Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: IOnNRPSyOgH/OyWeELm1yeg6zvgBp2rcBfuSNdPdTNo=
Subject key identifier: 78:70:81:99:DB:4A:B9:05:69:30:17:EF:4E:E4:51:95:7C:3D:29:B4
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 0198D6604BBD01A8908E74E6923553F74490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 15C7
Signing time: Sat 23 Aug 2025 10:01:31 +0000
Manifest this update: Sat 23 Aug 2025 10:01:31 +0000
Manifest next update: Sun 24 Aug 2025 10:01:31 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: 2vZjna7z0PARqGECkQLFlaUpDl32YXeNEMxi40wi88U=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4b:bd:01:a8:90:8e:74:e6:92:35:53:f7:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Aug 23 10:01:31 2025 GMT
Not After : Aug 24 10:01:31 2025 GMT
Subject: CN=78708199db4ab905693017ef4ee451957c3d29b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:4d:cf:4c:45:04:58:e9:6a:26:f3:f9:ba:
d2:3a:9f:b6:60:ca:d9:d6:dc:1a:b2:a2:a0:d0:b5:
c8:21:05:bf:f7:72:bf:dc:94:c1:97:2e:df:cc:6e:
3e:1a:2c:e1:4c:3a:7c:4a:ca:c1:e6:16:95:a6:16:
36:4d:ae:3f:3b:4d:08:89:7c:0a:60:e6:cf:7b:fd:
13:c9:a5:ca:27:07:2e:e4:39:ff:cb:11:43:1d:52:
29:3d:09:0e:37:46:58:06:10:95:8b:2c:37:e3:71:
22:9e:b1:48:68:7f:7d:98:8f:0a:7f:ab:18:08:8f:
86:3b:96:e3:78:14:55:be:b4:bc:ff:8e:75:6e:01:
ed:a9:d4:2f:07:af:8b:8d:9d:19:ad:0b:0f:02:e6:
e8:8f:c1:cd:4e:ee:98:74:73:4a:b5:b5:6e:6a:10:
f3:3f:d8:d1:72:a2:68:53:d9:da:0f:47:3a:70:a0:
89:af:a7:aa:89:bf:06:c6:74:61:7c:7d:b7:2a:6a:
3c:f2:41:4e:95:4a:cc:95:8b:93:2e:63:cf:af:1c:
2c:f4:a9:5c:36:e2:e0:98:4f:eb:2d:76:9e:8c:25:
1c:d0:48:6d:a6:47:e1:f7:a3:42:10:eb:af:c2:ac:
0e:9e:d3:a1:75:45:83:d1:56:fc:ee:ba:39:59:84:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:81:99:DB:4A:B9:05:69:30:17:EF:4E:E4:51:95:7C:3D:29:B4
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f2:1a:f4:78:83:7d:6a:2d:05:af:51:69:7c:93:5e:97:09:
38:b7:f7:1e:b4:1a:d7:74:69:e3:67:34:63:dc:51:51:f6:9d:
29:93:c1:ad:46:c5:f1:5d:e7:6b:02:60:24:f3:4c:86:a6:96:
b2:4b:93:6b:bb:7c:e2:80:d5:1a:91:dc:71:b5:df:d8:d7:07:
03:30:df:5f:2e:35:d6:ac:25:22:37:51:3c:d3:79:6e:4c:ee:
1d:03:a0:4e:24:c8:7e:a1:4a:e1:85:81:b8:27:f2:2f:c8:4b:
9f:32:60:95:0d:69:13:ba:5d:1a:fa:02:6d:b7:8a:9c:ce:9c:
f3:a3:1c:a8:b1:3d:ba:53:27:b8:a9:af:66:4c:21:54:9d:28:
1c:16:65:b8:1f:d4:92:2a:81:7c:a7:c5:91:f4:d3:a8:46:96:
b3:d6:4f:6f:c1:3e:4b:8f:56:2f:b2:a6:11:34:a1:be:7a:b3:
11:32:84:4f:1a:00:64:92:45:a0:70:f3:d5:2b:19:3f:05:6f:
8c:90:88:7d:bd:1c:8f:02:66:f3:bc:d8:91:b8:f2:4a:2c:d9:
54:84:11:f0:5d:6c:01:d1:31:8d:d8:af:9c:22:5d:b7:c2:dd:
2c:50:c2:63:50:af:84:27:ad:f7:9b:0c:e0:cb:71:aa:48:c4:
61:2f:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:08 2025 by rpki-client