Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: kjvJNec3h05/KaJyndlvuv7x7xxy5Zl/01iH+ccViss=
Subject key identifier: BB:A2:4D:DA:D8:8A:36:90:AE:F2:70:14:A0:E2:E9:9A:7C:58:B3:BA
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 0199FC21C2AC2083A2E5A419CAE0D5FE2E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 0139
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=)
2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: dDeBqyY4f0h2gf6lu4bDMdyjrdsEvYoPq9KIll3P9/A=)
3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c2:ac:20:83:a2:e5:a4:19:ca:e0:d5:fe:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=bba24ddad88a3690aef27014a0e2e99a7c58b3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:42:a8:a4:d0:d0:7d:26:7f:96:85:4f:48:
85:2a:d4:2a:74:2a:8c:ed:22:ce:a6:92:6c:c1:86:
c7:a5:f8:1c:ee:c1:09:42:78:03:c3:82:13:39:45:
35:d2:c6:44:d5:3d:57:7e:c3:19:ff:8f:5c:c6:66:
96:cb:11:26:31:33:5b:da:08:41:cb:e6:8d:32:ed:
57:94:cf:54:fa:b4:0f:f3:56:34:d3:80:a3:20:48:
40:02:91:48:53:54:c5:d1:7f:9b:55:2f:69:7a:2e:
c8:93:52:a9:f9:a8:16:65:df:4e:59:c1:ff:35:fe:
31:98:e7:ab:73:87:5f:4d:b7:77:20:ec:08:dd:48:
65:ec:fa:ab:74:f2:05:f3:0c:e3:2b:9b:12:19:4e:
b2:02:39:5c:87:d8:13:ee:1c:32:99:ac:82:a9:c2:
2e:65:c4:cc:ea:3f:ea:a4:59:ee:8f:4b:27:4d:c8:
06:08:1f:d1:cf:2e:d8:29:df:02:58:07:ec:b3:d1:
fe:34:43:9a:0d:36:1f:95:2d:6b:c4:e6:83:95:28:
75:9b:0b:0e:d3:17:5e:d6:3c:9e:cf:5e:4e:86:ed:
31:89:66:c5:39:aa:19:06:03:0c:18:19:91:d2:39:
ef:a4:d2:89:0a:25:a5:d6:3f:3d:d6:fe:19:9f:d6:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:4D:DA:D8:8A:36:90:AE:F2:70:14:A0:E2:E9:9A:7C:58:B3:BA
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:35:b6:70:9c:35:ca:9a:57:4e:de:30:54:c2:0e:22:0c:40:
8e:e3:2a:c7:0f:69:37:76:3d:86:af:21:75:a8:b0:db:32:76:
76:aa:83:54:e7:b1:e9:a4:91:45:9f:2a:e0:d8:0f:53:25:91:
14:70:87:e1:32:76:3d:93:18:b5:25:8a:38:6d:12:69:5e:e9:
69:c2:76:43:51:93:9a:61:66:b7:e4:40:27:7f:6e:9b:a9:94:
93:93:0c:ea:df:fa:a1:a4:67:14:db:c8:d5:64:e2:8c:ce:0b:
36:6d:5d:18:0c:7b:12:92:ee:7d:cf:be:66:4c:a0:97:40:c1:
de:05:07:e6:aa:25:e6:54:d9:58:36:87:2a:c9:43:b4:f7:9a:
38:73:95:33:26:a4:c9:87:1d:b3:21:ee:0d:a9:bf:4e:7e:e8:
8c:1a:27:65:d9:69:64:54:b5:21:71:2c:1e:6f:9a:76:43:f6:
11:1c:37:c7:4c:e5:b0:aa:49:74:f7:7a:6d:19:a2:34:ac:f3:
23:5b:a2:7c:96:44:91:1e:70:ed:5a:fe:7e:93:5e:08:b2:49:
66:47:2a:43:b1:d5:57:ad:d0:e0:9c:fa:dc:cd:7e:cf:7b:6a:
94:fb:e3:b4:a5:ee:6d:01:af:ad:ee:d6:7c:ca:6f:f9:09:90:
f5:e1:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:15 2025 by rpki-client