Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
File: skFYMFfyBWPJOCuJTx_OrKVfvaM.mft (raw, json)
Hash identifier: uwnph9CBZT1GrtK/kzvhip73U7uJjf+3fTR+DdmGFAI=
Subject key identifier: 7A:02:D6:DF:AE:1E:A5:8C:11:B1:52:61:A4:0D:D7:F4:34:93:ED:28
Authority key identifier: B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3
Certificate issuer: /CN=b241583057f20563c9382b894f1fceaca55fbda3
Certificate serial: 0199FB45A85ECB4A3C77071EA317EE1AFE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 07:01:10 +0000
Manifest this update: Sun 19 Oct 2025 07:01:10 +0000
Manifest next update: Mon 20 Oct 2025 07:01:10 +0000
Files and hashes: 1: skFYMFfyBWPJOCuJTx_OrKVfvaM.crl (hash: 5bA0SVE0G7eINSef67f5jThhsRQ+4idKaApKV6JQ0G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a8:5e:cb:4a:3c:77:07:1e:a3:17:ee:1a:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b241583057f20563c9382b894f1fceaca55fbda3
Validity
Not Before: Oct 19 07:01:10 2025 GMT
Not After : Oct 20 07:01:10 2025 GMT
Subject: CN=7a02d6dfae1ea58c11b15261a40dd7f43493ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:f2:68:aa:74:56:e9:4a:46:63:bf:fe:a7:
2f:05:84:58:d9:40:bc:ca:34:7f:e9:d3:5f:2d:db:
bc:b5:c4:97:80:15:92:a3:2b:17:89:2d:7d:99:31:
5b:fd:77:79:58:fb:11:59:29:07:62:34:0b:f4:ef:
03:6f:f6:6b:a3:d3:5b:79:d6:8a:74:fc:ca:26:74:
5a:f6:d9:87:05:ed:b3:c5:9d:00:a7:b3:08:0b:bd:
11:57:c8:78:53:82:c1:91:99:72:b6:f6:91:50:25:
64:62:3f:66:b9:fb:2c:fd:4c:be:c2:c8:3d:48:15:
ad:c4:eb:ed:48:a6:7f:a5:84:0c:a6:35:f7:22:ed:
dc:f2:bd:b6:51:7a:a0:a4:4e:55:6d:fe:94:5a:b8:
d5:39:e6:98:17:4e:ce:ab:22:cf:02:4c:07:32:25:
91:68:ad:23:5b:8e:05:5b:6c:02:21:a3:95:81:6c:
d8:a8:f7:fc:35:84:b8:2c:53:03:3d:a5:47:43:2c:
02:b6:8e:48:de:e2:16:cb:8e:ec:2f:98:12:28:27:
fa:1e:7c:cc:3d:3a:e2:6c:3e:82:67:51:ea:ec:51:
60:79:d4:93:e6:0c:f3:be:b4:3e:c2:7f:a8:38:5b:
15:08:c3:c5:0f:c5:06:9a:20:31:ca:59:e6:d7:5c:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:D6:DF:AE:1E:A5:8C:11:B1:52:61:A4:0D:D7:F4:34:93:ED:28
X509v3 Authority Key Identifier:
keyid:B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:4e:91:c4:a0:85:c8:41:94:9c:c9:5d:2d:4c:b6:73:9c:
9b:ec:f3:c8:d9:99:3b:1d:7d:51:40:2a:9d:a2:1f:b1:94:57:
e9:4c:d7:b9:96:f0:32:99:93:2e:36:76:9a:96:9f:04:7e:77:
da:ea:c2:c1:07:93:8a:64:dc:39:99:8b:2e:0a:77:6c:48:4e:
65:ff:c6:3a:e1:72:57:06:6a:47:a6:cc:ec:91:08:89:e2:75:
7e:36:7a:c8:e5:95:c2:2f:3b:48:5f:06:75:99:62:0a:f2:ee:
20:d8:ea:cd:6c:b3:a1:09:9e:63:b3:02:b7:09:e7:56:c6:4a:
51:96:00:39:51:37:c4:63:43:ff:d5:4c:63:b0:81:81:88:99:
c8:a1:c1:9e:d9:d5:8f:64:94:66:64:30:e1:8b:0a:91:96:ca:
22:e9:7e:4d:24:88:78:13:cb:7a:46:a0:bf:5e:4d:94:64:7c:
7e:8a:5c:dc:0c:11:ba:d3:f1:eb:4b:03:1d:01:7d:76:49:72:
6d:9a:48:fc:5d:d1:fd:3e:3b:9e:86:32:5c:1b:78:86:bd:0a:
d6:34:3f:36:ba:15:66:f6:0b:47:af:d5:02:d2:39:9c:32:18:
2f:e0:de:47:e1:90:1f:97:53:3d:bc:60:a9:42:a9:ab:a1:95:
37:68:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:52 2025 by rpki-client