Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: 9ysmM9aTfpecHW0peYkcG6gj152NeIH1R3LioEljTO0=
Subject key identifier: 71:C8:53:11:C4:1E:23:24:D4:07:C7:50:DF:14:D4:01:CE:6C:40:CD
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 01976C2AF26BFB7B77928B4AF31DD58341B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0905
Signing time: Sat 14 Jun 2025 02:00:43 +0000
Manifest this update: Sat 14 Jun 2025 02:00:43 +0000
Manifest next update: Sun 15 Jun 2025 02:00:43 +0000
Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=)
2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: SIRHW6x8ktDaOlyqg7Bv3maGLz2X0bUs9vK7wD+UXy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:f2:6b:fb:7b:77:92:8b:4a:f3:1d:d5:83:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Jun 14 02:00:43 2025 GMT
Not After : Jun 15 02:00:43 2025 GMT
Subject: CN=71c85311c41e2324d407c750df14d401ce6c40cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:aa:83:14:05:61:37:f0:2b:59:28:19:9e:
39:17:0d:a0:ed:27:7b:e4:e8:39:0b:11:a1:6c:79:
b6:97:33:c8:c1:a7:5c:ec:79:a5:48:15:a4:fa:55:
29:69:26:f1:c8:f8:a3:f5:f2:a5:09:12:c8:9d:d3:
f1:68:aa:60:8b:e1:43:91:32:fb:4e:12:81:e6:38:
53:13:e5:8e:d6:14:00:78:18:56:16:c4:15:c7:5b:
0f:c2:3c:d2:2b:dc:67:58:6f:c9:b5:be:80:cc:b5:
cd:e2:e3:e9:f3:a0:95:85:af:0e:0f:d4:1f:89:aa:
67:dd:c7:0b:df:db:5d:27:40:e0:61:05:f5:c5:9c:
cb:69:76:1e:8c:13:73:26:64:45:0d:de:d8:0b:5a:
7c:79:fd:96:96:cd:d6:16:c0:89:e3:71:ce:b0:8d:
71:e9:60:7f:40:64:84:ae:47:bb:a0:78:eb:78:1b:
96:55:b1:da:25:cb:72:c3:46:fd:21:02:3b:c5:f6:
89:ae:8f:6b:33:bb:e6:ec:be:45:10:10:52:72:e8:
15:59:af:66:cb:5e:02:ef:c1:7e:ed:0a:95:11:6b:
d9:2f:10:b6:30:3c:a9:68:5f:71:4b:84:a5:1d:be:
1c:24:3c:aa:e5:94:33:09:f1:86:be:79:3b:1d:4c:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:53:11:C4:1E:23:24:D4:07:C7:50:DF:14:D4:01:CE:6C:40:CD
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:44:a8:bc:43:be:a9:01:ab:0a:27:84:72:62:ae:89:50:db:
df:ab:a6:e5:ff:d7:f0:57:86:18:52:d8:1c:e3:b6:72:12:7b:
05:30:78:14:81:7c:ac:f4:4d:98:da:7b:33:eb:4a:fd:4d:ab:
0f:96:da:4e:14:44:67:68:a4:30:6d:20:6c:7b:cd:fb:c3:d7:
86:6a:64:ba:28:93:d6:f8:17:36:91:75:db:1c:36:21:b4:a0:
56:f0:b5:92:e5:68:b1:19:ba:2f:d2:24:41:d6:d2:7a:9a:d3:
ff:f5:0e:52:68:20:77:1c:0f:d9:dc:d9:69:13:56:f4:52:13:
1f:cf:82:ce:84:30:5b:f2:f8:d4:09:1b:d0:09:0c:4d:f7:40:
77:b0:5b:bc:13:b6:27:2a:f1:1e:27:5b:4f:75:c1:eb:9e:c1:
42:e3:e6:6c:af:87:84:15:7c:19:5d:60:e7:79:bb:64:5a:90:
41:14:00:c0:00:a1:72:00:6f:bc:9d:fb:5e:2b:48:18:93:74:
4a:f4:2e:9e:23:c1:25:8d:70:61:dd:ec:54:28:20:f9:20:c4:
5c:fd:11:24:73:ab:42:3a:1b:bf:35:e2:5f:6a:09:e2:85:ec:
de:7f:cf:1d:75:4a:7f:fc:d1:a4:6b:3b:70:b2:b9:29:d4:16:
72:80:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:43 2025 by rpki-client