Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier: 44snOrF/a8cTL+SlPRxH33MhXa8Wny0/1cuTN1hMWJI=
Subject key identifier: CA:86:5B:F8:11:08:F2:DF:4D:61:A5:77:E1:66:34:D5:95:43:A7:83
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 0199FAA0B5C71FF098FAEEFC5CCC488EB9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number: 0EE0
Signing time: Sun 19 Oct 2025 04:01:00 +0000
Manifest this update: Sun 19 Oct 2025 04:01:00 +0000
Manifest next update: Mon 20 Oct 2025 04:01:00 +0000
Files and hashes: 1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: tyEwLQgm+fm5G9Z5Z3lcQ2WKT4FAbuu8bRFor3yPMRU=)
2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:b5:c7:1f:f0:98:fa:ee:fc:5c:cc:48:8e:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Oct 19 04:01:00 2025 GMT
Not After : Oct 20 04:01:00 2025 GMT
Subject: CN=ca865bf81108f2df4d61a577e16634d59543a783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:04:51:e4:2b:55:dd:ae:fc:ae:15:b4:f3:
f0:9d:38:f0:c9:69:44:a9:b0:30:5d:50:6d:08:7c:
e5:ff:c3:e7:39:cb:01:41:39:9e:d3:2d:cd:32:bd:
91:8b:d7:9e:a6:a3:55:83:1f:74:44:7b:80:fa:39:
d1:b0:be:84:5d:ed:b3:ab:57:0a:c4:3c:cd:66:d4:
df:dd:f0:e7:9f:aa:f1:e9:dc:4b:8d:e2:32:c1:8e:
42:91:79:8f:d6:4f:04:09:65:a1:6c:07:b8:36:74:
25:9e:45:d0:0d:e7:25:e5:fe:9f:40:57:fe:6e:36:
54:18:29:c5:50:60:48:81:0c:0d:fa:ae:19:a3:4d:
d8:7c:d6:85:16:74:4c:40:e7:a5:60:4f:60:86:dc:
36:40:70:2e:0e:72:88:9d:f3:ca:01:1b:e9:a1:a8:
cf:06:85:80:4f:aa:28:fb:b1:be:05:23:05:2f:88:
31:10:7c:9e:80:88:b5:1e:c6:c8:c3:64:84:38:4d:
fd:a4:f8:77:38:be:fa:ea:73:7b:b9:35:08:3e:f9:
f6:ea:2b:3a:ae:b2:6f:54:69:64:82:8f:d3:5f:98:
c6:3d:12:d4:ce:eb:aa:f6:4a:ab:e9:90:8f:db:35:
20:29:2d:f9:a8:63:20:4a:8f:2b:ae:08:65:f5:6c:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:5B:F8:11:08:F2:DF:4D:61:A5:77:E1:66:34:D5:95:43:A7:83
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:c5:f1:6d:09:ac:77:2b:41:81:ea:03:df:0a:1a:93:58:
1e:1a:54:df:6a:42:4e:1f:1e:df:10:2d:57:ec:a0:f7:b9:18:
01:78:7f:d0:f3:20:c0:70:b1:0c:76:5d:db:f8:a3:b0:fd:61:
de:c8:df:90:d1:2a:c6:c0:c1:b1:31:3e:13:8a:1c:4b:e6:a4:
93:16:5a:10:59:e2:42:78:55:95:e7:3c:7a:25:5b:5b:7c:f5:
4b:6f:da:e5:ce:24:8f:ee:73:d9:71:84:63:5f:b3:83:fc:f3:
75:55:20:5d:88:37:c1:36:d5:27:c8:c9:fa:4b:37:b2:b3:80:
f8:bd:17:58:1f:93:ca:fe:b2:8a:c4:4e:8d:1c:74:90:72:61:
1e:ce:42:33:f7:fd:a3:31:d6:48:7d:dc:f9:2b:ab:8b:9c:c7:
f4:19:74:b9:21:4e:11:b0:13:e0:8d:17:91:a6:a8:e0:02:a1:
f7:bc:b5:8b:9e:de:d2:58:05:a9:c1:10:e6:d2:ea:c7:d5:a4:
7f:14:c0:a5:2b:9b:4f:63:56:17:55:cf:37:5e:ce:3c:ba:f7:
a3:90:da:7a:59:c4:c1:08:84:7b:e6:58:70:48:70:f8:29:5d:
ea:53:cf:60:4e:27:9f:12:96:bf:7c:03:e6:fb:a2:b0:4e:71:
f6:b6:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:54 2025 by rpki-client