Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: 63JhOz1s1xTdMdRBeO4gNx4m80IDHrcq53jEoooP7O0=
Subject key identifier: F4:1C:D2:F3:D0:55:BC:66:A6:3D:F2:F5:2F:3F:81:25:87:19:0E:53
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 01977A1DC813712A6FF4AE1C809EBFE0D4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 09A3
Signing time: Mon 16 Jun 2025 19:01:01 +0000
Manifest this update: Mon 16 Jun 2025 19:01:01 +0000
Manifest next update: Tue 17 Jun 2025 19:01:01 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: 5y5YrlOKLbZ0mQlubUrmTFMNo/K+cazxNikrsaQiv1Q=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:c8:13:71:2a:6f:f4:ae:1c:80:9e:bf:e0:d4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Jun 16 19:01:01 2025 GMT
Not After : Jun 17 19:01:01 2025 GMT
Subject: CN=f41cd2f3d055bc66a63df2f52f3f812587190e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:45:5d:75:98:74:22:43:ef:07:2a:37:7a:
c8:b6:a0:4f:05:d0:7e:94:b6:5a:97:8b:52:24:0c:
51:78:83:37:d5:8f:b9:e1:86:9a:a6:8b:b7:4e:1c:
e2:88:33:46:d4:57:28:6f:18:b2:75:ed:07:18:82:
39:03:58:7d:c4:d0:d0:cd:79:f5:fb:8a:e0:60:2d:
ba:26:99:78:10:dc:9a:62:ff:b0:14:f5:9c:d1:07:
10:67:1f:9f:f6:b2:d8:03:35:11:f8:a2:b6:0c:2f:
bd:67:2c:63:ce:a8:a9:3a:f3:6c:87:11:e7:a5:09:
41:75:87:9a:f2:e8:62:19:2e:ab:16:68:5d:1c:53:
32:64:cb:29:6a:d0:47:65:14:40:9d:22:e7:b4:7e:
f0:0e:bc:5f:9a:0e:b1:3c:68:8a:14:a1:41:91:86:
ca:37:9a:35:db:cd:70:19:19:a4:3b:1b:58:80:ae:
5d:6c:35:96:01:5a:a9:51:0c:43:80:62:85:75:46:
4c:d4:7a:7d:32:e4:9a:83:ba:61:25:f6:1f:24:5a:
93:07:5e:ec:eb:d5:0c:6b:32:bc:a1:3c:9c:e8:1f:
b9:52:01:24:3f:cd:da:53:6b:3a:b1:ef:a1:84:b4:
6c:3e:b8:81:9f:a2:12:e1:5c:84:db:f7:c6:50:e3:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1C:D2:F3:D0:55:BC:66:A6:3D:F2:F5:2F:3F:81:25:87:19:0E:53
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d6:d7:90:5a:d1:1f:82:f8:51:d0:2b:74:88:8c:63:49:14:
4d:ed:53:91:63:f0:b9:af:56:46:78:12:1c:25:1a:cf:1e:fe:
b4:25:0d:6e:98:fe:e9:b9:3b:36:5c:33:c5:78:9f:9a:f8:77:
07:ba:79:dc:f4:a6:d5:f7:69:9d:84:8a:20:3b:41:7a:68:20:
d9:1f:c0:a6:6f:e7:88:ea:4f:f2:0a:c5:ac:80:69:2b:4b:83:
02:ab:c4:21:58:ef:48:0b:41:d5:86:fb:9f:4f:54:a3:e1:86:
08:f2:d4:9b:be:1e:57:ff:0d:d4:f2:84:59:02:20:78:ff:9e:
ab:d0:b8:fa:2a:17:86:96:5c:07:65:74:4b:8a:7e:ee:73:d8:
7d:b6:5f:b2:95:86:1c:1a:64:b2:6b:dd:24:64:1e:76:6d:9e:
e9:95:0a:a2:32:f8:61:b3:19:0f:8c:5c:d6:fe:24:9b:82:ab:
7c:43:94:f6:c1:4d:15:68:16:2d:e4:fe:74:b8:d2:99:91:a9:
a6:16:82:23:e2:e8:77:d1:12:a3:f6:dd:6b:cb:fe:1c:a0:ff:
e2:82:48:0a:b5:dd:c5:21:69:09:c2:80:f9:24:8a:f9:ba:a0:
eb:8d:7a:ec:f5:97:4c:0a:4c:ca:4b:cc:51:5d:4d:52:0f:ee:
47:3b:70:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6HcgTcSpv9K4cgJ6/4NTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi
NDRjMjYwHhcNMjUwNjE2MTkwMTAxWhcNMjUwNjE3MTkwMTAxWjAzMTEwLwYDVQQD
EyhmNDFjZDJmM2QwNTViYzY2YTYzZGYyZjUyZjNmODEyNTg3MTkwZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMRFXXWYdCJD7wcqN3rItqBPBdB+
lLZal4tSJAxReIM31Y+54Yaapou3ThziiDNG1Fcobxiyde0HGII5A1h9xNDQzXn1
+4rgYC26Jpl4ENyaYv+wFPWc0QcQZx+f9rLYAzUR+KK2DC+9ZyxjzqipOvNshxHn
pQlBdYea8uhiGS6rFmhdHFMyZMspatBHZRRAnSLntH7wDrxfmg6xPGiKFKFBkYbK
N5o1281wGRmkOxtYgK5dbDWWAVqpUQxDgGKFdUZM1Hp9MuSag7phJfYfJFqTB17s
69UMazK8oTyc6B+5UgEkP83aU2s6se+hhLRsPriBn6IS4VyE2/fGUONNEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQc0vPQVbxmpj3y9S8/gSWHGQ5TMB8GA1UdIwQY
MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt
OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh
LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtbXkFrR
H4L4UdArdIiMY0kUTe1TkWPwua9WRngSHCUazx7+tCUNbpj+6bk7NlwzxXifmvh3
B7p53PSm1fdpnYSKIDtBemgg2R/Apm/niOpP8grFrIBpK0uDAqvEIVjvSAtB1Yb7
n09Uo+GGCPLUm74eV/8N1PKEWQIgeP+eq9C4+ioXhpZcB2V0S4p+7nPYfbZfspWG
HBpksmvdJGQedm2e6ZUKojL4YbMZD4xc1v4km4KrfEOU9sFNFWgWLeT+dLjSmZGp
phaCI+Lod9ESo/bda8v+HKD/4oJICrXdxSFpCcKA+SSK+bqg64167PWXTApMykvM
UV1NUg/uRztwsg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:50:33 2025 by rpki-client