Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: GKX4TbBxbn8gUGztM1GdYeCnNbC5zqPPpjIewn67m6I=
Subject key identifier: CC:F3:1D:2A:61:41:49:01:2F:AD:9E:21:D4:2D:7B:E1:90:61:3A:2F
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019874873577A01668EB93ACB177F9DF716D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 1109
Signing time: Mon 04 Aug 2025 10:01:14 +0000
Manifest this update: Mon 04 Aug 2025 10:01:14 +0000
Manifest next update: Tue 05 Aug 2025 10:01:14 +0000
Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: NqIc1GIYYKXQJJhApB5qYMIsvYodaJl1s1WV9WsEL+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:35:77:a0:16:68:eb:93:ac:b1:77:f9:df:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Aug 4 10:01:14 2025 GMT
Not After : Aug 5 10:01:14 2025 GMT
Subject: CN=ccf31d2a614149012fad9e21d42d7be190613a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:aa:fd:21:ef:ce:58:0b:e3:de:e7:b5:d4:0f:
bd:89:cc:7c:cc:06:06:2e:dd:fb:00:0c:f6:cb:10:
d7:1f:91:ba:d8:93:d6:f4:a7:f3:21:73:29:91:5d:
50:0b:72:85:9d:2f:09:e1:36:e2:13:cc:58:3b:97:
14:6e:71:e7:cc:14:50:c4:dd:aa:6b:cd:02:97:11:
b6:f1:a8:a1:a2:99:23:cc:5f:57:02:69:2a:3c:ea:
ff:99:51:aa:30:9b:9f:27:db:44:53:ed:f4:17:29:
68:79:a7:11:74:76:b3:3d:e3:a3:5a:6f:79:70:c9:
7c:b7:ad:2c:b5:7d:d4:dd:2a:2b:1e:4f:42:dd:98:
60:4a:d8:65:df:b4:3b:36:84:fb:ce:4b:b6:38:da:
1d:26:ff:02:46:53:8b:3c:55:2d:3f:25:28:b7:3a:
35:01:ca:c7:b8:b7:2b:7a:a8:07:b9:cb:04:f7:46:
5a:7e:7a:63:ca:c6:d9:a0:5e:73:ad:ee:32:90:b2:
7f:fb:a8:4c:ec:83:68:9b:3c:e7:e3:86:21:a7:41:
18:65:37:68:77:37:a8:7f:9b:b4:71:70:39:eb:cd:
7a:5f:34:67:13:ff:c9:fb:49:89:fd:55:13:86:83:
09:b4:ed:d3:87:39:ed:fb:23:72:67:d9:a0:ee:ad:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:1D:2A:61:41:49:01:2F:AD:9E:21:D4:2D:7B:E1:90:61:3A:2F
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bf:61:72:80:1f:ad:e0:d4:ab:5c:53:53:68:c6:67:4e:d1:
31:17:8d:b6:25:0a:98:bc:67:87:28:67:9d:e3:af:3d:73:8d:
7d:33:62:87:28:9d:35:42:3d:14:78:4d:cc:d3:16:9b:41:d8:
17:9e:d6:e0:eb:0e:6f:96:31:52:90:c5:85:e7:35:c7:6c:1f:
15:77:4b:94:e9:58:15:b7:44:5c:48:1c:d9:10:2c:6e:6e:ae:
84:b2:8c:ba:1d:c4:ec:89:4f:46:d9:58:bc:85:7f:9e:31:6c:
7a:ed:3e:48:46:a5:1e:40:6e:4b:21:42:0d:48:ce:60:1c:51:
6b:7d:f5:2e:c9:9b:7a:af:d6:97:99:87:90:3d:93:50:7a:07:
c7:2c:28:de:48:a6:7a:1e:9b:af:f2:79:1c:09:38:02:c0:09:
67:9d:fc:0f:ee:5e:f5:a9:83:b8:2b:81:6c:ff:0b:d1:e8:e4:
c4:60:4b:ed:16:0d:d5:9f:95:ac:93:bb:fe:a2:8b:70:2c:89:
6d:79:03:b4:2d:01:43:fc:08:fd:17:ef:20:2b:56:8b:e7:a4:
96:e8:ba:76:fa:4a:3b:94:30:06:d5:be:7d:99:32:43:ef:ac:
38:f7:7a:a7:62:11:1e:7a:1a:f5:e1:38:d1:f2:76:43:51:1f:
52:ca:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:35 2025 by rpki-client