Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier: wHPlIUbKNcdIPV3io1mAwmbd04czRagVBelAb6xKJlg=
Subject key identifier: 09:20:A6:C5:EB:2D:B3:42:34:E3:5B:06:96:16:F3:6B:86:1B:1C:08
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 0199FF59C4EB0D2B02AE1711218968336A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number: 06C8
Signing time: Mon 20 Oct 2025 02:01:37 +0000
Manifest this update: Mon 20 Oct 2025 02:01:37 +0000
Manifest next update: Tue 21 Oct 2025 02:01:37 +0000
Files and hashes: 1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: rfVlildFF9iYPa9Ob7R17RGzHo4u+sgPIeQIeZeCZHQ=)
2: YWHB5SFom3PZ1H1nBp8hYONydPQ.roa (hash: vl5j8Bemgq1rdDQ2l7TbBx5NbkCDljfvRSq6QiMNiQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:c4:eb:0d:2b:02:ae:17:11:21:89:68:33:6a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: Oct 20 02:01:37 2025 GMT
Not After : Oct 21 02:01:37 2025 GMT
Subject: CN=0920a6c5eb2db34234e35b069616f36b861b1c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:02:31:08:f9:35:48:a9:71:fb:6c:05:33:
3d:92:42:05:a6:02:49:e9:e6:bd:8d:db:47:0e:ff:
33:28:b4:ac:ac:50:dd:81:cd:2d:c0:aa:b4:c7:e4:
97:cd:43:75:03:de:ff:41:e5:67:b1:7d:f6:aa:f9:
41:e2:49:d5:90:4c:af:65:2c:8b:4b:53:5e:16:d8:
b8:93:19:cb:30:5a:51:2f:a2:70:f9:a2:71:ca:f9:
58:09:bc:b8:8d:8e:13:75:d6:94:3a:e7:81:35:cc:
2d:cd:c2:9a:46:43:4e:00:73:5a:df:f7:3b:74:95:
29:22:08:46:0c:3e:4f:9a:68:53:cf:38:39:64:74:
eb:f5:10:ae:7d:c6:25:22:91:62:3b:9e:c7:51:ca:
96:48:78:0b:f8:8d:59:25:4d:d5:d7:b8:9e:58:3b:
5e:c9:ce:5e:07:93:5c:3d:4f:98:d1:3f:7f:8e:b4:
e8:97:d1:7c:0e:ca:ef:fb:08:4b:fb:a9:5c:4f:36:
23:65:ce:a5:be:66:17:0f:53:35:3e:90:a3:62:07:
36:1d:54:60:23:6e:ca:87:f5:bd:33:a0:44:a6:d8:
bd:7b:b1:a5:57:a5:54:81:79:b8:ec:98:d4:2e:8c:
3b:e7:f9:dc:38:42:91:0b:94:12:37:1b:58:40:fc:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:A6:C5:EB:2D:B3:42:34:E3:5B:06:96:16:F3:6B:86:1B:1C:08
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:8a:78:0d:90:6a:e4:8b:13:8f:f1:fd:68:ef:19:b7:f8:
d9:55:8a:ad:52:1d:6b:0a:97:8d:f6:5a:b5:9c:0e:bf:0c:5f:
fe:3c:8d:38:5b:e4:98:d6:59:56:f1:2c:52:bf:b2:a8:72:bb:
46:79:80:ad:c7:ac:df:4a:d7:a7:06:6b:02:a0:3c:1e:c9:95:
f8:56:5f:4c:c7:5e:93:37:7b:d7:98:81:50:be:48:70:af:c1:
7f:e9:83:c0:6b:1e:d5:ef:e2:64:fb:56:c2:ff:43:8c:92:a2:
52:b9:8c:31:42:04:93:a4:c5:02:92:c1:fb:01:a7:d0:20:53:
e7:e1:00:f6:2f:c1:ee:21:a0:09:8f:2c:0a:85:ea:4e:ee:ce:
64:02:f3:ee:26:da:6a:fd:d2:e2:c6:44:10:21:f0:7a:76:44:
aa:a3:1d:07:2a:64:40:4f:8f:68:de:07:b9:6b:d6:a6:2f:54:
49:a8:f7:31:3d:85:f7:a8:ec:4c:9b:fc:bc:d5:47:e1:42:b6:
25:11:5e:bc:b3:5b:1d:2b:89:b1:b5:5b:9c:fc:f6:d9:30:10:
33:bd:22:72:8f:08:49:d4:8b:46:cb:4e:5f:d7:45:ec:06:e7:
08:2a:c7:e3:46:ba:24:e0:c8:52:7f:e4:0e:31:90:21:34:af:
a7:a7:cf:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WcTrDSsCrhcRIYloM2oDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDZhZDhiNTEwY2Y1NTk0ODVlMzYxMTU1NWI4YjQzOWVm
NTMzYmIwHhcNMjUxMDIwMDIwMTM3WhcNMjUxMDIxMDIwMTM3WjAzMTEwLwYDVQQD
EygwOTIwYTZjNWViMmRiMzQyMzRlMzViMDY5NjE2ZjM2Yjg2MWIxYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o8CMQj5NUipcftsBTM9kkIFpgJJ
6ea9jdtHDv8zKLSsrFDdgc0twKq0x+SXzUN1A97/QeVnsX32qvlB4knVkEyvZSyL
S1NeFti4kxnLMFpRL6Jw+aJxyvlYCby4jY4TddaUOueBNcwtzcKaRkNOAHNa3/c7
dJUpIghGDD5PmmhTzzg5ZHTr9RCufcYlIpFiO57HUcqWSHgL+I1ZJU3V17ieWDte
yc5eB5NcPU+Y0T9/jrTol9F8Dsrv+whL+6lcTzYjZc6lvmYXD1M1PpCjYgc2HVRg
I27Kh/W9M6BEpti9e7GlV6VUgXm47JjULow75/ncOEKRC5QSNxtYQPyldQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkgpsXrLbNCNONbBpYW82uGGxwIMB8GA1UdIwQY
MBaAFEpGrYtRDPVZSF42EVVbi0Oe9TO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQt
ODQyNmFhMWE2ZDJmLzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQtODQyNmFhMWE2ZDJm
LzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2KKeA2Q
auSLE4/x/WjvGbf42VWKrVIdawqXjfZatZwOvwxf/jyNOFvkmNZZVvEsUr+yqHK7
RnmArces30rXpwZrAqA8HsmV+FZfTMdekzd715iBUL5IcK/Bf+mDwGse1e/iZPtW
wv9DjJKiUrmMMUIEk6TFApLB+wGn0CBT5+EA9i/B7iGgCY8sCoXqTu7OZALz7iba
av3S4sZEECHwenZEqqMdBypkQE+PaN4HuWvWpi9USaj3MT2F96jsTJv8vNVH4UK2
JRFevLNbHSuJsbVbnPz22TAQM70ico8ISdSLRstOX9dF7AbnCCrH40a6JODIUn/k
DjGQITSvp6fPDQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:30 2025 by rpki-client