:f1:45:70:da:74:a1:3a:f6:cf:fb:42:
07:4d:0b:5c:89:ed:ac:8c:a4:a2:c2:9d:30:d4:63:
ec:d7:df:f1:49:51:5b:8d:63:88:07:15:fc:d4:8f:
c2:6b:2c:fa:16:2b:0c:a7:32:58:95:6e:86:43:10:
1b:69:47:25:41:a0:e7:4c:3f:cc:37:2a:23:da:1c:
43:29:72:9f:c7:ac:64:68:ec:ed:e7:53:82:cf:5f:
19:e1:72:c0:ca:24:8b:5e:b2:f0:13:fd:01:12:84:
45:1e:63:43:9a:5f:38:bc:b0:20:80:be:99:47:54:
eb:fb:55:76:3b:3e:53:5c:d7:e6:03:65:0f:3f:b8:
7a:14:cc:12:6a:3b:c1:74:49:d9:48:1e:89:54:72:
ee:82:68:0c:9a:cc:20:d5:d3:1b:3f:55:64:5a:5f:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:CE:FB:CA:7B:04:51:0D:29:94:19:6E:09:3A:38:2E:A4:45:A1
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:e5:a0:67:fa:2e:4d:11:d0:f4:17:8f:e6:05:75:b3:96:
e2:e6:81:e6:6d:f6:e1:fa:d7:11:b6:57:c7:37:e1:ef:49:34:
d1:d7:2b:86:c8:c3:07:59:04:03:17:d2:44:b5:94:24:4b:69:
be:04:47:23:fb:ee:73:e5:6d:bc:66:32:02:96:06:a4:13:8c:
6b:86:cc:10:89:db:c8:e6:94:a4:e6:d3:7b:fa:61:3f:4e:51:
bf:61:df:82:8f:49:88:88:a2:b0:78:cb:5f:31:46:c8:82:ee:
a7:c9:03:8e:c7:59:5b:bd:5d:7c:9a:a7:07:c5:61:89:f7:3f:
7f:61:97:08:a9:c0:c1:f7:4f:8b:24:7e:49:cd:57:7a:c7:85:
1b:e1:c6:ee:5c:0e:c8:68:07:02:6e:54:19:e0:f1:17:15:4e:
bd:3b:81:ef:67:67:04:ae:69:bd:72:50:e4:b3:2e:38:b5:76:
1d:a4:2c:23:d6:f6:f2:d9:10:96:70:13:93:b6:39:72:50:de:
b6:f8:96:33:06:fe:b3:bd:0e:17:17:16:22:47:f1:dd:af:bd:
6c:cf:7f:4a:a2:32:8c:ba:14:31:47:a8:90:5f:a5:63:68:6d:
a1:6f:3e:5d:0b:d5:74:fe:65:52:be:90:d6:76:c8:52:b8:c4:
16:9c:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:03 2025 by rpki-client