Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File: sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier: K9mj9rPemK/x6yYcHFHCXERf+uQWy9AsoiJL5Yl7fAc=
Subject key identifier: 6E:78:14:10:58:98:FA:65:77:4B:57:E0:10:D9:B3:9D:56:D6:83:68
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial: 0198D404C84F2226C8C29919A116DB5C1E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number: 152D
Signing time: Fri 22 Aug 2025 23:02:19 +0000
Manifest this update: Fri 22 Aug 2025 23:02:19 +0000
Manifest next update: Sat 23 Aug 2025 23:02:19 +0000
Files and hashes: 1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=)
2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: Tp8tfHXBxhf5ky1pntF8HbZZEIajbiIS9bCW4rlzRIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c8:4f:22:26:c8:c2:99:19:a1:16:db:5c:1e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
Validity
Not Before: Aug 22 23:02:19 2025 GMT
Not After : Aug 23 23:02:19 2025 GMT
Subject: CN=6e7814105898fa65774b57e010d9b39d56d68368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:d8:b2:16:2e:ea:3d:6b:79:3a:53:00:c5:
07:4b:5c:ed:3c:27:91:ff:92:03:13:c0:31:3b:00:
bd:e8:c7:85:18:49:0c:df:5f:44:9a:53:17:02:c4:
a7:20:e7:35:76:d0:7e:22:7b:3a:d6:29:53:71:ad:
3f:5e:93:69:16:ad:78:71:5c:f8:8e:40:b6:c0:07:
84:1e:e2:64:d9:0b:8d:5d:8e:d5:b6:b7:25:76:81:
9f:ff:3d:96:4d:11:cf:54:a4:e1:5c:82:8e:de:70:
f1:0c:a3:95:0e:b4:84:62:ab:8a:cb:70:7f:89:09:
d9:6a:01:71:34:13:e8:80:39:76:79:4f:4c:d0:11:
de:84:a1:57:19:e9:ef:b8:34:e7:30:a0:43:2f:f6:
db:db:0f:ff:ad:7e:b7:5c:92:cb:ef:5a:b0:cb:72:
c3:a3:d8:71:ec:8f:2b:9d:d0:38:c5:2c:d2:6c:11:
62:73:34:11:7d:04:00:c8:c9:a9:bc:d9:32:27:2e:
5b:e3:e4:6f:96:c3:41:90:98:39:5c:17:ee:4b:82:
02:b9:af:0f:e7:ec:bd:f6:d0:b5:ef:5c:b1:d8:b7:
ae:42:ed:49:19:3e:0a:b2:55:dd:e1:29:e4:cf:53:
6b:fe:26:51:f4:43:6b:3e:95:bf:e1:9c:76:29:84:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:14:10:58:98:FA:65:77:4B:57:E0:10:D9:B3:9D:56:D6:83:68
X509v3 Authority Key Identifier:
keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:59:eb:e8:56:b5:fe:42:76:2c:f5:be:d5:f6:72:e1:23:3f:
87:3b:cb:f4:31:8c:36:8e:e4:bf:db:d6:12:7b:f3:1a:96:5d:
ba:8b:7f:59:74:48:14:7d:08:8f:e2:77:cd:0b:f1:3e:97:aa:
5a:92:cd:69:23:50:59:23:1e:47:d0:77:b0:05:71:52:ad:37:
4b:6d:02:2e:3f:f0:c1:40:4c:c6:5a:8c:98:11:c7:65:bc:d6:
77:fb:c5:14:81:3d:cd:7c:db:4a:7d:08:99:f3:e1:52:41:91:
a5:83:3c:80:00:c8:2e:ea:f3:06:5e:01:41:57:42:4e:0b:ff:
3d:95:c0:f6:c6:9d:7e:4c:a4:48:03:7b:6f:a6:ea:14:ef:a8:
5c:75:f2:13:ca:2c:87:5b:10:9d:b2:97:75:7f:a2:f0:fe:af:
7b:6f:9f:2b:c0:ca:70:13:42:57:1e:34:2d:e2:a9:0a:6a:00:
63:b6:34:4f:54:d2:12:f9:4d:f2:e0:19:0a:7a:df:8e:85:d6:
08:7f:85:da:d0:f6:bb:e7:2b:88:6b:90:9e:ef:2d:44:d3:1f:
0d:a5:c8:2c:7a:7a:f3:74:b1:ed:e5:b8:e3:24:ac:e7:7d:f5:
a0:10:98:a3:ba:fd:95:3b:60:52:6c:db:43:f3:fe:e8:b9:cb:
23:cb:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:23 2025 by rpki-client