Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: qyl9iSUWmfrspzTXZefkIvRiyjV2O4aIq/03nT+sO6o=
Subject key identifier: B6:A7:B8:BE:7A:EC:5C:CE:C2:14:BA:22:FB:81:2C:C8:F2:2C:56:56
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 0199FDD9323F6E6E29E06725DD954E68C05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 19:01:33 +0000
Manifest this update: Sun 19 Oct 2025 19:01:33 +0000
Manifest next update: Mon 20 Oct 2025 19:01:33 +0000
Files and hashes: 1: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (hash: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: pkXV5PNUAHoEbKoNo+vbk0+3qQV8hLnyicfro3xtrwo=)
3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:32:3f:6e:6e:29:e0:67:25:dd:95:4e:68:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Oct 19 19:01:33 2025 GMT
Not After : Oct 20 19:01:33 2025 GMT
Subject: CN=b6a7b8be7aec5ccec214ba22fb812cc8f22c5656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:2b:94:3b:65:8b:57:8f:16:9d:6e:d0:3e:
fe:65:8c:bd:3f:0a:4a:26:ea:0a:48:f2:7e:c3:e0:
bc:fb:03:ad:20:e9:62:02:cf:a1:71:96:04:4c:ae:
9b:76:87:52:2b:12:c3:68:48:d6:f5:2f:7c:16:14:
06:92:f1:3c:6d:e8:ba:55:22:65:a7:2b:00:45:92:
ce:2c:b9:8f:f2:b9:e9:58:17:34:23:55:3b:0a:62:
7d:23:61:6c:58:08:e8:c2:b9:ca:8b:b8:88:3e:0d:
c5:dc:19:08:b2:67:f3:59:c6:79:30:d2:be:e6:5b:
80:66:b9:c2:d7:b4:3b:30:1c:e1:95:9c:5e:5c:9c:
cb:59:16:12:10:07:64:b8:cf:48:66:06:2a:a8:21:
20:e8:9a:17:b0:5c:32:b8:36:a8:61:d3:5c:a5:bb:
4d:c9:2e:d7:ae:f3:26:ed:24:65:42:ad:b4:52:8f:
6f:b0:53:39:bd:8c:f0:88:d2:1d:69:06:4f:8d:fc:
9d:1f:28:1e:fd:51:9e:b9:d2:78:fa:b5:d9:7d:14:
47:57:96:4c:bd:45:81:7b:b7:e7:4a:28:a7:d9:1f:
6b:f9:b5:0f:da:bc:25:63:22:6a:88:b5:5d:4c:30:
77:77:60:f9:89:e0:bf:2c:74:74:a0:81:c2:cd:ca:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A7:B8:BE:7A:EC:5C:CE:C2:14:BA:22:FB:81:2C:C8:F2:2C:56:56
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ce:49:a6:2f:bf:f6:08:48:76:4a:cf:07:cd:9f:66:b1:f5:
90:07:9a:dc:c4:88:bc:38:0d:35:76:f9:8b:e4:d5:e7:45:9b:
31:ce:b9:f2:9c:b6:6b:33:b3:a8:7c:be:e5:62:8c:6c:7c:86:
5c:8e:f4:4d:10:97:b3:4a:71:11:8a:de:11:01:85:51:a0:5b:
57:f7:8f:18:1b:15:92:d9:6d:b5:8e:8d:7c:da:c9:f4:af:04:
77:4c:36:21:ab:cc:22:e8:71:fb:b6:97:e4:96:98:4f:40:ed:
37:ce:8a:1d:40:47:68:d2:99:d0:15:f5:66:6f:ab:27:7e:dc:
80:0a:ff:08:9a:35:8f:81:b6:52:a5:4e:4c:28:4e:37:4d:67:
7b:78:e0:a7:99:6e:f6:01:03:a9:e0:17:e4:41:1f:07:bd:1b:
1f:19:67:88:8d:46:67:85:c2:82:73:36:8d:33:67:a9:58:b9:
40:47:bb:9a:3b:3d:25:6e:d4:3a:7f:f5:b2:65:4d:67:50:88:
c8:41:39:3b:cf:e1:18:69:5c:ce:0f:b1:fc:f4:07:26:55:47:
3c:a8:f4:0b:e0:83:8c:51:69:8a:ea:45:da:4f:83:f9:a8:af:
f9:54:95:06:51:64:fa:a6:73:a8:5a:6f:87:cf:ff:2e:62:69:
58:1e:bc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:03 2025 by rpki-client