Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: aQe6udAoT9GAthErTrLP0B8iBmLRXIOEc864rpOslsQ=
Subject key identifier: A4:95:91:79:C6:2B:BF:DB:E9:E8:4B:D5:7F:DF:82:29:4D:10:4F:B7
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 0199FBEAFD32F2C492E323A22F70E02CE3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 165F
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: bmc5HNu/ySHccgrI1ZO83gOBUKd9Ci9yOHDR6dmHrOU=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fd:32:f2:c4:92:e3:23:a2:2f:70:e0:2c:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=a4959179c62bbfdbe9e84bd57fdf82294d104fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:89:2f:2c:63:45:32:96:64:da:12:67:b1:
b8:1f:b1:14:12:73:fd:8a:5f:7c:e1:14:11:05:3c:
7d:ee:38:33:2a:6d:18:98:f0:bf:9b:01:49:88:5c:
2a:f5:e0:e4:ce:5b:96:54:ff:0e:cc:3a:05:94:e3:
8b:24:4b:9b:6d:39:84:64:45:ac:73:c4:bc:3c:85:
24:26:74:00:06:1a:10:7f:6d:47:71:f6:3c:58:ce:
6a:43:8b:1e:08:d5:8b:34:c9:96:23:9d:e0:c3:65:
d4:be:ca:16:67:2e:c3:89:9d:ec:a7:ab:8e:92:90:
18:ff:6c:f4:2d:44:67:c5:2d:16:ee:de:36:a2:ae:
a3:b9:f8:79:81:82:86:a9:23:9d:1a:ce:3c:dc:61:
72:50:22:4a:53:de:c2:a4:76:97:3f:ea:6b:96:48:
75:b1:08:7d:cb:fe:6c:c3:4b:1b:19:70:53:20:bf:
40:dd:17:67:64:e2:47:cf:72:2d:47:88:bb:58:53:
cf:50:83:c0:d1:f4:99:1f:22:be:86:17:b3:ca:48:
93:57:f5:d6:0f:88:b1:f5:1f:1d:46:6b:eb:fe:04:
b2:b7:ec:0e:d2:f7:ef:de:cb:7f:cc:59:aa:b5:58:
01:9c:4b:39:92:26:cf:4e:3b:4a:4d:e1:c5:a7:58:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:91:79:C6:2B:BF:DB:E9:E8:4B:D5:7F:DF:82:29:4D:10:4F:B7
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:48:e7:a4:a8:7c:39:78:66:21:63:ed:00:07:5a:42:06:d7:
0a:08:ee:b2:f0:e6:06:cb:2f:7a:00:34:95:cb:f0:93:08:51:
8a:40:4a:1e:77:7f:42:fe:9e:6e:d5:1a:30:58:7a:27:97:db:
b2:45:e1:68:c0:21:32:06:3a:5b:09:89:42:26:84:cd:69:98:
60:9c:f8:f5:23:81:2c:2a:7b:36:08:b7:4f:df:05:29:be:86:
81:d7:15:7c:0d:27:40:c9:e8:08:1f:67:43:46:f7:3e:00:b2:
5c:9e:27:bc:83:ab:97:d4:73:87:31:33:4e:f2:2f:bd:d3:ca:
9a:88:cc:b3:09:ed:d8:11:d8:a5:9b:48:94:79:b2:13:9d:20:
1f:03:70:65:02:87:36:ea:78:83:b2:3a:88:58:c2:1e:2c:f8:
b9:3c:fe:2d:c7:5c:88:08:3d:f9:54:b4:1b:96:71:78:98:22:
f7:5c:3d:c2:78:55:c8:0f:e1:e5:ca:0d:4e:02:be:bc:ec:36:
e7:88:91:82:1d:ff:44:a5:80:30:3b:9d:b4:d4:ca:d5:58:f2:
9f:b6:c6:64:74:52:c2:85:06:3b:8e:b1:df:75:6f:ba:5e:4e:
d3:62:f7:29:65:5b:fe:66:39:67:13:71:65:68:33:6e:55:2f:
03:18:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:51 2025 by rpki-client