Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File: sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier: nl9oPXmTXy9cUk9hlNWHdmYjTHREs9GlYAsqGlkUY2g=
Subject key identifier: 7B:BA:CE:50:D2:31:59:63:09:B9:3A:E2:27:F7:21:E1:41:C6:B0:4D
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial: 0199FB7C6E75FE267F5FF59B079F1A342CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number: 15C6
Signing time: Sun 19 Oct 2025 08:00:59 +0000
Manifest this update: Sun 19 Oct 2025 08:00:59 +0000
Manifest next update: Mon 20 Oct 2025 08:00:59 +0000
Files and hashes: 1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=)
2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: kzcY5PhDKYfjtNikUFCL44gjPWlwFPa2Y5DER5Zmelc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6e:75:fe:26:7f:5f:f5:9b:07:9f:1a:34:2c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
Validity
Not Before: Oct 19 08:00:59 2025 GMT
Not After : Oct 20 08:00:59 2025 GMT
Subject: CN=7bbace50d231596309b93ae227f721e141c6b04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:07:7e:38:62:aa:d4:d0:17:f0:c6:60:60:
81:19:a8:1f:6e:e9:aa:bf:3a:b5:24:0a:0a:64:a7:
7d:f6:8b:51:5b:8d:4d:fb:2d:03:fa:b5:a9:35:8c:
f0:50:82:8e:54:6c:dc:03:5b:cd:36:12:c0:cb:85:
96:e2:91:d0:d7:24:1d:79:fb:12:e9:42:fd:53:42:
bf:a5:44:f9:3d:d9:64:1e:5e:1c:14:9f:f8:00:3f:
34:63:72:4e:af:8d:cf:e3:22:97:75:39:18:c8:c2:
d5:f1:83:40:57:71:70:b7:e4:f7:ae:01:e7:19:af:
e4:7b:3e:f5:20:e7:c6:e1:fa:74:f6:e2:c7:8c:23:
55:c4:5f:60:af:d2:c0:65:e4:28:d3:09:9f:1a:75:
ea:aa:4b:36:1d:4b:ad:7d:2e:a7:27:0c:5c:d4:48:
89:ac:80:ae:b6:eb:30:86:04:85:c1:02:10:ea:6f:
25:64:25:50:c9:55:80:c2:e8:ca:3e:b6:dd:31:02:
b2:b8:b3:a3:9e:c9:82:be:f7:d0:c1:79:64:91:eb:
eb:8c:60:51:d2:03:4f:38:d3:2f:ed:61:c8:65:02:
dc:0a:dc:39:66:a8:c8:af:99:2c:e7:51:8d:e8:69:
54:6f:a7:14:f1:20:b3:af:3d:da:0e:86:fe:c3:cc:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BA:CE:50:D2:31:59:63:09:B9:3A:E2:27:F7:21:E1:41:C6:B0:4D
X509v3 Authority Key Identifier:
keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9e:9f:8f:f8:9d:58:a8:d3:5a:46:db:02:4c:e3:93:bd:03:
a8:f2:70:88:30:b8:48:95:8d:71:13:2b:63:2f:f0:34:5f:1f:
80:4d:df:1f:db:60:03:1e:ba:d0:ce:92:cb:15:5d:4c:3c:d7:
2c:77:e7:22:f8:fb:2d:84:b0:ae:12:1d:eb:9d:46:20:0b:5e:
67:fa:ea:e3:86:3e:55:57:52:42:22:8d:36:89:f5:04:94:fb:
51:32:2a:71:8d:02:ab:30:93:42:0a:20:71:30:6c:a3:81:f6:
ca:d8:57:3a:8a:6f:65:45:e1:50:11:0f:cd:82:3d:94:54:da:
09:7a:b0:62:f3:a8:9a:f3:2c:40:18:e4:da:75:af:16:cb:56:
12:e0:d3:64:f9:ed:94:9b:2f:9b:ff:4e:83:8d:51:58:04:da:
92:a1:a3:8e:8c:b3:db:fc:46:6b:0f:95:33:df:33:7d:c4:a5:
2f:af:05:79:08:63:57:b1:2c:a1:ef:98:eb:51:86:d0:21:d4:
26:30:47:f2:30:29:a4:5b:f8:60:ad:c3:97:d9:a8:8b:59:a5:
e5:6a:cf:c2:df:22:82:78:cd:8f:1d:50:c3:5b:f2:36:92:b5:
0b:bf:cc:51:cb:56:b6:7e:b9:a9:fa:dd:95:8f:ab:00:a8:91:
c1:a9:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:25 2025 by rpki-client