Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: jfpOP4fSRA2FVDW9DT049lbe8Vk0WIU73PSuop1ZYss=
Subject key identifier: 89:9D:7B:0C:14:62:FA:8D:5D:D3:9F:14:5D:A0:BD:28:49:92:1C:F0
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 0199FCFD94662E9EE325507F732CE7D836CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: A4YAQuuGlB7FD5yXwBXhGoZeyZN+mEp8uWb8mZkCQ1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:94:66:2e:9e:e3:25:50:7f:73:2c:e7:d8:36:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=899d7b0c1462fa8d5dd39f145da0bd2849921cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:1c:49:db:16:14:fa:16:95:bd:81:a3:3c:
e6:63:06:9e:25:21:bc:38:51:ca:e5:02:18:8f:9c:
47:35:a8:dd:fe:42:18:2c:18:fe:40:ea:e7:8b:07:
70:e9:07:d4:51:fe:c7:9d:d7:2e:6b:25:ae:22:34:
a2:cb:40:ff:a2:7a:db:f9:7e:4f:e2:8e:5f:67:49:
98:5d:2c:a0:9a:e1:6f:20:17:7c:e5:ad:d6:f9:c9:
d0:56:fd:e4:78:3f:c5:0e:3b:f6:05:bb:16:c6:3c:
a7:40:4f:61:6c:99:f6:e2:83:16:f6:1b:5f:78:66:
34:27:9a:97:f5:7d:8f:ca:ab:96:79:4e:8e:0d:08:
b7:c0:37:9b:97:25:5a:5c:ca:14:ec:16:44:e7:52:
e7:5e:79:bd:90:84:1c:48:af:f6:3b:bb:4b:19:21:
24:7c:93:3f:56:0a:80:7a:62:b0:82:54:55:ff:40:
36:2c:d2:73:03:aa:9b:36:5f:86:2e:ca:2c:93:b7:
c4:99:68:e6:a1:aa:3c:40:c8:00:3f:6b:de:71:66:
17:7d:d2:a6:ce:d2:84:57:98:00:3d:ff:f2:50:26:
1e:bb:43:5b:57:ec:cb:49:8e:8d:1e:2d:35:20:93:
2a:1e:97:68:ab:e8:3c:71:82:8b:4d:4d:05:f4:62:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:7B:0C:14:62:FA:8D:5D:D3:9F:14:5D:A0:BD:28:49:92:1C:F0
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:6c:91:b4:b5:43:f7:e6:1d:e1:18:f5:a2:85:c1:78:3b:
89:03:b5:6b:f8:5a:4c:6a:1f:50:92:5f:0a:52:3f:38:d2:63:
41:bd:fa:4a:68:fb:63:49:c1:c0:55:97:f2:f6:19:d8:a8:94:
bd:ec:71:63:54:32:0f:e6:02:ca:8d:d3:70:b2:b0:d7:24:2f:
a1:3c:73:fd:42:d5:56:36:b8:d7:ec:c1:e7:8b:f2:79:82:ab:
98:ad:ef:39:e0:fa:d5:cc:70:5f:b4:d7:0a:9e:b8:5f:56:cc:
22:31:93:77:8b:6c:bb:02:ef:a8:b1:2b:00:fe:72:36:70:ff:
e8:78:27:4c:f5:23:dd:76:47:08:e2:87:8b:35:8e:08:28:7a:
16:cb:00:28:10:d7:8f:40:dc:91:3e:42:90:5b:72:7b:b8:98:
10:87:6a:2d:de:cd:67:63:ea:c2:99:0a:d6:1c:d0:48:e0:52:
5f:f0:f4:ea:31:2a:9d:b2:0f:dd:2e:5d:dc:2b:21:47:78:ee:
11:b8:d9:64:a2:c0:d3:19:69:b8:02:d9:7d:63:6b:3a:bd:90:
36:8f:2e:12:3f:ae:60:4b:fa:95:3c:78:1f:fa:36:37:7c:2d:
fe:5c:27:a8:42:36:83:08:14:bd:fb:bf:c4:83:46:07:36:b4:
ec:25:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:09 2025 by rpki-client