Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
File: SpR3QFKci4QPf4kzCXmshyyj-rg.mft (raw, json)
Hash identifier: Hcqgcy+JIJtwNY5zi/Fxy7/YMsQP7qZJRgm/nBV0yqg=
Subject key identifier: 62:9E:60:49:62:AF:37:9F:97:37:1B:A6:09:E0:70:57:EA:4B:33:3C
Authority key identifier: 4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
Certificate issuer: /CN=4a947740529c8b840f7f89330979ac872ca3fab8
Certificate serial: 019896A6A5749A1FC7D2A517AFDEF04F1583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
Manifest number: 01D3
Signing time: Mon 11 Aug 2025 01:02:40 +0000
Manifest this update: Mon 11 Aug 2025 01:02:40 +0000
Manifest next update: Tue 12 Aug 2025 01:02:40 +0000
Files and hashes: 1: SpR3QFKci4QPf4kzCXmshyyj-rg.crl (hash: ijN5VjC+GcVZ+WguIQ+5gvAFf729nbLAGuHyBP6OSaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:a5:74:9a:1f:c7:d2:a5:17:af:de:f0:4f:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a947740529c8b840f7f89330979ac872ca3fab8
Validity
Not Before: Aug 11 01:02:40 2025 GMT
Not After : Aug 12 01:02:40 2025 GMT
Subject: CN=629e604962af379f97371ba609e07057ea4b333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:95:3c:c9:ee:99:ff:d4:c0:b3:27:95:0b:
58:e3:0b:c3:a7:47:d3:6f:74:13:93:a1:29:f7:6c:
f4:38:50:b1:d2:ee:cd:e0:9e:ba:41:3d:c8:a2:d9:
12:23:16:00:f6:a8:c7:4b:5b:0f:43:c0:f8:d7:9e:
c6:9c:15:db:b3:d9:35:73:84:cf:14:95:33:3e:50:
a1:9a:cd:a5:16:46:53:55:e9:91:a8:20:3a:ba:04:
1c:d7:6a:c1:cb:9e:20:57:8e:23:96:f6:9e:57:c2:
df:3e:57:52:6d:a0:81:bb:fc:ed:df:b1:91:9f:80:
94:20:9e:58:a8:f8:8d:fb:b2:b6:2d:14:e2:3b:9f:
bc:3f:3c:43:3b:7d:9d:21:c3:ba:99:1d:87:8b:9e:
a9:fe:eb:fb:69:ff:08:e4:82:6f:43:09:be:85:61:
71:d8:e7:94:1c:7c:aa:cd:c9:4e:db:2e:b0:25:32:
cc:e4:80:3c:76:ce:96:4d:95:9c:ae:cf:3a:af:fc:
52:e5:f3:c7:0f:70:fa:1c:74:52:a0:f2:1a:6f:75:
d5:38:71:5e:d5:e9:02:45:7e:31:50:46:33:fe:70:
9d:5b:16:31:06:45:d8:0d:30:2a:ff:86:db:91:63:
4b:06:e6:a9:c6:66:0d:0b:45:49:fb:7f:d6:25:76:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:60:49:62:AF:37:9F:97:37:1B:A6:09:E0:70:57:EA:4B:33:3C
X509v3 Authority Key Identifier:
keyid:4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4d:00:6f:a5:2c:c0:87:f9:ff:19:f2:a9:b4:a3:a1:45:d0:
77:a0:c1:4e:61:8d:f6:fe:72:fa:99:36:66:e4:61:10:ea:bb:
16:04:38:76:7c:d1:14:68:33:aa:86:44:1d:c2:82:d6:dd:c2:
0b:2f:c7:be:13:46:7a:bf:c6:3d:41:46:62:00:3b:0c:8f:7a:
0a:c2:f4:57:4f:2b:5e:d6:74:f9:85:d5:2b:58:14:6d:41:e9:
f7:ee:09:da:45:2f:22:e0:37:5c:dc:0a:6a:db:ae:d7:aa:3c:
1e:41:5c:00:96:84:03:fb:c6:9f:4b:fe:44:e9:f1:35:ab:7c:
bc:53:4f:3b:a2:43:64:fa:99:24:30:52:6b:86:07:23:33:28:
cc:b0:b4:38:85:5d:0a:74:ac:01:c0:cb:22:17:b7:55:1b:13:
e8:5b:3c:ab:20:a0:cd:ae:70:a6:b4:91:7c:0d:9d:77:f3:c4:
da:41:ff:42:57:71:7b:ab:f9:7c:c8:7d:de:17:d1:04:f4:6f:
6e:19:7a:af:ea:1d:f8:53:a4:52:e9:cc:ef:ba:3c:5f:98:c3:
62:2f:7d:a2:e3:84:b6:55:c9:7d:5c:27:ef:b3:ce:89:9f:83:
35:a1:35:c4:f3:32:42:9d:94:ef:01:85:40:46:1f:c1:6b:24:
5c:6f:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:11 2025 by rpki-client