Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: TaJA+uxo74OnGQnuRgLwdaixMdLqYmB2+dlAmagBXMo=
Subject key identifier: 2B:B9:3B:25:F5:AF:91:BB:8E:A0:A2:6B:49:9A:BC:79:1A:B3:80:C9
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 0199FC8F3DE40C9C87BE5A3D4718A10F85A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 0467
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: spM0qEDx7RnqG79dvf5bmkk/DYqUQzzb1XU+cX0CqGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3d:e4:0c:9c:87:be:5a:3d:47:18:a1:0f:85:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=2bb93b25f5af91bb8ea0a26b499abc791ab380c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:f1:d4:ef:75:d0:e3:3b:8b:d7:0c:d7:42:
cc:f8:14:3a:88:7d:54:65:ec:f2:77:09:67:72:7b:
55:04:a9:d6:6c:c1:33:be:09:6c:2c:56:4e:c8:ea:
13:14:db:92:4c:f3:26:6e:aa:7a:88:0e:9e:11:87:
e0:2f:bd:f0:07:c8:a1:6a:6a:e0:f6:84:39:06:9d:
af:b8:d7:2d:ff:53:54:e9:7e:09:dc:55:99:d9:cf:
13:b0:9b:0c:fa:65:64:9a:a1:f5:b8:d5:29:8e:ee:
a5:4c:2b:82:e8:2d:9c:f6:25:ee:39:0e:80:22:84:
20:59:6a:6d:02:3f:d5:63:a8:ed:36:42:5e:c4:d9:
a7:cc:5e:c2:a4:f2:b3:fa:e3:99:ba:f3:67:27:ba:
87:98:20:db:99:0a:f8:42:db:d5:bb:d4:ad:82:b1:
4b:24:a6:97:14:0a:b6:41:02:c1:05:26:b4:00:73:
42:6b:d8:33:86:3d:08:52:71:f5:d1:5e:fe:c8:14:
ac:f1:4a:54:dd:f6:44:4c:ce:5b:6a:08:5e:52:14:
59:3c:7f:ca:ad:e7:5a:92:2f:66:8d:64:5f:53:a4:
e7:04:0e:20:aa:7d:5d:76:9d:60:42:e5:32:d2:80:
a0:db:f7:e7:01:bc:75:80:b8:16:6c:13:e8:90:7d:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:3B:25:F5:AF:91:BB:8E:A0:A2:6B:49:9A:BC:79:1A:B3:80:C9
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b5:67:58:a8:7a:2a:a4:a3:d9:51:d9:b3:44:20:dc:2a:45:
61:72:68:82:30:03:9b:45:4d:b7:3e:5b:f0:f1:12:68:81:18:
73:5e:6d:67:74:7e:53:d6:9b:40:13:f3:dd:d6:53:67:ae:9c:
2b:11:78:59:bf:c8:bc:a8:bf:84:6e:bc:ce:96:bd:1e:8c:91:
d4:4d:95:8a:b2:6e:c8:02:51:49:b3:6e:6c:91:c0:35:bd:33:
d5:d8:54:04:64:2b:45:d2:61:9d:5d:69:9b:ff:fb:7f:30:90:
2b:a4:2e:d6:f2:6c:af:5e:a2:3a:f5:67:36:47:b9:fa:1e:c4:
6f:9e:cd:70:30:94:c6:3c:40:d7:03:35:6c:e7:ff:61:10:cc:
90:bb:68:ac:c7:51:02:d3:5c:f7:45:fa:4c:76:6e:1d:ae:5a:
2b:a6:cf:90:2d:70:c5:87:07:2a:87:d4:57:57:94:e4:69:d5:
f9:41:6a:87:b1:32:24:bc:50:f3:c4:46:92:dc:f2:0d:ed:f2:
c2:5b:2a:10:b4:e7:03:ae:72:c8:7d:ba:6a:88:ea:45:58:24:
ca:fa:42:fd:fa:18:42:8d:1b:c5:9f:99:4b:92:4c:68:bd:cb:
83:b2:74:b5:05:85:1f:a3:a0:9c:bb:5e:b0:1b:b7:99:84:76:
a7:16:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:01 2025 by rpki-client