Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: J4/Z71uKSP0FuC0CzR5pzN72npILEXOOxqgypxIshZM=
Subject key identifier: 6D:73:4B:5B:47:21:95:F8:81:C2:93:8E:54:FF:AD:1C:0D:51:E5:EC
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 0198D697E81D613027F02D6A869A3185F05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 151A
Signing time: Sat 23 Aug 2025 11:02:16 +0000
Manifest this update: Sat 23 Aug 2025 11:02:16 +0000
Manifest next update: Sun 24 Aug 2025 11:02:16 +0000
Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: awKZh5q01bfPrlfJYjlX7g8+J/JRUav5K3G8J16akPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:e8:1d:61:30:27:f0:2d:6a:86:9a:31:85:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Aug 23 11:02:16 2025 GMT
Not After : Aug 24 11:02:16 2025 GMT
Subject: CN=6d734b5b472195f881c2938e54ffad1c0d51e5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:8e:e5:06:56:b7:8b:f1:f7:78:0e:c6:95:
1b:63:7f:d6:b9:32:bc:fc:79:4a:78:17:ed:8b:93:
cf:82:3f:88:2b:37:9d:12:80:f6:5f:ef:45:ee:7b:
a0:ca:35:34:94:c8:0b:15:37:a6:45:61:0e:01:d0:
11:be:4d:26:29:b3:01:61:71:ce:5c:59:24:d5:ac:
ff:34:bf:15:87:22:0b:6c:a6:80:32:4c:68:7c:e4:
26:bb:bc:0d:f0:d0:c7:cb:e0:80:83:57:01:78:3e:
93:ab:b2:7c:11:19:a3:49:06:2c:2b:2d:31:d4:00:
e9:12:cb:a4:a3:17:8a:cb:62:2b:04:97:4d:31:40:
e6:94:51:d7:6f:b9:07:73:6b:13:04:0e:72:ce:78:
21:3f:48:10:c6:37:52:5f:f8:5a:11:91:a8:c5:c9:
02:c1:85:02:79:bd:8c:59:2c:a6:dd:30:12:1d:aa:
84:78:16:f7:79:c5:80:da:28:c7:8f:25:4b:28:e3:
1e:66:4b:e5:de:04:00:89:be:cd:16:a0:d8:07:f4:
cb:5c:ed:cd:bd:cf:73:7b:94:e6:f8:f2:0a:32:0b:
07:54:78:fc:5e:57:2a:c8:5e:05:79:ad:7a:20:c0:
12:49:4b:54:6b:18:a4:83:0e:47:10:03:be:c2:52:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:73:4B:5B:47:21:95:F8:81:C2:93:8E:54:FF:AD:1C:0D:51:E5:EC
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:62:25:15:ea:15:cb:68:52:e6:d7:d7:f5:86:e5:cd:fd:8e:
12:4a:09:36:84:48:a7:4c:49:8d:5e:cc:a8:2f:32:cf:07:82:
73:bb:88:c8:36:fe:a8:71:e7:15:e0:42:0b:45:68:28:9e:45:
2c:79:ce:9c:83:06:ab:02:f6:86:8a:a9:cb:78:63:5f:84:13:
cd:27:9f:66:34:68:f7:9b:47:86:3b:fb:41:8e:33:2b:91:05:
12:fe:68:29:09:f4:13:c3:3c:d1:a5:66:72:b7:23:4c:91:2c:
02:36:9c:6b:9b:36:3f:9c:58:26:76:55:75:ac:04:58:86:40:
39:5e:c3:c3:c5:9b:7d:16:6f:e4:ec:cb:b9:bc:e1:e2:ba:d7:
37:cf:d8:2e:b8:0f:2c:2f:99:e6:08:fc:4a:ca:99:85:d9:5c:
aa:ce:10:59:49:8d:b6:87:41:46:68:f4:da:2e:ef:af:5d:ed:
c0:ae:7f:aa:f1:7b:b9:7d:02:c7:15:21:d1:96:c8:91:ea:d8:
55:49:b1:4d:00:46:13:5f:ff:11:04:aa:dc:ab:39:7a:cc:70:
a1:12:48:7c:b1:9b:19:05:a3:09:66:53:93:3e:04:fe:6b:df:
57:c0:54:65:8d:40:d6:63:46:9c:e0:8a:78:4c:3f:7e:80:da:
aa:d3:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:19 2025 by rpki-client