Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: WJoozwSosS2dqm4WJHyErNlWNLjsIbTYIkRaf3KTx6A=
Subject key identifier: 6F:FC:37:20:53:19:B0:50:BF:31:FB:66:B9:A2:BB:71:13:87:AF:DE
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 019769608DE4EB049375C08E0DAA6787A2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 13:00:24 +0000
Manifest this update: Fri 13 Jun 2025 13:00:24 +0000
Manifest next update: Sat 14 Jun 2025 13:00:24 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: +bmyU4TU3A7Y75dM8DaOcf/07p0N6oLQpaHrr4SeOHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:8d:e4:eb:04:93:75:c0:8e:0d:aa:67:87:a2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Jun 13 13:00:24 2025 GMT
Not After : Jun 14 13:00:24 2025 GMT
Subject: CN=6ffc37205319b050bf31fb66b9a2bb711387afde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:5e:be:3d:6c:30:27:92:af:49:88:04:9c:
e2:4d:d7:05:91:4e:31:9f:24:83:54:0c:1f:bd:d5:
7c:77:8b:45:ed:b0:22:6d:a3:38:5e:e1:01:5d:61:
fa:74:ea:19:47:87:04:95:30:ab:b7:c8:45:33:11:
ff:88:41:aa:e4:e2:5e:8b:90:ae:0c:42:cb:cd:a3:
71:2d:68:a0:fe:24:72:43:a2:35:e3:00:f8:58:9f:
bd:de:e9:a0:af:0d:4f:e4:e0:1e:45:50:75:3f:48:
c8:10:81:32:37:85:5d:e4:24:fe:9b:bb:3e:8a:19:
f6:59:df:4b:9d:93:a9:8d:7c:05:a0:9a:4b:45:10:
88:93:18:b8:3a:95:67:ec:93:9f:43:46:36:7c:7b:
80:18:1e:77:3a:42:65:dd:82:3c:0f:53:90:48:fe:
84:fe:2e:44:3c:f6:68:1e:98:58:b9:60:2d:ad:96:
34:56:9a:94:67:e5:c3:18:75:e4:f9:08:17:68:51:
0e:54:98:67:d0:ab:7c:11:a9:ab:62:85:37:43:89:
94:28:14:bb:9a:0b:e0:e9:b8:2f:9a:72:57:c6:aa:
71:ff:e5:2a:ea:31:d1:ea:fc:27:e4:6b:69:ee:2e:
6a:a3:28:c6:f9:f1:07:38:59:ad:60:82:c3:da:61:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:37:20:53:19:B0:50:BF:31:FB:66:B9:A2:BB:71:13:87:AF:DE
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f7:be:2f:d1:35:33:93:01:c0:c7:1f:87:7d:48:7d:de:e1:
90:8c:b2:11:30:64:ed:51:80:cb:86:ef:85:35:f0:9a:53:9b:
a5:4e:61:50:c2:f2:93:48:5c:40:3c:f7:44:81:fc:17:b2:17:
83:1e:29:86:f9:ae:f1:e4:43:91:cf:c8:ee:df:e6:a7:4c:89:
ca:9e:c1:2c:36:19:9f:8b:6c:60:a3:bc:60:3b:55:8d:e5:97:
71:6a:70:08:78:00:75:21:6f:b7:6d:d0:6f:42:98:be:eb:2f:
76:4a:e1:fd:b6:f1:7d:ed:fb:67:ff:22:4c:ec:0a:36:37:0b:
9a:19:48:47:bb:8a:ed:b0:ea:e3:9d:7a:7e:f2:8c:6d:57:01:
90:b9:d7:b2:03:7e:97:6c:f2:42:05:b5:a2:fa:c8:44:dd:91:
91:93:68:1a:93:df:eb:b7:23:5c:8d:a6:45:56:ea:52:84:45:
95:92:d2:7f:5e:2f:14:7e:f9:9a:86:4a:41:0e:00:a1:9c:96:
46:d5:25:41:0a:88:fc:c9:22:5f:73:c1:d9:70:fd:d6:12:49:
78:ea:fc:d2:5f:28:8e:4e:f9:11:5d:58:a4:72:d8:d3:15:19:
3c:f2:0c:97:a2:01:b8:bd:06:f0:49:9e:e0:06:45:74:66:d1:
cb:99:4f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:13 2025 by rpki-client