Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File: B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier: NpfzuHX0a17jGQ9cmlMukJjJKBVYosulWgnl62IIejw=
Subject key identifier: 8D:B9:10:63:AF:4F:2C:5D:C0:3C:6E:68:61:44:80:6E:EA:79:FE:7A
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer: /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial: 0198D7738CC5209091DC4ABEB28ED8F45BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number: 04A6
Signing time: Sat 23 Aug 2025 15:02:10 +0000
Manifest this update: Sat 23 Aug 2025 15:02:10 +0000
Manifest next update: Sun 24 Aug 2025 15:02:10 +0000
Files and hashes: 1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: iAb443e5vl3jxPEmFuxJ9DdgOUnqS4nPnJjLMWbHgLk=)
2: jvHRud-0bfVZE35uo3ytxWpEsiQ.roa (hash: /JbTDkFvtTl5SlOmgYIpMzTAuGjpF4dmP37OC1pKU5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:8c:c5:20:90:91:dc:4a:be:b2:8e:d8:f4:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Validity
Not Before: Aug 23 15:02:10 2025 GMT
Not After : Aug 24 15:02:10 2025 GMT
Subject: CN=8db91063af4f2c5dc03c6e686144806eea79fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:a3:30:cf:5b:7e:fc:b5:ad:67:cf:f8:93:
38:7f:7c:ba:11:0f:06:ab:ec:af:9f:68:6f:80:e6:
d9:37:39:45:aa:b6:6f:bd:ec:59:ad:62:4c:b3:9a:
a1:f2:d9:4f:ae:92:cc:8f:94:60:84:65:ea:14:84:
79:f0:82:e7:1e:4c:c5:b2:90:cc:3e:6c:0b:7e:ac:
b0:4e:99:87:5f:ca:ad:e9:3c:ef:b4:dc:8d:f9:87:
e2:22:dd:63:4d:a9:0e:d0:a1:fa:48:c3:30:86:61:
3d:47:60:0d:27:e1:df:0b:ad:ec:40:8d:3a:b8:50:
be:85:11:ef:8a:61:c9:93:d8:76:04:2e:17:b9:ed:
fb:f7:fa:b9:fe:df:60:6a:db:a1:69:42:33:13:ed:
65:2a:5e:e0:96:7c:56:f0:8c:a0:a8:f0:18:4a:6d:
7a:73:4e:8b:fb:f6:f5:1b:c9:18:18:1b:46:59:6a:
f7:7c:c2:fa:2e:e9:62:26:b2:9d:c2:7b:3a:0d:fe:
e5:4c:8a:28:8e:7b:bd:1e:f8:03:c9:2b:92:0c:e6:
b9:e2:5a:65:89:72:6a:99:30:d7:29:63:82:cc:cd:
92:29:22:81:ec:e0:d0:7e:2a:b9:2a:fe:1d:dc:0c:
07:53:b1:14:f2:c7:cc:39:b7:9e:6d:e8:fe:3c:b1:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:10:63:AF:4F:2C:5D:C0:3C:6E:68:61:44:80:6E:EA:79:FE:7A
X509v3 Authority Key Identifier:
keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fa:3f:e8:a8:83:eb:4c:89:89:14:ff:72:da:08:83:e9:b0:
b7:de:c9:d6:c9:f2:7e:51:a2:8c:7e:d5:ae:b7:85:f2:29:8f:
8f:2b:30:2b:a4:7c:b3:92:5f:f9:0e:9d:a8:90:83:68:43:96:
a9:90:66:49:ee:31:d7:d7:53:3f:df:9f:61:f7:03:01:95:46:
f8:18:ba:96:e3:14:c7:ec:99:71:60:74:7a:30:e3:fa:f6:4d:
90:fb:df:71:56:8b:7f:28:70:b4:ba:fc:86:2d:d7:b5:25:3b:
ad:6c:f3:f3:6b:79:d0:c2:7a:21:06:8b:ed:18:d8:03:9c:fd:
ce:e5:d7:40:fa:e4:4c:5b:ce:44:cd:04:ac:d4:4d:9c:ad:a1:
f3:f0:d4:38:f1:e2:9c:8e:8d:69:d8:a0:07:aa:85:74:8b:33:
2c:1b:a5:39:5f:c6:ca:e4:5a:aa:bb:49:db:fe:36:cd:de:03:
26:f8:c7:aa:3f:f8:da:40:8d:2b:9c:5e:07:f8:15:d7:62:c0:
60:17:c6:cb:80:f2:30:0d:f7:eb:52:03:8b:a3:85:2c:0c:fe:
1a:05:a3:3e:c6:fb:ca:4b:d4:03:6a:98:6b:31:00:9b:ed:2f:
9f:30:d0:05:ed:35:08:fd:5b:c2:7a:f1:ab:09:5c:1a:16:37:
ce:ef:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:00 2025 by rpki-client