Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: hEpYONl3b5xYJyRn5mOVSKUEJwt2ZSEP1awzHy5Vq6Y=
Subject key identifier: AF:9F:1D:D3:D4:6D:8D:34:57:48:C6:1F:7A:7C:63:4C:7B:4B:5A:40
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 019A4DE2359D472D5BFBB4F00E0EF946445B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 12BF
Signing time: Tue 04 Nov 2025 08:01:01 +0000
Manifest this update: Tue 04 Nov 2025 08:01:01 +0000
Manifest next update: Wed 05 Nov 2025 08:01:01 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: sMLYatpDPqMMaDh9rDfDaHa5UUVfr19VaJP3TNDx0e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:35:9d:47:2d:5b:fb:b4:f0:0e:0e:f9:46:44:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Nov 4 08:01:01 2025 GMT
Not After : Nov 5 08:01:01 2025 GMT
Subject: CN=af9f1dd3d46d8d345748c61f7a7c634c7b4b5a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:26:c4:4a:4c:25:e1:5a:77:01:fa:ca:01:
26:7b:a5:54:af:cc:c0:88:01:28:40:d9:cb:36:a5:
3d:80:4b:84:47:6a:23:73:a0:fc:11:e6:fa:59:7f:
f8:13:d9:94:1b:f6:88:11:68:27:b0:cd:21:7c:b5:
1c:36:ad:87:b4:7c:ac:d9:3a:50:ee:e3:57:72:1b:
4f:3e:de:73:49:ac:94:a1:e3:f2:76:48:67:ea:26:
01:6b:c6:bc:99:36:6e:bf:7f:fe:d9:d4:54:fb:73:
54:d5:bd:b9:d8:5a:f7:36:03:b7:a6:87:e4:3a:9c:
3e:33:5b:72:d0:5b:07:18:c4:53:5f:27:f9:fb:c0:
7c:be:8a:50:3f:10:67:00:5b:de:28:79:4b:4a:05:
ce:ee:09:41:da:c6:f8:cf:b9:25:cd:79:d4:64:84:
12:d3:2f:a9:91:91:6a:4c:b0:a1:b1:e2:ce:af:55:
fc:5b:b6:2c:76:c3:fa:59:61:92:a4:3e:51:e4:0d:
97:aa:a0:c4:f6:be:b1:5d:50:12:0e:74:36:24:42:
95:b1:61:ac:6f:46:38:3e:13:3f:fb:14:59:c0:96:
4a:d9:dc:d1:d4:67:08:b1:68:46:62:69:85:37:ff:
a7:6b:66:1a:f6:3e:fb:fa:85:c0:fc:5c:fc:7d:d5:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:1D:D3:D4:6D:8D:34:57:48:C6:1F:7A:7C:63:4C:7B:4B:5A:40
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:90:a9:62:2a:34:40:ca:18:ab:14:5c:11:34:db:4c:4f:76:
b2:dd:60:70:55:5b:8e:11:ce:92:f6:67:08:57:f5:98:70:5b:
52:cc:17:34:0c:c8:4d:9b:57:1c:82:e6:1b:5b:2e:93:c7:08:
bd:18:bb:db:ea:83:a1:3e:41:c8:5f:bf:4a:7c:65:66:4e:cb:
a8:af:d2:08:fa:d0:5b:95:af:32:62:2f:aa:41:fc:5b:97:3d:
8a:ce:e2:f7:87:a4:da:3c:59:23:06:f2:99:23:a8:ef:ef:a5:
f3:44:2f:9f:f9:68:80:43:3e:fb:35:99:e3:f5:a6:a7:1b:64:
a8:f5:14:e7:99:09:7e:48:83:37:8f:1a:1d:49:a2:c6:22:0d:
d4:4d:fe:8b:2f:7e:31:fc:16:a8:36:d2:62:3b:79:9c:92:40:
a6:3a:af:54:ac:a2:13:70:79:31:1b:3e:b2:7e:ad:a6:fe:47:
fa:13:ec:8a:33:fb:ef:44:8e:0b:cb:87:31:4b:fc:31:a4:b0:
da:53:09:70:27:36:fa:00:9e:50:5e:cc:6b:6e:2c:a3:ca:d7:
98:c2:d4:c3:36:a9:0d:fb:d5:fc:3e:da:e0:09:03:7f:f6:fe:
a7:ee:f5:d0:8e:b0:d8:0a:f3:b7:0f:74:45:3d:cb:27:d8:5f:
69:63:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:13 2025 by rpki-client