Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier: 4SW+EeiaECplNXohPFoT8D6DIS8/++UIexwjdWbSotQ=
Subject key identifier: 2D:38:C3:55:37:01:B0:C4:6A:13:FB:9E:E1:E9:C2:3A:8E:F6:69:2E
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial: 0197B6A1671362ADD045217232B51B5CFCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=)
2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: mJLhOcw2Z+pCF0FShFpZnc7kkdhwuAu1Wsr16cSKRcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:67:13:62:ad:d0:45:21:72:32:b5:1b:5c:fc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=2d38c3553701b0c46a13fb9ee1e9c23a8ef6692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:b4:d5:a8:20:b4:f2:35:cb:d4:66:0d:d6:
44:00:a2:08:7a:e1:94:81:ad:3e:6f:56:e4:a0:9f:
5b:31:dc:74:88:61:6e:ef:38:fc:43:5b:11:9a:d4:
95:51:6a:f4:e8:8c:61:a9:ce:e2:04:44:29:44:07:
d8:3a:22:d5:5b:3b:00:36:8d:5a:48:61:74:ee:97:
c3:12:ac:60:65:7c:08:33:57:b8:b3:da:35:f9:05:
a5:b2:b9:6d:8c:19:c2:77:a1:86:85:78:48:47:6b:
4f:aa:4d:1f:c3:57:a0:ee:e3:4c:ac:38:17:ea:6c:
1c:2a:c5:65:8b:9e:98:59:db:f6:f9:dd:30:95:c6:
0a:96:12:6c:4d:a7:c2:f0:90:47:c2:18:7b:9a:4c:
1e:44:4f:ae:7f:2f:cc:51:cc:9a:40:ab:83:24:9e:
cb:2d:65:67:d0:53:d1:3f:fb:2e:16:a7:09:96:65:
c9:7c:0d:eb:28:84:50:28:1f:aa:e3:28:3b:58:0f:
b3:8f:9b:fb:58:70:17:df:35:be:41:af:9b:f3:c3:
8d:d2:a1:ed:84:13:d9:f5:f7:9f:1d:02:31:b4:b4:
4e:0c:6b:35:f8:a3:80:cf:20:ff:33:b8:9c:e0:ce:
07:e1:90:01:8b:00:5e:f7:f0:7c:24:33:3d:56:8e:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:C3:55:37:01:B0:C4:6A:13:FB:9E:E1:E9:C2:3A:8E:F6:69:2E
X509v3 Authority Key Identifier:
keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4e:cd:2e:8a:b0:cb:c4:45:aa:e5:53:3c:e2:d5:3a:46:dd:
23:db:83:86:41:3d:06:ba:76:bd:8e:c6:89:2d:55:60:06:fe:
64:f2:17:57:2c:94:c8:17:9f:27:dc:3f:48:83:93:a3:7b:c9:
e1:11:88:be:67:1f:c1:59:6a:fe:5a:b8:a7:50:da:35:29:07:
a4:f7:3f:68:da:79:e8:f4:5e:60:6c:2f:5e:e5:f9:80:bc:7b:
87:01:20:e0:52:21:b7:36:b0:75:b4:54:78:bd:ab:de:a8:7b:
e4:f5:2b:d9:3d:bf:ca:37:ec:2b:d4:26:47:b0:85:85:cc:62:
33:40:b5:2b:ca:c8:ba:30:ba:eb:24:ee:68:0f:eb:01:12:56:
6b:2b:15:ec:93:41:c2:87:d5:2e:fb:a1:42:82:fc:c9:8e:17:
97:6e:55:59:83:e6:1d:be:51:89:33:ac:0f:55:e8:55:b8:48:
2f:43:5f:de:52:33:e4:6e:2a:51:d1:a6:f1:f1:7a:fe:3c:3f:
44:52:01:54:a5:16:99:56:48:13:78:c1:1b:69:aa:4f:88:31:
ec:f4:53:66:01:1f:a6:97:cb:e6:66:e3:1e:16:1a:ce:d3:2c:
97:0f:61:03:ff:e1:1a:bd:22:37:ee:db:82:71:d1:81:07:fc:
13:ec:26:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWcTYq3QRSFyMrUbXPz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDRkMjcxODhmZTUyNmJkNzI2MzY3MzgxOTVkMWViN2Y2
MDYzMzUwHhcNMjUwNjI4MTMwMjAwWhcNMjUwNjI5MTMwMjAwWjAzMTEwLwYDVQQD
EygyZDM4YzM1NTM3MDFiMGM0NmExM2ZiOWVlMWU5YzIzYThlZjY2OTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cm01aggtPI1y9RmDdZEAKIIeuGU
ga0+b1bkoJ9bMdx0iGFu7zj8Q1sRmtSVUWr06Ixhqc7iBEQpRAfYOiLVWzsANo1a
SGF07pfDEqxgZXwIM1e4s9o1+QWlsrltjBnCd6GGhXhIR2tPqk0fw1eg7uNMrDgX
6mwcKsVli56YWdv2+d0wlcYKlhJsTafC8JBHwhh7mkweRE+ufy/MUcyaQKuDJJ7L
LWVn0FPRP/suFqcJlmXJfA3rKIRQKB+q4yg7WA+zj5v7WHAX3zW+Qa+b88ON0qHt
hBPZ9fefHQIxtLRODGs1+KOAzyD/M7ic4M4H4ZABiwBe9/B8JDM9Vo6RowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC04w1U3AbDEahP7nuHpwjqO9mkuMB8GA1UdIwQY
MBaAFLJE0nGI/lJr1yY2c4GV0et/YGM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEt
NGQwMGQ2MDMyYWZlLzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEtNGQwMGQ2MDMyYWZl
LzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE7NLoqw
y8RFquVTPOLVOkbdI9uDhkE9Brp2vY7GiS1VYAb+ZPIXVyyUyBefJ9w/SIOTo3vJ
4RGIvmcfwVlq/lq4p1DaNSkHpPc/aNp56PReYGwvXuX5gLx7hwEg4FIhtzawdbRU
eL2r3qh75PUr2T2/yjfsK9QmR7CFhcxiM0C1K8rIujC66yTuaA/rARJWaysV7JNB
wofVLvuhQoL8yY4Xl25VWYPmHb5RiTOsD1XoVbhIL0Nf3lIz5G4qUdGm8fF6/jw/
RFIBVKUWmVZIE3jBG2mqT4gx7PRTZgEfppfL5mbjHhYaztMslw9hA//hGr0iN+7b
gnHRgQf8E+wmcA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:13 2025 by rpki-client