Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: Tb+im2TXCzhdyKO9hrWUKArZew3ASg2CWPZf9gpf0tM=
Subject key identifier: A0:01:1F:9A:36:E9:78:67:10:B0:B0:A6:D2:A6:87:DE:E8:D0:45:26
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 0199FDD99EDAFAB7D1F0E227191325873C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0BC7
Signing time: Sun 19 Oct 2025 19:02:01 +0000
Manifest this update: Sun 19 Oct 2025 19:02:01 +0000
Manifest next update: Mon 20 Oct 2025 19:02:01 +0000
Files and hashes: 1: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (hash: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: FHJblF7F0WsOVcXAMDjYx9164I43b5vr0iV6G7saXWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:9e:da:fa:b7:d1:f0:e2:27:19:13:25:87:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Oct 19 19:02:01 2025 GMT
Not After : Oct 20 19:02:01 2025 GMT
Subject: CN=a0011f9a36e9786710b0b0a6d2a687dee8d04526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:df:0b:f4:29:98:a7:40:d1:c5:f6:9a:33:
c8:76:83:d6:0b:2c:8a:98:fd:e8:23:03:2a:c8:36:
9a:fd:64:41:26:fb:1c:65:c7:e5:dc:36:1d:dd:30:
c3:31:9d:4d:86:92:78:0f:23:56:6a:8e:12:b5:79:
c7:1e:8d:b4:e1:be:69:cb:2f:75:e5:03:e0:cc:27:
c3:cc:c2:32:57:e6:12:31:59:0d:c2:e8:ce:41:8f:
95:2c:55:ec:9a:9f:22:72:80:82:b2:b2:be:4d:56:
bf:46:d0:16:96:5b:c7:24:9d:96:66:da:a3:41:9d:
ea:ca:69:a7:49:f9:85:99:ac:cc:35:f0:b2:04:72:
c4:8d:7b:c6:1f:7b:06:73:62:73:ad:b9:98:2d:59:
74:36:45:e6:fb:ac:1a:c1:30:8f:86:5f:53:e4:ba:
45:61:01:b3:a4:d3:6a:3c:8b:e5:d8:bd:97:99:bc:
ca:27:c4:0c:d5:8b:96:80:b5:65:14:b1:b3:d2:42:
d7:06:58:b2:f2:74:d8:49:d2:9a:85:7e:95:00:c6:
b8:7d:f8:a8:11:76:3b:01:66:40:a3:7d:43:fd:a7:
cf:09:3c:18:a0:df:b0:04:ef:4b:7c:b0:ed:43:d0:
04:30:d4:5f:ab:13:72:54:3f:8c:34:3f:aa:3c:0e:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:1F:9A:36:E9:78:67:10:B0:B0:A6:D2:A6:87:DE:E8:D0:45:26
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bc:0c:95:91:6f:1e:db:16:f5:80:d7:a4:34:9a:01:61:32:
d3:43:88:65:51:42:76:e8:48:ca:d6:a7:ef:15:aa:5c:b3:e6:
24:c0:f1:51:20:c6:34:2d:ce:7f:b9:5c:6d:70:62:5a:2b:c2:
0f:80:88:8a:9b:e7:af:67:5e:53:73:df:66:9e:9a:65:c5:4e:
17:24:2e:a3:58:b5:96:d9:0b:3e:af:89:f8:e7:63:70:30:8d:
b4:06:6c:4e:1f:d9:3b:80:79:5b:26:c2:1f:84:e5:dc:49:dc:
41:4e:b7:f0:a2:29:49:30:d4:50:93:06:ee:0a:fb:5b:ee:40:
69:f5:97:ee:f7:0b:32:b6:cb:27:21:ef:af:a1:9e:ac:fd:18:
c5:c6:32:23:aa:c0:a6:aa:83:6c:88:f8:90:38:85:36:88:95:
8e:34:91:3d:65:12:60:f3:56:26:71:f7:9a:91:82:ac:40:cb:
9c:ea:1f:e5:2f:ac:86:5e:86:4b:bf:f3:45:56:c4:3c:6c:08:
d4:87:c2:16:bc:98:45:19:df:01:9f:d6:65:e9:8c:7e:2c:0d:
db:ac:6d:ba:14:56:d4:62:82:2d:18:95:19:7f:ac:81:aa:03:
0c:e6:9f:fc:41:5e:68:6a:94:61:2a:9d:4c:10:30:71:ee:94:
b9:bb:65:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Z7a+rfR8OInGRMlhzwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGNmOWY2ZDAzNGY0Njc2MGY0ZjU5YjE3MzlkZTEyN2I4
YWRmZjMwHhcNMjUxMDE5MTkwMjAxWhcNMjUxMDIwMTkwMjAxWjAzMTEwLwYDVQQD
EyhhMDAxMWY5YTM2ZTk3ODY3MTBiMGIwYTZkMmE2ODdkZWU4ZDA0NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJLfC/QpmKdA0cX2mjPIdoPWCyyK
mP3oIwMqyDaa/WRBJvscZcfl3DYd3TDDMZ1NhpJ4DyNWao4StXnHHo204b5pyy91
5QPgzCfDzMIyV+YSMVkNwujOQY+VLFXsmp8icoCCsrK+TVa/RtAWllvHJJ2WZtqj
QZ3qymmnSfmFmazMNfCyBHLEjXvGH3sGc2JzrbmYLVl0NkXm+6wawTCPhl9T5LpF
YQGzpNNqPIvl2L2XmbzKJ8QM1YuWgLVlFLGz0kLXBliy8nTYSdKahX6VAMa4ffio
EXY7AWZAo31D/afPCTwYoN+wBO9LfLDtQ9AEMNRfqxNyVD+MND+qPA6kHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKABH5o26XhnELCwptKmh97o0EUmMB8GA1UdIwQY
MBaAFLJM+fbQNPRnYPT1mxc53hJ7it/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMt
OTk1YzM2OWRhNjcyLzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMtOTk1YzM2OWRhNjcy
LzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLwMlZFv
HtsW9YDXpDSaAWEy00OIZVFCduhIytan7xWqXLPmJMDxUSDGNC3Of7lcbXBiWivC
D4CIipvnr2deU3PfZp6aZcVOFyQuo1i1ltkLPq+J+OdjcDCNtAZsTh/ZO4B5WybC
H4Tl3EncQU638KIpSTDUUJMG7gr7W+5AafWX7vcLMrbLJyHvr6GerP0YxcYyI6rA
pqqDbIj4kDiFNoiVjjSRPWUSYPNWJnH3mpGCrEDLnOof5S+shl6GS7/zRVbEPGwI
1IfCFryYRRnfAZ/WZemMfiwN26xtuhRW1GKCLRiVGX+sgaoDDOaf/EFeaGqUYSqd
TBAwce6Uubtl9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:25 2025 by rpki-client