Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: 0ylLyfR1DdMYXgvVxrJr+tOsoLKXOCpnvo586Sbp3IA=
Subject key identifier: AF:8D:43:40:95:7C:D2:C5:8B:9B:75:30:CD:D2:A6:FF:21:DD:D6:27
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 0199FF2242D1E1B2E8DB5E2802BB35B9F4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0F96
Signing time: Mon 20 Oct 2025 01:00:59 +0000
Manifest this update: Mon 20 Oct 2025 01:00:59 +0000
Manifest next update: Tue 21 Oct 2025 01:00:59 +0000
Files and hashes: 1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: YuaRC9GHqpqbw5N6a7W0nrPeCw3u57Pit4K8WBOWWkY=)
3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:42:d1:e1:b2:e8:db:5e:28:02:bb:35:b9:f4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Oct 20 01:00:59 2025 GMT
Not After : Oct 21 01:00:59 2025 GMT
Subject: CN=af8d4340957cd2c58b9b7530cdd2a6ff21ddd627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:38:95:73:e2:ed:4b:d8:40:67:e2:2c:0d:
5d:cc:ca:21:a8:53:97:d2:f5:98:64:ad:08:5a:1a:
47:21:74:de:be:5e:10:d4:bd:4b:ad:23:6f:ab:19:
63:84:68:9f:bf:5f:7e:c1:7a:cd:ba:c9:e1:ea:9b:
1b:07:49:45:5f:b5:93:34:f4:18:91:b8:99:1f:25:
ff:b1:92:8c:71:4b:2e:b6:24:5b:9a:56:28:70:1b:
a7:66:76:6a:e8:08:e1:ea:79:0d:dd:23:44:18:66:
44:dc:05:e2:02:2a:83:a3:21:a7:44:32:ae:3c:61:
01:5a:a8:d8:b8:b3:17:27:58:2f:b8:02:e0:7b:99:
ec:19:64:38:b6:0f:f0:20:d4:91:9c:b5:f5:27:4d:
ef:44:94:27:06:55:89:d4:d3:e7:eb:9a:a6:9b:3c:
24:86:ed:b1:45:f4:f5:d5:6e:63:31:df:5d:7b:72:
21:79:0f:4b:39:87:9d:91:f7:6e:97:ab:6f:02:49:
0f:ef:be:c8:c0:26:7f:dc:4a:10:4b:2d:57:84:f3:
eb:2e:21:a1:00:95:6b:38:e6:5b:44:98:9f:d5:2b:
94:33:a0:c5:23:78:68:97:b3:42:76:aa:54:f2:dc:
ad:8d:3e:f3:43:3d:01:2d:c7:66:3f:8f:cf:0f:29:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8D:43:40:95:7C:D2:C5:8B:9B:75:30:CD:D2:A6:FF:21:DD:D6:27
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:8e:74:2c:b8:65:5c:b5:07:24:6e:20:03:ea:a5:b7:4d:
6f:80:b3:df:00:02:ac:6a:3c:e4:19:e7:90:8a:8b:bc:6a:c7:
a2:67:e7:77:ab:62:94:f9:bc:6d:80:ab:fb:13:83:e3:24:16:
0e:ee:8d:18:7c:e1:ec:be:0a:97:0d:4a:b0:29:9f:f6:88:73:
d5:27:1a:2b:68:94:71:bd:73:48:f6:4b:5a:30:f4:c8:0e:56:
08:98:4e:00:ea:9b:e7:4e:99:1f:33:c3:bc:6d:84:f9:a5:12:
74:f5:38:fa:89:3b:e6:83:90:a5:17:76:1d:e9:be:a9:b9:00:
8e:1c:5c:bb:11:a9:66:a9:14:a8:d0:12:97:41:45:bd:f7:7c:
40:ab:d9:1c:05:24:1c:fb:a5:0b:06:4d:18:fe:26:fd:4e:47:
dd:05:31:87:f1:16:ba:dd:3c:ce:21:57:64:78:9b:11:62:4c:
54:ae:78:33:75:16:db:04:bb:b0:0d:79:4c:55:f5:51:f5:92:
77:d8:22:e3:33:b3:71:59:a4:56:37:19:89:b8:78:b2:1b:61:
b4:30:41:ea:b9:4d:18:bb:21:53:64:41:32:18:c9:c5:78:54:
80:64:8d:4b:ca:e7:21:0c:4c:18:bf:01:ad:9a:d2:21:46:49:
c8:14:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:54 2025 by rpki-client