Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: YHaRJqc6jQTOHsIPw78xa3VcE+guAPn2vMHjclU5W90=
Subject key identifier: 7A:97:9B:F3:0C:AB:1F:2C:B3:13:3B:B4:85:06:0E:21:A2:9E:EE:82
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 0199FBEC0475E9B333DD123A592000358A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 05FE
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: yWaLuGIv6gFc4jiZzXuAtBEsEHS74pJ8WnSd6vJlWGs=)
2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:04:75:e9:b3:33:dd:12:3a:59:20:00:35:8a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=7a979bf30cab1f2cb3133bb485060e21a29eee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:5d:3f:1f:70:09:b1:9c:ee:aa:11:c8:67:
b4:df:b3:b2:d8:a5:54:78:03:55:ef:49:ac:ce:6a:
e5:dd:93:24:f0:5d:9b:57:c8:b3:d3:56:bd:2f:22:
17:bf:6d:b9:40:4d:ee:56:52:51:0c:df:58:44:d3:
c1:3e:3f:5b:ee:e3:81:51:68:c7:d1:c4:fd:e9:36:
8b:fa:57:4f:0f:15:a0:4f:99:ef:4e:97:26:fd:64:
f4:2d:52:a0:5e:8a:b2:c6:00:08:cb:fb:12:8e:b8:
b4:e6:9c:96:dc:0e:af:bb:49:f3:b8:cf:a1:9b:65:
89:f4:52:9e:99:d4:d7:c4:2b:56:be:01:ac:2c:16:
df:82:95:4a:33:5c:7c:f0:c5:60:2b:c1:dc:9b:3e:
c0:21:23:d2:a7:df:72:aa:57:82:95:67:55:67:91:
1c:11:6d:30:64:c2:3e:cd:7f:6e:af:c4:85:e2:59:
3f:1b:83:67:33:cf:ce:f4:66:bf:e9:c7:93:a0:fd:
40:0b:8e:74:b4:81:cb:b3:56:b1:ec:eb:77:78:d2:
b3:06:83:d5:d0:01:90:a4:26:82:59:85:f6:13:9c:
d8:d6:46:39:97:b2:49:be:d3:d6:79:15:61:38:30:
68:6f:ba:5d:f3:b4:a9:9c:ab:c3:fa:a4:e7:38:7e:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:97:9B:F3:0C:AB:1F:2C:B3:13:3B:B4:85:06:0E:21:A2:9E:EE:82
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:49:fb:7b:a0:6a:af:a7:86:4c:9c:f5:fe:8d:36:cf:e6:b8:
e1:22:2f:ef:12:1d:de:d5:79:d2:c5:96:a5:0b:41:81:83:6b:
19:77:51:ca:69:f4:7c:67:0c:4f:f5:da:f7:66:fc:97:f9:8d:
34:a2:da:6d:e4:dd:cf:f9:ab:83:4d:a4:05:d5:b0:5e:e5:86:
dc:78:31:e4:46:f6:44:82:47:ac:1f:f9:f5:99:76:02:bd:b8:
59:fe:6c:31:c8:aa:35:56:73:4f:4a:db:5f:f5:bf:85:55:a9:
18:76:e7:c2:f8:63:6f:e9:a3:13:35:13:ed:11:1e:60:92:04:
bc:66:d5:84:7a:31:b0:43:cf:92:4c:9e:62:94:10:67:70:d2:
9c:d4:54:6e:aa:21:92:e0:6f:12:28:35:09:b8:26:9b:7f:38:
b5:e8:a4:eb:9c:97:d8:80:3a:3a:b3:26:79:b0:ac:90:f6:00:
d5:f0:62:f4:74:8d:98:c7:b9:5f:e7:98:47:fc:6f:65:89:eb:
af:be:d9:07:79:94:13:81:5a:cb:5f:00:f8:a0:d6:6b:a5:42:
96:72:93:e8:6b:b7:b0:ec:fb:80:9d:91:7a:2b:1b:36:cd:b0:
f8:95:05:01:ca:ad:3d:d9:bf:f3:cc:44:f7:50:1b:f6:2f:5f:
7a:50:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:56 2025 by rpki-client