Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: or9I3JpCA013r861CxaTkQWKpwwDZmMLiV7HK5BFGmY=
Subject key identifier: 8C:E0:BB:57:9D:CE:57:13:C9:26:FE:E1:82:4E:38:F1:45:12:F9:83
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 019874BE3D5978E42BA45F5EC4AC42629A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 098E
Signing time: Mon 04 Aug 2025 11:01:21 +0000
Manifest this update: Mon 04 Aug 2025 11:01:21 +0000
Manifest next update: Tue 05 Aug 2025 11:01:21 +0000
Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=)
2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: TvxBPIdZg1ibFEYkemUd2LysOYWLgRCoBoOmOgTWTN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:3d:59:78:e4:2b:a4:5f:5e:c4:ac:42:62:9a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Aug 4 11:01:21 2025 GMT
Not After : Aug 5 11:01:21 2025 GMT
Subject: CN=8ce0bb579dce5713c926fee1824e38f14512f983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:2f:5e:e1:51:3d:cd:96:88:84:2d:11:50:
f0:81:58:60:8c:df:7b:1e:5f:33:50:32:00:5d:4b:
47:12:70:9f:b6:0f:f8:8a:a4:cd:cd:2a:fa:74:f7:
8d:70:15:f9:a8:9a:44:10:c9:d3:38:98:8d:ab:12:
91:77:d5:65:86:8e:bd:d3:54:60:cc:38:65:8b:a1:
47:3d:93:61:d0:dd:f9:5b:d6:27:92:88:70:16:29:
37:1f:86:f1:df:2d:66:35:a3:ea:b9:7e:cc:8c:ac:
24:9d:12:65:e0:68:e9:56:5e:e0:9f:bc:72:56:43:
68:82:14:db:c0:0d:bb:d2:28:23:8e:72:bc:5d:83:
d2:f6:f2:38:f0:e9:ee:93:5c:eb:ff:1f:7b:b7:e4:
05:4c:0f:8c:37:1b:63:1d:15:b0:ee:0e:6f:be:02:
93:38:9a:2e:46:fc:8f:ce:dc:61:7e:5c:c2:46:26:
3a:e9:32:1f:3f:f9:a8:72:dd:85:c8:8b:5d:90:db:
f4:5e:3b:6b:66:51:7c:87:df:fa:b3:40:85:e8:ad:
31:d9:25:97:f1:0c:e3:56:56:bc:3c:79:01:cf:85:
ba:6c:44:63:ab:39:e8:a0:13:99:ee:1d:71:83:66:
cb:40:8b:42:c5:a6:fa:20:b9:6b:78:51:64:62:c5:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:BB:57:9D:CE:57:13:C9:26:FE:E1:82:4E:38:F1:45:12:F9:83
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2e:2d:fe:0b:73:e4:33:d1:ef:e4:99:04:31:45:83:5c:16:
7e:0d:56:5d:44:92:bc:30:09:8d:86:02:3d:4e:e0:03:1e:4e:
27:b5:9e:a0:81:28:24:60:35:39:31:b1:25:0a:c8:70:17:71:
52:4d:b8:2d:20:97:37:6d:40:ae:68:85:b6:93:f8:2e:a7:f4:
bf:f8:94:65:0c:61:10:ce:e5:06:37:f8:18:47:b3:19:d4:45:
d5:7a:85:46:be:c5:d1:cf:33:2c:68:89:cc:af:71:71:3c:50:
79:e7:39:64:7d:91:72:fe:cc:f6:30:e2:e2:24:b4:09:d1:ca:
b3:33:8f:8e:5c:77:a5:db:d2:42:45:d1:e3:97:d7:d2:ba:f6:
81:07:c2:4e:27:35:c4:bc:f3:83:7c:72:a6:89:bf:88:a0:b6:
51:86:aa:9d:42:91:ab:05:a0:b6:90:89:0c:9c:55:9e:b4:7b:
c5:1b:f7:d0:99:49:f4:f6:d6:f0:0b:2e:e7:c9:49:c8:4d:b2:
66:48:41:0e:36:81:2b:d1:60:d1:bc:1d:fb:84:75:d6:f9:cf:
37:de:ab:6e:39:44:03:2d:38:64:46:72:b6:95:12:d8:a2:60:
f6:c8:2d:15:4c:66:d6:76:2f:1c:d7:ac:57:88:ef:7e:7e:e3:
48:1b:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:52 2025 by rpki-client