Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier: pRdEjaG5br0/qe+9L9WSCkOkcRSJRXHkCOHo+mXbWAI=
Subject key identifier: A4:60:96:36:E9:E3:F1:B3:82:31:41:86:DC:54:AD:19:AE:05:C8:E4
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 019A003538D47FA6938806075A712E081813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:19 +0000
Manifest this update: Mon 20 Oct 2025 06:01:19 +0000
Manifest next update: Tue 21 Oct 2025 06:01:19 +0000
Files and hashes: 1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=)
2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: ISHGaWoLWL2kHHGRiFWq5rCDJsJNcNE4O+ubqQBFAl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:38:d4:7f:a6:93:88:06:07:5a:71:2e:08:18:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Oct 20 06:01:19 2025 GMT
Not After : Oct 21 06:01:19 2025 GMT
Subject: CN=a4609636e9e3f1b382314186dc54ad19ae05c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:8b:26:07:eb:07:b5:c5:4d:e8:4a:ce:e8:
8e:bd:f7:67:ee:52:0c:9c:8c:76:16:2b:d8:38:18:
af:ce:29:9f:4f:d8:c8:4b:a9:72:35:93:b0:0e:e2:
34:33:11:88:99:79:02:d8:52:0d:0f:8c:a3:b9:f7:
4d:ca:6a:b8:a7:aa:28:84:24:ac:da:5e:00:07:b9:
08:94:93:37:b7:ac:a0:9d:8f:a3:3a:64:ca:2c:92:
03:0e:82:b8:03:79:89:91:00:1d:15:53:8a:7b:e7:
ee:d3:51:a2:35:ca:ce:8c:12:d9:5b:ee:10:87:c5:
a9:fa:74:05:ec:ec:ee:86:62:af:e5:e7:d7:50:ac:
50:aa:22:a2:19:c4:0f:c0:63:6f:cd:e7:48:37:94:
7e:a5:a5:da:77:d2:bc:ce:b5:21:29:df:3e:ce:86:
9b:d0:77:b6:a9:a4:5e:dd:d5:a7:db:0c:45:21:45:
39:02:51:eb:1f:a8:d4:d8:a3:6d:47:e4:9f:72:b6:
a5:7a:f8:e0:c7:8f:bb:69:aa:16:3b:e6:ca:04:42:
33:14:d3:39:d6:d0:1f:ee:75:87:f9:c5:5c:b0:51:
0d:2e:1c:a7:f6:f8:1c:e9:33:b6:a0:ca:c5:fa:1a:
9c:b0:f1:87:18:67:6d:f7:c6:bd:5a:08:f5:8f:b3:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:96:36:E9:E3:F1:B3:82:31:41:86:DC:54:AD:19:AE:05:C8:E4
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a0:e4:8a:26:8b:c1:12:c8:cc:b0:8b:1f:5c:b7:d3:3e:43:
19:d7:97:dc:64:6c:57:02:e8:a6:b8:2b:35:30:86:a9:81:be:
a7:e9:c7:b0:09:ca:f7:6e:fd:d4:a9:eb:9e:79:89:8e:f8:c8:
03:9c:37:fe:16:6c:87:95:05:56:d4:00:8b:01:8f:04:01:d7:
4b:d4:ab:98:45:46:c2:cd:26:e8:41:35:17:47:7e:64:8c:5d:
1e:51:4a:8c:4e:0c:98:4c:c2:64:1c:fc:b1:6c:33:da:49:fa:
a7:cb:12:da:22:19:dd:3b:2f:e9:d7:2d:39:72:b1:7d:7b:d9:
66:8a:e8:57:3a:c8:74:7b:f3:42:c2:4c:1e:23:ee:84:0d:f2:
46:08:94:af:76:1d:4a:01:38:35:75:fd:94:d0:5b:b9:46:c8:
81:85:ad:7e:10:a6:17:f7:de:3c:a9:6d:d9:9c:98:57:97:ce:
c1:8c:e6:09:0e:de:16:ab:9c:1f:e0:66:84:0d:68:ce:55:d9:
2e:26:67:d5:89:95:0d:80:7e:05:8c:ac:0a:69:c3:4f:71:e3:
e9:2c:56:0c:98:f7:22:39:d0:22:e2:94:bf:7f:4f:d6:d3:d3:
50:ec:54:0b:d1:fd:7f:02:3e:b3:d3:07:24:69:fa:cc:c8:d1:
4e:b3:59:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:58 2025 by rpki-client