
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
File: spK68_TAei7dR9iMKxW2Wir33q0.mft (raw, json)
Hash identifier: RLDbDl++OGG1P69V6uO49tkeKuBt7FGp9mKbqp0KPi0=
Subject key identifier: 31:5B:7B:23:63:FC:8A:EB:B8:C8:C4:6F:D8:75:B6:7A:5D:86:7F:AF
Authority key identifier: B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
Certificate issuer: /CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Certificate serial: 01988167642E246F3151050A70FD8D473251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
Manifest number: 0CB6
Signing time: Wed 06 Aug 2025 22:01:33 +0000
Manifest this update: Wed 06 Aug 2025 22:01:33 +0000
Manifest next update: Thu 07 Aug 2025 22:01:33 +0000
Files and hashes: 1: spK68_TAei7dR9iMKxW2Wir33q0.crl (hash: m1hIbC8pgzuAmeve3IMTZYdfMl6rwe1IZHjGAmzTgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:64:2e:24:6f:31:51:05:0a:70:fd:8d:47:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Validity
Not Before: Aug 6 22:01:33 2025 GMT
Not After : Aug 7 22:01:33 2025 GMT
Subject: CN=315b7b2363fc8aebb8c8c46fd875b67a5d867faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:a0:28:88:18:e2:95:31:c0:c0:f4:39:26:
05:fe:04:e9:80:96:14:6b:fd:58:75:9a:76:2f:aa:
6d:be:b1:02:78:28:43:a8:e4:20:66:02:02:53:e2:
66:9e:d8:ff:50:07:47:48:50:3c:cb:34:78:a4:d8:
f2:4e:fa:71:31:5e:f5:0d:7b:e9:45:fc:48:e8:f9:
b1:bf:2d:d7:73:d9:b1:eb:dd:92:1f:a5:ec:4a:8b:
14:06:4c:01:98:77:72:72:1b:83:8b:89:7f:62:93:
8c:2b:b1:7b:5c:dc:01:b6:26:9a:da:4a:26:fc:56:
5c:ce:87:90:69:05:ee:57:18:b4:c6:be:d3:75:bc:
57:a3:54:93:7f:06:a4:7a:22:6b:fe:7d:06:9b:b4:
4d:bf:d6:d1:bb:da:0a:3c:ec:30:ea:97:a0:c8:c8:
8f:11:17:56:4d:74:fa:4c:c6:3e:3f:10:9b:18:7c:
3d:08:86:bc:5d:0d:b6:23:b7:a9:f5:03:0c:f4:40:
73:91:0c:82:ca:0d:fc:07:be:dc:88:5c:e1:91:8d:
9e:7b:de:5c:24:12:0d:9f:89:9b:98:d1:3c:d4:28:
60:1d:9e:79:ae:14:a1:f6:15:9c:09:bd:7f:47:2e:
58:84:b2:64:e2:0c:2f:a3:11:3c:bc:9a:8b:11:45:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:7B:23:63:FC:8A:EB:B8:C8:C4:6F:D8:75:B6:7A:5D:86:7F:AF
X509v3 Authority Key Identifier:
keyid:B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:00:05:2f:d0:2d:0a:86:46:4d:70:c5:d3:d8:be:46:41:
f4:7d:63:5d:6b:e7:94:af:09:23:fd:c8:a0:25:1a:8f:1a:9f:
30:6f:b2:fe:6d:1a:88:4d:e8:6f:62:d3:97:f1:f7:77:ae:80:
07:c9:28:be:3b:d9:69:9e:13:2c:9b:1c:60:3d:93:1e:e1:33:
1e:b4:7f:5a:7f:e2:17:95:bb:40:9a:57:e5:05:f3:27:06:7d:
0c:70:ad:22:67:58:16:2e:44:41:bb:44:7c:19:94:2b:d0:a5:
23:38:20:7f:da:5d:1c:60:8e:02:94:89:eb:e5:0b:07:2c:1a:
41:3d:28:1b:09:e3:73:15:35:8b:61:e7:3e:75:0b:a5:ba:b9:
3f:0e:3c:a3:d9:31:ef:eb:df:a0:86:38:51:5b:3c:c7:8a:79:
4e:27:da:f8:6a:1c:40:8c:32:14:fe:ca:b4:25:f4:33:da:47:
cd:89:8b:f9:e0:b1:89:65:df:66:c0:8e:8a:d4:aa:2c:62:21:
9f:5f:72:c9:24:e2:36:a3:5c:47:37:fa:70:5a:13:a0:d5:e7:
6c:44:d0:60:a5:aa:ec:15:45:70:ba:92:87:69:54:05:3e:43:
6d:fa:89:10:d7:21:83:21:18:fd:db:cb:df:5a:77:7d:ca:fb:
7d:42:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:57 2025 by rpki-client