Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: v+eGxnbc09qpzwpual6k4BNG7vyLw/PbcSNGFkvA68g=
Subject key identifier: 0C:AA:47:D3:9D:BB:B7:C8:B3:B6:62:E9:51:DF:7D:4E:7B:D3:5B:78
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 0199FD3422EC6BE827BEB301E5D867C9DC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 05F1
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: H342y68O10IKImJqQT1v7finlIjCdhrg3YTtccfAzao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:22:ec:6b:e8:27:be:b3:01:e5:d8:67:c9:dc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=0caa47d39dbbb7c8b3b662e951df7d4e7bd35b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:ac:18:58:06:93:db:b0:7f:d6:ab:f9:91:
0c:12:ee:95:0f:43:7c:e0:2c:c5:46:97:dc:1b:3d:
c4:2b:29:c7:4f:b9:75:a6:04:37:12:41:66:3d:90:
7c:a1:0f:14:07:7c:49:77:01:9a:7e:21:4b:74:a2:
ef:f2:1a:db:b8:36:32:f3:9e:f6:aa:d1:2b:76:3b:
aa:17:fb:7c:99:85:a0:5f:75:bd:a1:72:1c:e7:77:
94:e9:c9:e4:ce:ac:71:73:c2:4f:e8:e9:1d:c6:7a:
d1:d1:37:b3:3e:34:3f:2a:e5:79:33:29:b3:75:14:
c6:cb:e7:24:d3:62:f5:4b:12:cc:8b:c7:9a:02:3f:
46:88:06:f1:b8:2f:c9:2f:d1:be:36:b5:94:cf:04:
98:5f:a4:d5:a0:95:cf:e0:e8:34:fb:96:c3:9b:b2:
9b:36:2d:15:a4:78:0f:f2:c3:30:f9:23:89:f5:2b:
2c:79:97:d8:ef:c7:1f:b2:a6:7e:7f:4c:14:9d:d3:
4b:f1:92:8b:a1:5c:2e:e3:55:36:d6:a2:e7:df:fc:
16:14:c1:f1:e3:b9:54:cd:dc:1d:c9:2e:d8:32:a7:
ea:c1:26:de:c5:11:2d:bc:38:0c:90:8d:b8:65:c7:
77:e8:8f:da:3b:dc:2d:6e:b1:53:4b:76:a3:43:fd:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:47:D3:9D:BB:B7:C8:B3:B6:62:E9:51:DF:7D:4E:7B:D3:5B:78
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:f4:37:b5:b1:ac:8e:75:83:29:54:31:1e:c7:41:ea:53:
8a:ed:89:e3:56:8e:8b:37:6c:a8:54:b6:5c:60:22:65:84:b6:
95:27:91:7d:da:a1:e2:88:d7:cd:14:ff:ca:ad:91:55:02:0b:
d6:a5:ae:1d:d3:d6:21:32:c0:65:e7:8c:41:14:58:1b:e4:15:
ee:f5:0e:3c:85:1e:4d:fe:b4:90:3f:f5:ff:d6:f0:6f:dc:37:
84:d2:37:83:d1:bf:a6:17:d2:e2:b2:9f:97:28:89:c4:05:ab:
ed:49:3b:21:cc:91:a1:b3:2b:f1:20:2f:bd:98:95:f7:ca:e5:
77:c9:c5:eb:3d:ed:fd:73:08:c7:e1:0b:8a:22:2e:7e:30:6a:
25:7e:aa:55:b7:e9:70:8c:b6:0b:53:fa:79:df:3f:b7:59:55:
a4:31:f2:e9:cc:7a:d5:c4:eb:95:9b:ac:ce:d1:92:91:42:bc:
f9:29:1f:a4:1c:81:95:a2:40:8d:57:f2:f5:d4:92:e7:51:b6:
d0:71:53:a5:f8:38:a0:73:5f:7b:3c:42:56:dd:5d:8c:97:32:
a9:1e:d2:ad:16:f7:5e:8f:de:7d:12:92:15:d1:11:63:51:dd:
af:af:45:10:f5:54:32:84:5d:3b:b9:27:c8:bb:cf:95:7b:de:
ee:cb:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:12 2025 by rpki-client