Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier: UnH5ATWCzKLfKn4WaoNy9sF/07t+7SctJkl+pmf2rvg=
Subject key identifier: A1:F0:97:1E:FC:02:9D:BE:71:B2:56:D8:67:42:CF:3D:E3:50:E3:D2
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial: 0198D4726D0A6A1E76B664B4033F12A3C2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:05 +0000
Manifest this update: Sat 23 Aug 2025 01:02:05 +0000
Manifest next update: Sun 24 Aug 2025 01:02:05 +0000
Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=)
2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: j6kivQIF9yKmBL2ufFsYkcrPAgJt3fbdug0qqTG0hso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6d:0a:6a:1e:76:b6:64:b4:03:3f:12:a3:c2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
Validity
Not Before: Aug 23 01:02:05 2025 GMT
Not After : Aug 24 01:02:05 2025 GMT
Subject: CN=a1f0971efc029dbe71b256d86742cf3de350e3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:01:d5:02:03:cf:9d:9b:d3:ad:22:9a:5a:
95:03:21:a0:3b:14:61:d1:eb:4a:44:cd:74:01:8a:
f5:75:f8:8d:35:da:f6:c0:41:b9:9e:51:63:20:23:
37:ac:dd:41:9c:2b:0e:b2:cb:26:43:8a:4b:c5:47:
93:9c:89:96:0d:87:4a:9a:14:e8:34:48:da:18:da:
94:a8:f4:55:36:b3:d4:ad:e3:a2:fd:98:20:68:b6:
f6:71:89:d9:a0:95:8e:78:4a:40:b5:59:8e:b4:4b:
10:b9:94:46:54:d1:f6:04:59:f7:b1:13:94:e4:49:
94:97:4d:9b:0e:ad:32:c8:05:ab:fe:f8:80:19:ff:
5d:a7:3e:a7:b7:e1:12:7c:3e:d9:ab:24:a6:c9:40:
72:c3:cd:cd:f2:9c:7c:5c:fb:d4:1d:da:28:6d:b6:
75:ed:ee:c6:73:76:a4:29:e0:14:d3:88:5a:88:94:
5c:25:e4:d9:fd:5e:d7:b6:c1:53:6d:09:62:41:3c:
94:1a:5b:dd:dc:8d:9c:96:22:f9:3f:d0:d8:fa:3b:
29:c6:de:00:9e:a9:f2:7d:fe:04:1a:ba:74:75:23:
76:42:80:7d:65:89:81:ae:7d:f7:53:2a:4e:6a:0e:
7b:bc:5d:88:8e:2e:c7:0b:07:5d:d0:64:80:82:32:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:97:1E:FC:02:9D:BE:71:B2:56:D8:67:42:CF:3D:E3:50:E3:D2
X509v3 Authority Key Identifier:
keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:51:fc:ce:57:f3:8f:29:de:a9:a0:e2:e4:95:b3:86:38:
e4:2f:2d:65:fa:3c:f1:08:f8:38:1a:3b:9e:30:31:c8:66:a5:
e6:4f:19:b6:e2:da:f6:da:07:86:57:26:73:89:2c:9e:22:2e:
9c:79:f1:5b:5f:26:05:c7:15:c4:b9:bb:19:b3:15:d4:33:42:
87:57:15:45:b7:5c:69:51:fe:d5:b9:7e:b8:3f:de:3a:e7:69:
75:c1:b9:40:c6:1a:9d:8f:9e:c7:78:40:a9:8c:6f:f3:27:07:
27:5e:13:21:30:ba:cc:9b:15:34:72:68:fe:e6:0c:35:06:cb:
fc:ed:82:c2:9e:0f:9c:22:8d:36:6f:08:6d:3d:b3:5d:29:07:
58:34:ea:e0:a2:71:a6:b5:85:d8:7a:44:a4:79:68:f3:2f:c2:
a8:81:66:40:0a:0d:95:ed:b9:66:a6:95:95:fb:7f:e8:49:c8:
64:58:c4:73:ad:61:20:00:d4:7b:77:7c:8b:0b:24:d5:b1:36:
91:4b:5a:09:74:09:65:fc:07:02:b3:93:ad:af:80:4c:83:92:
8d:ec:9e:f1:8d:e6:c9:71:58:97:47:65:fb:e7:bb:a7:b2:ed:
d2:1f:b0:41:24:dd:b1:4a:0f:4a:7f:64:4e:51:5b:e0:bc:18:
31:0e:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:56 2025 by rpki-client