Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: ehXlTvYEDX+y1Xhq9i9UzQl75gqdB7+YgGrIwU7KFDw=
Subject key identifier: 2B:0A:AB:55:95:F9:8A:B6:32:E9:DD:FC:42:57:D3:F5:0A:3E:A6:39
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 0197B5FBB1F710E225EBD82561730A18E437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0E67
Signing time: Sat 28 Jun 2025 10:01:00 +0000
Manifest this update: Sat 28 Jun 2025 10:01:00 +0000
Manifest next update: Sun 29 Jun 2025 10:01:00 +0000
Files and hashes: 1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: E8J1UQKGNbu+ADB9XTe1O1RVO5Kd8/xlbVRPgWJNgk8=)
3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:b1:f7:10:e2:25:eb:d8:25:61:73:0a:18:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Jun 28 10:01:00 2025 GMT
Not After : Jun 29 10:01:00 2025 GMT
Subject: CN=2b0aab5595f98ab632e9ddfc4257d3f50a3ea639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:03:fb:53:92:bd:22:81:5d:2f:53:0f:07:
c6:fe:e4:f3:c3:b3:76:5f:ce:47:c7:e7:9f:f3:b1:
31:fd:19:7f:53:a8:53:d9:14:67:17:04:11:59:0d:
4d:12:76:28:80:d5:d3:62:f0:1a:b0:08:0c:01:5a:
f2:85:cf:4a:08:ce:86:97:bd:77:30:27:0e:b3:fd:
8b:bb:cf:79:4c:aa:b6:af:42:67:0e:41:1e:3e:86:
ad:f5:fa:60:d7:71:08:3f:37:a2:a0:ea:1e:7a:72:
95:90:76:31:e2:ce:c0:aa:af:c4:ee:38:c7:82:9e:
2a:ae:6d:b0:53:09:0f:a3:d2:0e:4f:07:bd:ec:de:
a8:82:20:a3:f1:17:94:64:a9:b3:90:ef:37:35:94:
ab:b4:b9:83:18:92:b4:a4:b4:7e:f0:f8:a4:f4:a3:
59:77:d9:30:98:2a:1d:75:53:f7:1b:cf:99:2e:95:
f4:27:0f:b4:30:f6:67:6d:52:62:63:f2:f0:9a:3d:
44:27:a6:ef:93:f0:e8:f6:27:88:19:fc:e1:3f:38:
91:05:b9:1c:27:70:ee:cf:e9:f9:3e:3d:49:1f:b0:
8d:28:94:79:80:ae:6f:62:4b:ce:50:b8:fc:55:42:
c5:11:5d:76:2e:de:79:30:ee:12:75:3d:9f:47:13:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0A:AB:55:95:F9:8A:B6:32:E9:DD:FC:42:57:D3:F5:0A:3E:A6:39
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e3:2d:59:fc:a6:56:a4:ef:56:86:c6:75:03:84:1d:c4:85:
30:ff:df:bd:a0:1b:f7:81:08:42:36:36:1e:94:85:c1:7f:6d:
b9:c9:82:4a:35:91:fd:41:d5:84:c1:1f:7b:2b:1b:de:24:00:
ec:ed:88:24:ba:16:59:98:3b:a4:67:c2:05:ae:45:2a:60:e5:
6e:86:e9:4d:56:57:29:8e:76:5b:77:5f:54:19:06:c5:d2:4d:
b4:49:55:05:d2:7d:1a:d0:bb:30:bb:8c:4e:13:26:6e:82:b1:
32:67:b8:eb:2b:79:a2:22:05:f6:ea:df:06:d1:a3:ce:d1:a1:
e3:e2:04:10:3d:54:9b:15:00:cd:aa:ea:6c:0a:3c:57:0d:cb:
4c:1d:e9:ab:e2:15:76:60:9f:26:e4:e9:86:0d:f9:b0:73:4a:
25:92:79:f3:5c:1a:af:6c:5d:28:f3:96:ef:c5:4c:1b:c3:52:
55:f1:43:0b:d1:a0:27:82:51:a0:94:59:a0:2e:3f:78:76:f0:
6d:69:30:89:48:47:79:8c:f3:df:fe:1e:36:cb:e3:9f:e1:47:
97:54:b1:f1:ba:50:b1:e2:3b:38:b4:15:a2:95:0a:5f:2e:36:
e5:57:0b:29:62:f2:2a:99:68:52:6c:ac:2d:fb:f5:89:d2:85:
bf:9a:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:13 2025 by rpki-client