
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier: 2toYdASJWr1NsBVGLPKmtzJmSkyA2YXZHHG3Q5SjsWM=
Subject key identifier: 80:C0:C3:0A:30:09:2B:77:47:B9:CE:75:E1:D5:65:89:9F:47:13:C5
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 0199FC8FA55926C938AD0B4D16B75FB0D1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=)
2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: xaSVkny3XkPBc7Oi5yze6sCwhJUB1bIN+j/kfXIkaR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a5:59:26:c9:38:ad:0b:4d:16:b7:5f:b0:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=80c0c30a30092b7747b9ce75e1d565899f4713c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:67:e1:ce:35:d9:6f:c9:4c:1c:0e:ac:1c:
43:57:f6:17:4a:6a:38:e7:ee:81:15:91:78:96:6a:
b9:2a:39:87:4c:63:0e:3b:a0:fd:ec:11:95:04:83:
03:29:ff:c6:6d:59:41:2a:ca:84:6a:7f:38:d1:91:
e7:6e:ff:0c:f9:48:ee:d3:1a:c4:ab:6c:2a:c6:65:
4b:9c:c8:c7:89:da:28:b2:53:16:f7:b5:50:db:1e:
3b:80:47:c5:cc:75:ff:52:2b:bb:3c:c1:09:7c:18:
f6:b4:63:6d:bd:96:f6:b5:2f:09:89:50:4b:87:a3:
5e:c9:a9:40:34:79:d4:ff:90:ab:78:a1:80:64:c1:
e8:63:ca:dd:16:d5:ec:f8:38:a3:6c:c2:c2:55:b4:
0c:21:bf:95:8f:12:bf:59:72:d1:88:d2:65:99:f8:
f6:40:50:03:0b:28:91:aa:3e:10:39:4e:be:0e:df:
1d:74:7b:1c:e2:ea:88:41:66:9a:86:b3:7b:66:81:
f5:a8:95:a0:2f:bd:58:e7:0f:9e:83:b8:cb:a4:97:
63:ad:43:b0:94:1a:73:4d:e8:c1:c0:c8:11:06:6d:
14:a6:66:26:52:22:a0:de:4e:4d:6e:43:29:45:c9:
6b:5d:0d:4e:d3:4b:af:f7:1b:8c:7e:db:46:19:f4:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:C3:0A:30:09:2B:77:47:B9:CE:75:E1:D5:65:89:9F:47:13:C5
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3f:e0:13:ce:ae:59:51:f7:dc:ef:b3:35:ee:86:ca:6b:17:
06:36:68:45:e8:a8:28:2e:28:e2:ac:4e:ed:68:29:02:c4:10:
cc:71:5d:75:49:a8:16:e2:04:eb:0a:49:f4:a2:e4:85:78:c0:
0c:61:79:c0:74:58:c5:43:da:5a:05:da:ea:33:39:d8:a3:83:
ef:4a:a1:20:63:ab:e1:1c:26:c5:80:70:56:53:82:ec:de:85:
e9:e4:07:82:e0:e1:c7:1f:c6:7b:4d:49:ba:b3:0a:6e:ca:0b:
ad:dd:13:55:5e:de:09:d3:85:c2:20:d1:2b:ef:55:d9:e1:10:
cb:a8:63:e7:69:71:51:23:ef:ce:0d:ed:1a:12:8e:4f:40:af:
3e:c2:9e:0d:a2:be:c8:b8:21:3c:ca:7e:e9:66:26:fb:06:94:
c5:db:d5:42:23:69:b0:1f:bc:b5:55:0d:e7:76:91:6c:52:5f:
f2:ce:41:0b:ea:9c:40:32:2a:d0:1e:3f:25:17:e6:c3:fc:c0:
90:3c:42:e5:ed:51:8d:ce:01:01:af:a3:43:b4:e6:00:7b:d4:
65:11:80:aa:b2:be:50:c1:49:36:96:60:7d:1c:9c:5f:1e:11:
4e:2c:12:d8:ac:77:c0:e1:50:7d:b8:aa:e1:7d:36:bf:50:08:
48:1f:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:28 2025 by rpki-client