Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: 8d/fegj+x6+qJQWN5CDSX7t4tMn4tZlTb0GtSMnHySs=
Subject key identifier: 7F:F5:7D:00:91:D3:22:A5:A1:A1:96:CB:74:66:8E:4A:F4:7C:01:60
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 019A50E2810F4379FEDDFE3EAD564B56444B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:00:12 +0000
Manifest this update: Tue 04 Nov 2025 22:00:12 +0000
Manifest next update: Wed 05 Nov 2025 22:00:12 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: YCoTKr78TlVRVhhi4GdAx+EnqM6gF4c1Wze5vrgv5aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:81:0f:43:79:fe:dd:fe:3e:ad:56:4b:56:44:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Nov 4 22:00:12 2025 GMT
Not After : Nov 5 22:00:12 2025 GMT
Subject: CN=7ff57d0091d322a5a1a196cb74668e4af47c0160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f5:3a:a9:2d:d6:89:4c:a4:ba:15:e5:12:66:
53:fd:e9:f1:c0:58:13:b5:04:49:56:9c:45:0a:58:
04:a2:16:b1:12:99:f9:34:b5:cd:b5:9d:d2:ad:5e:
ab:0e:c5:e5:d9:28:d9:b2:0c:24:63:f8:0d:56:e7:
e5:69:99:ae:5a:b5:6c:3e:e4:3d:fb:ea:9e:cf:fc:
7c:f3:8e:bf:99:e6:9e:98:aa:94:fc:ee:fb:48:d1:
16:6d:af:9e:17:b6:ab:81:16:fe:2b:a8:9e:27:eb:
af:b0:4d:6d:99:49:12:b0:ec:af:da:0d:db:7b:16:
8d:dd:be:14:e2:0a:9c:a1:c5:3d:a0:3d:c5:57:27:
d5:1b:3d:f0:b1:79:1f:9d:a7:22:28:45:9d:f4:19:
d1:cd:34:81:7b:c4:ca:dd:1b:3e:ad:f9:88:0e:33:
61:cd:b7:d6:a0:0d:28:42:82:36:6d:0e:88:62:9a:
a7:30:05:a4:31:3d:67:5e:aa:1f:76:d5:75:ce:de:
75:46:b2:f1:8b:86:81:92:31:11:26:7c:34:f9:84:
2c:96:12:67:0a:fd:98:22:e4:92:48:4a:12:f9:5d:
9d:41:46:d3:a8:4b:d3:8b:59:14:4a:37:0b:5e:a6:
bd:2e:1c:de:86:ca:8e:86:4b:84:c2:ad:4f:ad:c2:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F5:7D:00:91:D3:22:A5:A1:A1:96:CB:74:66:8E:4A:F4:7C:01:60
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b0:15:c5:94:fc:9d:2d:97:fe:1c:69:f1:57:41:08:1d:fc:
4d:26:52:db:46:60:c0:94:eb:74:16:6d:45:82:8a:42:2f:54:
34:03:94:4f:f7:71:c4:71:b2:4b:8c:a4:8f:f5:1c:d6:a3:b6:
55:7b:f6:8d:01:12:d7:57:50:da:30:cf:79:ac:c4:00:49:76:
cb:f8:9a:7e:6a:43:d3:b0:21:57:81:67:f6:06:64:4a:b8:9a:
1e:71:9b:8c:2b:ae:1c:55:7f:be:fa:95:b5:66:76:91:71:fd:
aa:b3:a1:37:a6:1e:97:e6:21:98:2e:2c:03:11:7a:49:4f:3a:
8c:12:a2:9f:6e:c5:77:b1:d7:74:06:25:1e:b1:b8:70:33:c8:
2e:fc:ab:27:dc:fc:83:e7:fd:27:14:5e:27:3c:14:ae:d5:18:
b7:30:0d:ee:82:d6:e6:53:c2:8a:30:3c:d8:21:cd:91:41:36:
2f:45:e9:86:78:77:bc:66:e9:52:68:ef:b1:f8:55:05:c1:9e:
fb:b1:a2:b1:df:2e:a1:b0:fb:0f:01:b0:b3:62:4f:a5:62:ca:
39:b1:bf:22:1d:ec:ed:ff:a3:ab:6e:6e:1d:f4:2e:07:7d:fc:
bd:cb:80:2d:a5:c8:73:bb:ea:ee:8d:a0:39:0d:4f:98:df:5e:
28:d9:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:51 2025 by rpki-client