Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File: skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier: YI194X4HVZI6C3nUnroT5JqS+944GzwGozwHXVoCfXM=
Subject key identifier: CE:A6:0C:D2:4C:80:73:44:DF:C5:A1:8A:D6:22:24:FB:F9:45:71:88
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer: /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial: 0199FFC7C13AA1622412DF6E10BF9C53F3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number: 0AF0
Signing time: Mon 20 Oct 2025 04:01:45 +0000
Manifest this update: Mon 20 Oct 2025 04:01:45 +0000
Manifest next update: Tue 21 Oct 2025 04:01:45 +0000
Files and hashes: 1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: PWt5wiA7FUJrR4kuTb6A7q/yVnTNrQFK53ob/v7MRfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:c1:3a:a1:62:24:12:df:6e:10:bf:9c:53:f3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Validity
Not Before: Oct 20 04:01:45 2025 GMT
Not After : Oct 21 04:01:45 2025 GMT
Subject: CN=cea60cd24c807344dfc5a18ad62224fbf9457188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:73:9d:08:4f:d0:59:47:3b:92:dd:9d:06:
3a:e5:57:c4:ed:20:2d:0b:ca:e9:7c:ad:07:47:d6:
a1:61:d9:b2:2b:bd:bc:69:de:1e:05:c9:6a:46:b6:
0d:26:1c:30:ae:d0:be:28:11:15:2f:69:0a:4b:54:
1c:41:6f:ff:30:2a:08:10:a8:72:3c:12:11:14:eb:
10:15:5a:80:51:5d:c5:cb:66:12:95:24:c2:3d:d4:
39:0f:68:02:d0:a6:e9:a3:ca:be:cc:90:87:04:41:
6b:be:fa:e6:f9:77:c0:74:9c:da:9f:37:81:13:2d:
02:50:e0:ac:b1:94:70:40:c4:d8:20:78:3d:ce:20:
60:b9:05:fb:a6:c1:ca:a4:b1:f9:99:62:72:f1:c9:
95:1b:67:f8:8f:92:63:86:29:fa:9b:c6:50:58:12:
6f:3f:79:81:1f:c0:94:d3:a2:88:53:23:02:b8:48:
a3:ea:8e:56:c9:0f:73:88:59:cf:06:71:67:d3:cd:
e9:d4:9d:30:79:5a:21:e7:ba:4b:42:d9:bd:7c:a1:
fc:c8:b7:c7:6e:21:ca:e8:c6:0f:5a:c9:d2:56:58:
2a:db:40:a3:7f:e6:64:76:9d:c4:68:88:fd:17:1f:
69:47:be:6d:4f:b2:d6:c8:66:87:d3:4d:98:b3:7c:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A6:0C:D2:4C:80:73:44:DF:C5:A1:8A:D6:22:24:FB:F9:45:71:88
X509v3 Authority Key Identifier:
keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:23:57:36:09:e1:36:5c:78:7a:7f:a2:96:77:6d:af:f3:97:
9a:4b:3c:a0:db:d2:19:05:a0:89:cc:be:ac:e0:4f:61:3c:45:
fd:11:81:10:7a:20:4f:d9:de:2b:20:3e:27:91:96:f1:12:e1:
fa:c5:f5:0f:81:62:83:0e:67:95:95:11:8c:71:21:4d:25:46:
63:3f:4d:f2:df:e2:7d:93:05:fa:08:4d:d6:7a:1d:7d:a6:8c:
9f:53:41:81:32:d5:29:06:ac:13:76:04:ff:18:e9:cb:4a:22:
a1:38:84:a2:4e:35:de:29:bd:a7:e9:ad:46:a7:99:06:47:5c:
97:d5:1e:f8:0b:37:67:bf:93:38:7b:25:98:d1:38:05:34:62:
1c:bc:92:c0:24:52:9b:49:fb:12:6e:4d:ff:56:a1:a8:0c:1e:
ab:ee:90:91:ca:8f:aa:d4:cd:78:de:16:14:47:c5:f2:b9:66:
37:e4:8d:51:ae:fb:7e:99:60:ed:27:18:21:d2:b1:b8:bc:a2:
a1:40:b7:7d:be:a5:68:49:b8:0f:42:55:da:3f:dc:5b:5d:6e:
c1:f8:bf:d3:8c:59:7d:34:a1:fd:cc:df:dd:a5:7f:a0:6f:c1:
79:20:e3:23:a0:34:5a:0c:9c:0b:ed:dd:59:c8:d2:44:94:c0:
f3:be:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:37 2025 by rpki-client