Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: cTWgpd+Pb3wZYZDZtQAQtPj9admeH1eJtrY8XBVE2QA=
Subject key identifier: 97:44:09:FB:1E:DA:0D:3B:52:F4:55:57:76:C3:AF:B1:51:D1:64:4F
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 019873E34AEA31F4843245E8C08C1A34F8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:12 +0000
Manifest this update: Mon 04 Aug 2025 07:02:12 +0000
Manifest next update: Tue 05 Aug 2025 07:02:12 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: ykOfgsjG/ZFG20bEEE/YqRlUvmlQoXP7lotwuXvUpqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4a:ea:31:f4:84:32:45:e8:c0:8c:1a:34:f8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Aug 4 07:02:12 2025 GMT
Not After : Aug 5 07:02:12 2025 GMT
Subject: CN=974409fb1eda0d3b52f4555776c3afb151d1644f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:71:a2:67:cb:a3:c3:a9:00:b8:04:5a:c0:
0a:7f:0c:b1:85:92:3d:fb:d8:2a:bb:f0:60:4a:b7:
c7:d7:eb:a8:54:94:06:91:f0:31:32:f6:70:8a:ed:
40:4f:1b:a8:b9:34:da:6a:88:9e:3c:76:ce:1b:c4:
16:9e:e6:a6:45:0f:c5:5d:66:4a:2f:f5:f6:f0:29:
18:35:19:c5:6c:3d:a9:a0:c8:60:a2:09:a3:22:01:
81:be:37:17:4e:b8:03:2d:c4:d3:90:a3:7e:90:52:
64:42:54:d2:d5:12:48:5e:f4:21:e8:9f:92:02:a6:
90:53:32:c8:23:12:66:bf:5b:32:75:1b:25:8e:17:
66:7c:b7:9b:d7:d8:e7:1f:a8:41:99:be:41:58:27:
53:46:14:de:9d:c5:5f:3b:23:28:82:ce:a1:cd:42:
7d:cf:e1:c4:ff:92:29:2c:cb:07:e8:82:55:6b:b3:
bf:5a:0d:13:f8:e3:47:88:39:0f:96:95:f5:a9:4c:
c5:c3:27:2e:ce:d6:72:0b:71:0e:f9:f2:98:ad:ff:
ea:09:b8:26:5a:80:52:9b:ee:6c:78:f2:67:72:b9:
7a:22:7e:f8:78:3d:8b:ac:5e:e8:52:0e:27:80:64:
a8:33:78:67:d6:d5:22:61:66:76:88:ee:66:8a:10:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:44:09:FB:1E:DA:0D:3B:52:F4:55:57:76:C3:AF:B1:51:D1:64:4F
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e1:d3:15:01:01:ec:ab:15:00:e7:ac:a2:77:7d:8c:f4:4a:
4d:e5:63:17:05:13:fd:51:ac:7d:89:74:66:7d:1f:c5:c6:e6:
ce:98:33:8f:d6:ab:9a:83:c8:14:78:a3:fc:fb:b3:69:fc:c3:
06:79:36:0a:94:bc:98:39:b0:86:7a:07:0b:1f:c6:5f:a1:75:
bb:44:b7:8e:9d:e2:66:04:0b:a1:c4:ca:55:6e:61:de:fa:75:
f6:f3:8b:82:0c:86:62:62:f0:c0:04:39:66:34:93:de:33:a3:
95:10:13:f1:a6:60:de:b5:4d:c2:d3:fe:4b:4f:71:0f:5c:d5:
fd:9a:68:c0:d8:f3:79:13:95:29:44:0f:8b:71:1c:5d:d4:dc:
f7:f1:22:e9:1f:e2:6b:ae:f4:a2:be:86:bb:57:fa:ef:73:fe:
97:51:77:10:7a:12:2e:13:48:ae:09:fc:64:54:e9:82:8e:60:
1c:24:bd:91:49:74:ef:ec:56:c2:17:10:9a:5e:43:d8:cd:15:
ec:5e:1d:36:71:2b:7a:c7:57:5b:fa:93:68:b3:5c:56:4a:c6:
ca:37:5e:52:98:fd:6b:3e:dc:e2:1d:74:e4:7e:a3:93:c8:bc:
83:ce:45:c6:15:40:12:fc:00:17:aa:6c:7b:2b:31:2e:c9:57:
21:c8:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:48 2025 by rpki-client