Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: jHVxKwWKwNp13eSIu7M47ldtrNvVyhUBWwrYjbxfYUg=
Subject key identifier: D2:89:2B:E6:58:BA:52:68:6C:5B:46:3D:8B:4A:22:B9:81:23:C6:44
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 019874BDCF3B900FED644591323F893F9EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 11CA
Signing time: Mon 04 Aug 2025 11:00:52 +0000
Manifest this update: Mon 04 Aug 2025 11:00:52 +0000
Manifest next update: Tue 05 Aug 2025 11:00:52 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: SqaENm4G85ccwxksUqoKhpE97hHcctcFPrlZQyIuntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:cf:3b:90:0f:ed:64:45:91:32:3f:89:3f:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Aug 4 11:00:52 2025 GMT
Not After : Aug 5 11:00:52 2025 GMT
Subject: CN=d2892be658ba52686c5b463d8b4a22b98123c644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:69:ff:aa:6e:86:0f:e4:41:f2:a1:f2:5e:
e7:f0:0b:31:bd:fa:b5:09:80:c8:4f:7a:45:c2:96:
a7:39:5d:7b:5d:4b:24:c6:5b:fa:99:b8:46:09:64:
65:01:3b:ca:2e:25:9a:6f:8a:eb:2a:f5:4d:50:23:
cb:47:4f:6d:9a:08:1e:86:2f:27:c5:37:ac:93:3b:
7f:62:9d:b8:33:22:a1:4d:a4:66:7d:64:62:e0:30:
ee:ae:58:98:2d:c0:55:3e:dd:d9:70:3e:4d:89:47:
ef:e4:1c:2c:8b:97:6c:49:81:30:0d:a0:e8:d4:b4:
1e:25:b2:ea:1b:17:63:5b:2f:77:33:8e:86:9d:9d:
12:db:03:0e:d7:0b:24:0c:28:95:a8:a6:39:f8:9f:
1b:02:8c:23:1e:e4:8a:05:c1:77:92:e3:3c:b1:db:
e0:11:e9:78:19:18:53:a3:90:53:57:32:af:47:5a:
1c:d8:3c:8a:0e:18:90:ec:4e:78:05:af:41:5d:a8:
0a:62:aa:bb:0e:4f:4f:4d:5f:bd:fe:4a:6b:69:04:
29:2b:4f:fa:78:3d:06:47:e0:7b:39:55:b2:7d:44:
a0:56:1c:66:db:e8:08:92:56:41:6d:8a:b7:6c:e1:
d3:ca:a2:c3:47:6e:2e:d0:75:44:d7:9f:1a:0c:45:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:89:2B:E6:58:BA:52:68:6C:5B:46:3D:8B:4A:22:B9:81:23:C6:44
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8c:d5:20:24:9b:e4:de:2e:d9:40:3b:22:64:d7:2e:11:9a:
47:17:f5:5d:a5:0c:6b:47:aa:0f:78:b1:38:6d:eb:6e:85:2e:
fb:6d:58:e5:6d:8c:28:2d:44:e6:c3:58:be:a7:04:45:f6:14:
9f:80:47:06:81:0b:a2:df:dd:62:30:60:13:8a:01:5c:b3:60:
37:18:7f:44:28:84:8a:be:5d:3c:ad:ef:79:6e:95:08:19:d6:
8d:a0:f5:9c:17:51:d1:dc:62:d5:79:bb:17:8e:4b:be:59:69:
88:5a:ae:24:42:a5:1a:d2:3d:69:a4:0a:ed:29:a2:5a:b3:1c:
ec:d9:b2:46:17:c6:3a:28:e7:c9:e3:b4:e5:5e:d6:d8:ab:c6:
6b:58:5e:04:1f:0d:6d:ce:38:c5:2e:9a:2a:10:57:28:00:0d:
f2:8f:68:79:15:c8:dc:b5:e7:63:a5:e3:18:3e:f7:27:ad:c3:
23:15:99:8c:3c:9a:a0:bf:9c:e0:b1:c8:db:c4:20:20:a5:c2:
f2:60:b5:12:de:5c:2d:b8:e5:06:97:a6:95:cb:2b:6e:b3:65:
b3:ed:7c:55:f4:48:be:0d:4e:bd:45:ec:f0:47:72:70:02:95:
bd:45:87:e1:53:af:51:e0:21:3e:d6:e1:76:25:e0:e3:61:72:
c3:8c:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:02 2025 by rpki-client