Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: OqqOafeksGJHt+y2lmbWCgTRUCbcShIJqsXWurAQ+4I=
Subject key identifier: 91:D9:76:63:2F:53:59:5D:84:9E:C1:88:E4:98:30:71:A1:4E:3C:B6
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 01985532BF72EFF758FEEB1DE84F2567466F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 1524
Signing time: Tue 29 Jul 2025 08:00:45 +0000
Manifest this update: Tue 29 Jul 2025 08:00:45 +0000
Manifest next update: Wed 30 Jul 2025 08:00:45 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: bkDdk1WqqzcNd27JNO7j0UE+jOPXohxmyZSJdIiGx4o=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:bf:72:ef:f7:58:fe:eb:1d:e8:4f:25:67:46:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jul 29 08:00:45 2025 GMT
Not After : Jul 30 08:00:45 2025 GMT
Subject: CN=91d976632f53595d849ec188e4983071a14e3cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:a4:f9:84:48:6c:19:a0:70:48:bd:d1:ee:
2d:37:e9:80:9e:0c:10:77:c8:16:8b:90:d4:c8:e5:
d7:6a:e2:2f:a6:b7:15:0e:15:9b:86:af:f4:9c:03:
e1:90:b3:cd:f9:79:0b:7e:6d:0d:52:b6:a2:23:79:
fc:4b:e2:0e:66:69:76:af:26:72:de:32:e0:41:0c:
cd:f5:d2:a2:51:4d:12:aa:49:b1:98:96:dc:02:5f:
96:9a:4c:b2:5b:1c:8b:5c:cd:0e:da:07:48:66:6b:
46:71:2f:bb:e2:43:1e:9a:65:01:cc:57:d2:e0:9b:
77:05:54:7e:bd:22:58:73:7f:e5:e4:de:a1:80:cc:
f1:42:c5:aa:f1:e3:e0:d2:7e:fe:64:05:e2:8e:67:
c3:3b:15:b5:38:b2:4a:3b:f8:58:97:c9:db:cc:7a:
ed:1e:58:7d:02:98:97:fc:68:08:ce:cd:ec:14:27:
ca:04:93:f1:3c:08:fe:63:81:d5:32:c2:d9:d8:33:
7f:cb:3c:bf:89:28:22:70:93:fe:6b:35:f0:9d:45:
0a:17:c9:23:82:67:6f:97:94:2d:45:c4:c9:09:1d:
b3:60:06:da:60:c1:ca:9e:b0:22:8e:cd:32:77:4a:
86:8c:74:3c:6b:7c:28:15:c7:a7:d2:72:d4:f1:5c:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:76:63:2F:53:59:5D:84:9E:C1:88:E4:98:30:71:A1:4E:3C:B6
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e2:62:8c:24:1a:db:9a:fd:5b:27:bc:c0:8c:89:0e:b3:f5:
7d:05:de:06:ce:c3:8d:41:9b:07:42:82:fb:d0:ed:95:67:7b:
ec:41:09:f6:e4:b6:ee:52:82:3c:62:41:a1:eb:af:9b:1b:de:
cb:c5:36:7b:cc:03:9d:3e:54:f2:f8:c5:a5:21:41:f7:80:6e:
ca:65:e1:fd:0d:a1:28:e1:a0:0e:a3:19:77:0d:33:7c:a0:f3:
5c:07:2c:04:fc:08:f1:4a:ea:a8:b8:eb:bf:90:0c:29:70:c5:
1c:ba:7e:a4:25:25:3e:3a:fb:49:36:07:9c:ec:f2:34:99:87:
fc:e2:96:da:df:5a:96:2b:41:fe:c3:6a:69:bd:af:61:bf:a4:
0c:63:e9:4a:8e:3f:d8:4e:b7:54:8e:eb:84:0f:85:bc:19:91:
7c:56:91:d4:07:4f:48:c2:17:01:6e:f0:1f:8e:42:f4:01:56:
fd:66:00:16:58:73:a6:70:0f:91:a1:6c:7b:26:a4:64:0d:2b:
d1:e6:07:af:43:5a:fe:57:cc:7f:6d:e4:1c:69:25:bf:f4:ee:
12:d4:12:dd:8b:17:4b:d9:f2:c3:1f:49:ae:f6:f4:4c:c2:6d:
d5:5d:56:8a:52:08:e3:cf:a0:5d:c4:dc:ed:30:68:0a:6b:cb:
4e:89:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 15:17:53 2025 by rpki-client