Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: +qNLcIKD3M4G3NmQ8QXMxQtUIFgZyWbIF0MD5EHndtg=
Subject key identifier: 3E:D0:90:AA:93:D5:95:F5:10:0A:C0:E9:28:55:4B:A5:42:E0:9E:3F
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 0199FC215467BD2DB012352931B8386CA68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 15B2
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: p4jOfwU2LXrik3fyDLZ27ANI1QA/2UJ3+JKYPzbwE/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:54:67:bd:2d:b0:12:35:29:31:b8:38:6c:a6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=3ed090aa93d595f5100ac0e928554ba542e09e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:a1:a6:fb:e3:99:04:bb:15:e8:fd:89:e7:
00:3a:b1:83:ff:d7:55:c1:26:55:eb:90:39:91:7a:
28:a0:97:b0:9b:d9:b5:c1:1a:b7:a5:d4:a3:9a:a3:
d6:49:c3:e2:5b:50:9b:9f:7b:d7:de:99:f8:bb:60:
16:2a:88:94:0f:9f:21:60:b1:85:8b:a2:9e:a8:4e:
4b:de:f6:07:bc:0e:fc:01:8b:44:2c:d1:87:69:17:
56:e7:b0:c2:2c:93:59:68:9b:81:eb:78:8e:a1:2e:
60:e2:6b:5b:10:08:d7:fc:13:66:aa:61:83:b0:71:
cd:98:ca:4f:36:26:f4:f7:93:14:af:92:22:ff:38:
bf:3d:c0:99:b6:a9:14:7e:ab:e1:52:52:e5:b9:1f:
be:08:be:41:bf:50:4d:92:30:0e:fb:93:0e:1f:d8:
3a:04:02:32:be:b1:c3:65:d3:98:c9:df:7d:43:b6:
4b:23:a2:34:b7:28:62:d1:d6:26:fb:aa:9a:60:6e:
b7:ab:c0:1e:b6:90:27:0c:dd:42:18:31:f4:39:d0:
1b:4d:de:59:de:37:49:89:cf:1c:43:55:3e:9d:e1:
e1:4f:3d:4b:79:e3:ec:9e:73:6f:03:95:6d:bb:13:
77:14:6d:b9:a7:89:27:08:4b:9c:af:d0:7c:eb:0c:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D0:90:AA:93:D5:95:F5:10:0A:C0:E9:28:55:4B:A5:42:E0:9E:3F
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ec:a5:73:5c:60:ab:9b:09:57:7e:06:96:d6:29:d6:85:fa:
30:21:14:a4:c1:87:35:90:1d:4d:8c:1a:ae:45:09:09:e3:45:
1e:3c:89:de:21:f9:cc:b3:61:1f:fe:f3:3a:34:5c:68:f1:3a:
c4:8e:25:78:a2:45:74:63:8e:45:07:ba:21:f2:cb:27:a1:a3:
30:27:7e:0b:dd:eb:3a:61:d0:dd:ac:ec:2a:a8:ca:39:d6:09:
d3:49:e1:cd:96:c7:99:b9:5b:21:e0:f5:5c:73:0d:59:4e:b7:
15:c3:90:e6:4a:3f:38:01:0c:27:0c:47:26:3a:1b:6d:a9:4b:
8a:d1:e4:02:6d:62:ce:35:85:f6:4b:37:08:29:f1:8e:9c:9b:
3c:00:d4:29:5f:e5:19:25:1b:64:5d:d2:e8:39:e9:0c:87:b4:
0c:e5:89:04:d5:6b:eb:a4:b0:ec:ad:43:86:37:1c:1e:cc:18:
00:dd:1b:52:b4:15:86:e1:75:3d:f0:5f:ae:98:16:5e:2a:ae:
06:cb:a5:81:3b:eb:a3:05:c3:7f:09:6e:a9:68:03:94:cc:c4:
4e:06:bb:a3:bd:d8:16:d9:62:3c:f6:a8:df:fc:53:43:64:0b:
42:29:21:86:ac:6c:f2:0a:f1:82:07:4e:94:8d:83:6d:9d:28:
c3:78:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:57 2025 by rpki-client