Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: uCu5RbV54qDXf6SN5WLkTTMD82PBpLKNlKpb1vqoR2U=
Subject key identifier: D1:8C:3A:CA:B7:B3:17:D7:D0:C0:FB:30:D5:B5:7D:8E:9A:4C:0D:49
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019A4E4F7A617FDCCA36987DEB9CF1051A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: HfdVRZC/X9qsl2PKVISpXE08weKb2W9YNHuu11ECLMs=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7a:61:7f:dc:ca:36:98:7d:eb:9c:f1:05:1a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=d18c3acab7b317d7d0c0fb30d5b57d8e9a4c0d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:55:23:42:b1:90:2a:75:af:14:2e:1e:53:
c8:2c:01:47:a9:54:5e:5b:95:ab:f4:72:fc:36:5d:
f2:19:17:e1:05:ca:e8:5e:00:84:62:37:40:5f:56:
89:23:dc:7c:28:0d:b7:1c:c9:d9:c9:55:a0:ac:88:
9d:b1:83:78:d8:ad:ac:f2:dc:02:2c:72:79:8d:f8:
c7:7b:f9:84:06:9c:01:f4:be:9c:84:07:45:92:b7:
de:52:f3:a9:51:a5:b1:a6:f6:42:9d:a6:d3:59:29:
d0:ea:05:d1:53:e0:e5:da:14:68:e0:e3:58:95:b0:
e2:d0:b9:3f:38:7e:2f:7a:0e:dd:6c:96:de:1a:87:
14:6d:77:5f:fc:e2:6b:60:a5:5b:2c:f1:7d:48:f5:
7c:15:de:af:15:4b:fe:b6:e4:70:01:9c:18:ec:77:
c7:4b:30:48:3a:d3:08:f1:43:de:51:72:7f:9c:e3:
a0:f7:dc:1a:cf:ef:03:80:9e:4e:ef:0a:1a:c3:d3:
16:2c:8a:d1:92:b4:58:f4:00:23:7e:a9:25:9e:04:
7a:12:3b:57:9d:05:09:74:7b:93:c7:ce:63:2f:04:
bb:d5:72:a5:14:8a:78:d0:6a:4a:08:d3:ac:21:f7:
7b:26:7e:44:7a:94:ee:75:e8:bb:70:c0:44:c0:75:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8C:3A:CA:B7:B3:17:D7:D0:C0:FB:30:D5:B5:7D:8E:9A:4C:0D:49
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:61:fd:b1:05:58:ae:16:c8:c2:ee:c7:60:e9:53:55:93:b4:
af:b4:96:78:cd:89:4e:2d:d4:de:bd:6f:c6:4f:88:25:39:69:
99:ce:0c:f2:a3:b1:ee:b0:d1:5d:e0:10:6c:de:fc:8e:b1:43:
0a:31:e6:b2:ba:cb:fc:0a:45:5f:58:fb:f8:b5:56:d5:11:32:
ac:6c:43:6a:0c:f5:18:c0:2c:7b:99:da:1c:28:da:a9:55:78:
2a:b0:a5:b3:a6:3f:98:a5:6c:2b:c1:a6:61:4c:3b:64:54:a6:
87:5a:01:3d:df:3d:cd:3f:73:04:06:0e:18:99:88:0c:3a:b2:
fc:cb:19:a2:66:dd:1f:54:40:fb:34:52:de:6a:30:99:a4:f9:
0d:01:de:b6:d7:71:9f:66:5b:a1:92:41:b7:c3:a6:7c:01:3b:
98:cf:71:3b:e5:4a:63:08:ef:c7:1a:b7:0e:23:5c:4c:2c:7f:
7d:5f:d3:53:a4:c3:81:af:34:7c:e3:f7:a5:73:ef:f2:8b:2c:
df:5c:8b:66:82:4a:e9:4e:9b:8d:67:be:d0:76:4d:3a:80:55:
98:78:ca:b5:5a:55:7f:b8:70:39:15:75:b7:db:38:ee:4a:19:
ce:b4:36:2e:50:3f:f2:f8:29:a2:88:f9:d6:46:b3:5d:b4:7a:
06:3c:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:49 2025 by rpki-client