Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: oEQjQQ9GNoRlIg2tpEttd7rwGbv7PIC0q0xbBeeqeeY=
Subject key identifier: 87:93:31:CC:68:B2:C2:64:5D:7A:F4:CD:DC:D1:54:79:2F:A8:8B:9E
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 0199FCC6320B8D31C62112D211B5E7898B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0E43
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: TNfEUzc+ypOm1q/eK/e6hu5FcfW2STF60W8RZGRyfNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:32:0b:8d:31:c6:21:12:d2:11:b5:e7:89:8b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=879331cc68b2c2645d7af4cddcd154792fa88b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:b8:87:fe:d1:89:30:d5:66:d4:1c:54:d3:
77:80:3a:93:e1:34:a7:a2:c9:d6:93:5f:ea:a1:56:
89:ce:7d:40:e4:7b:22:46:64:c8:ac:db:0a:cd:fb:
68:ae:40:d3:ba:b8:7f:fc:a7:51:80:46:1f:86:e4:
d2:37:60:79:86:a9:81:b8:a5:1d:b4:33:5c:a3:dd:
a5:07:56:fc:c4:88:71:91:03:3f:96:5f:a8:6a:1f:
1a:75:a3:f7:86:c4:00:17:67:f2:36:4f:99:73:2a:
f7:46:a6:d8:35:a5:b5:8a:30:27:ae:33:b0:7b:3d:
11:cb:07:59:68:09:11:08:d3:f7:3e:96:33:ee:88:
44:fc:c6:10:bd:6c:b0:8a:f9:46:40:41:31:29:2f:
47:0e:f6:d3:45:ee:21:53:0e:e6:f0:5f:2c:fb:ce:
ea:2b:a3:6e:24:89:5d:dd:01:11:34:03:5c:e3:4e:
a4:5f:85:ba:c8:a2:03:34:25:73:df:0f:a8:b5:13:
ba:9d:c6:a9:93:a0:f5:69:66:cc:9e:3d:8e:2b:0a:
e7:6d:1b:43:26:a4:97:7f:b0:7f:d8:89:9f:25:3a:
e6:02:7b:95:ba:82:47:f4:03:28:73:49:db:c0:d3:
c3:01:dd:06:e2:4f:00:ff:eb:f3:f6:3e:9d:8f:79:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:31:CC:68:B2:C2:64:5D:7A:F4:CD:DC:D1:54:79:2F:A8:8B:9E
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:72:4d:55:3d:8b:a4:23:08:31:c0:f2:3c:cd:b2:11:15:
a9:8b:ff:07:5a:c7:27:dc:6d:3c:a6:32:ac:63:b6:9a:91:e9:
24:75:8c:53:c3:46:1f:2c:ce:f5:a9:41:f3:ef:55:3b:1a:fc:
27:e8:6e:2a:d1:44:a5:8f:ba:8b:a7:59:92:11:29:30:fe:6b:
69:d4:b6:9b:88:0e:bb:7b:9a:e3:6b:47:56:68:9c:c0:12:fe:
a5:97:52:a9:b2:64:e8:56:94:8f:b0:c5:de:f4:5c:f1:dd:56:
fb:09:84:17:26:00:ea:32:c0:bb:9c:88:a4:42:56:aa:a0:f4:
be:fc:c0:7e:84:7c:59:52:6f:0c:1d:82:5d:06:64:46:da:d5:
cd:ef:02:9f:5d:76:c9:6b:7c:51:72:35:52:55:11:2f:00:7c:
e9:07:2d:2a:16:bc:07:61:07:3d:9f:90:a1:32:37:9f:28:be:
93:18:e7:30:9e:be:72:9e:8a:45:c5:8e:f6:15:83:c7:e3:98:
ca:a5:85:12:eb:d6:ae:e3:66:c4:ba:fe:be:92:61:b0:fb:f2:
6f:c9:a9:fc:14:4d:6a:d5:71:03:ce:3f:fa:68:32:0c:8b:90:
aa:b4:0a:ab:2d:06:17:be:48:dd:3e:9b:11:c0:d6:87:fa:95:
4f:fe:9f:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xjILjTHGIRLSEbXniYuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWZlZDdhNDcxZDdhYzM4NWUzYjkzNjVhNGU5NjAxMmEw
MWMwOTUwHhcNMjUxMDE5MTQwMTExWhcNMjUxMDIwMTQwMTExWjAzMTEwLwYDVQQD
Eyg4NzkzMzFjYzY4YjJjMjY0NWQ3YWY0Y2RkY2QxNTQ3OTJmYTg4YjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUq4h/7RiTDVZtQcVNN3gDqT4TSn
osnWk1/qoVaJzn1A5HsiRmTIrNsKzftorkDTurh//KdRgEYfhuTSN2B5hqmBuKUd
tDNco92lB1b8xIhxkQM/ll+oah8adaP3hsQAF2fyNk+Zcyr3RqbYNaW1ijAnrjOw
ez0RywdZaAkRCNP3PpYz7ohE/MYQvWywivlGQEExKS9HDvbTRe4hUw7m8F8s+87q
K6NuJIld3QERNANc406kX4W6yKIDNCVz3w+otRO6ncapk6D1aWbMnj2OKwrnbRtD
JqSXf7B/2ImfJTrmAnuVuoJH9AMoc0nbwNPDAd0G4k8A/+vz9j6dj3k18wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeTMcxossJkXXr0zdzRVHkvqIueMB8GA1UdIwQY
MBaAFLCv7XpHHXrDheO5NlpOlgEqAcCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMt
MzA0YTU0ZThjMjY0LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMtMzA0YTU0ZThjMjY0
LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzdyTVU9
i6QjCDHA8jzNshEVqYv/B1rHJ9xtPKYyrGO2mpHpJHWMU8NGHyzO9alB8+9VOxr8
J+huKtFEpY+6i6dZkhEpMP5radS2m4gOu3ua42tHVmicwBL+pZdSqbJk6FaUj7DF
3vRc8d1W+wmEFyYA6jLAu5yIpEJWqqD0vvzAfoR8WVJvDB2CXQZkRtrVze8Cn112
yWt8UXI1UlURLwB86QctKha8B2EHPZ+QoTI3nyi+kxjnMJ6+cp6KRcWO9hWDx+OY
yqWFEuvWruNmxLr+vpJhsPvyb8mp/BRNatVxA84/+mgyDIuQqrQKqy0GF75I3T6b
EcDWh/qVT/6ffQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:23 2025 by rpki-client