
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: j7uH+SnvdAZ/tVwaGDiUQZzU2aTzycHJ3sTVo31fUbk=
Subject key identifier: 47:AA:A9:ED:E8:94:99:F0:1F:A2:D7:A0:96:E8:68:EF:F8:D7:2C:93
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 019848C089CB22246906AF3EC7BE611A7FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0EB3
Signing time: Sat 26 Jul 2025 22:00:34 +0000
Manifest this update: Sat 26 Jul 2025 22:00:34 +0000
Manifest next update: Sun 27 Jul 2025 22:00:34 +0000
Files and hashes: 1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: M/2tOh+lBSVLp0fwgfJm2s0lcydC5u1DhiD1FdY0k30=)
3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:89:cb:22:24:69:06:af:3e:c7:be:61:1a:7f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Jul 26 22:00:34 2025 GMT
Not After : Jul 27 22:00:34 2025 GMT
Subject: CN=47aaa9ede89499f01fa2d7a096e868eff8d72c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:f4:a4:38:4f:94:4c:58:6a:b0:2f:93:5e:
81:e9:9b:4f:77:45:d4:ac:84:74:25:ba:f7:cf:8a:
be:e1:80:33:0f:1e:05:d7:e3:df:0c:b6:50:36:9c:
af:12:31:51:ca:8e:ab:96:63:9e:8d:e1:17:e6:b6:
36:c9:30:53:7c:58:33:dc:df:73:0e:33:67:fe:48:
89:43:c3:36:a8:3b:8b:f7:aa:61:6f:9a:66:79:87:
9a:6d:1d:da:c3:fa:39:e7:07:46:16:13:3d:a2:f3:
9c:07:29:63:3d:18:c0:09:2d:14:be:5e:38:9c:9e:
0a:ce:82:ff:b3:ac:20:8e:d0:f8:ae:09:08:5b:c2:
b4:da:d6:24:df:90:3f:58:5b:e2:a8:5c:db:1d:09:
15:8c:10:48:ff:e8:1a:ea:a0:0c:27:9e:da:67:e5:
c5:52:89:d7:38:c1:a3:9c:c2:48:ee:da:dd:6f:b0:
c5:5c:1f:7e:8d:ec:05:23:bd:0b:1c:18:95:97:a0:
c6:cc:56:2d:87:20:38:e6:22:65:2f:dd:7a:7e:73:
07:fc:06:af:cb:28:b3:00:06:84:b6:df:79:d0:cd:
0b:cd:49:d8:e0:b5:13:5d:5e:7a:c6:da:4b:2f:30:
a1:4c:88:e8:af:36:78:fc:4f:05:21:4e:7a:e1:b7:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:A9:ED:E8:94:99:F0:1F:A2:D7:A0:96:E8:68:EF:F8:D7:2C:93
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:39:cc:a9:6b:4b:a4:e4:ea:9b:ed:b1:ff:b3:aa:3f:11:ea:
98:38:96:cf:6b:b8:ad:2a:00:ef:4e:b0:9c:d8:0c:98:9f:61:
09:85:49:7a:22:52:f8:71:e5:ae:b8:a9:8a:e7:69:0d:85:8f:
1e:aa:32:9c:8f:f6:da:cf:76:b4:4b:35:61:20:72:65:f4:ee:
da:c1:fb:c1:f5:06:2c:b2:00:47:f9:05:19:49:44:5d:a2:ec:
5a:3f:fb:46:9e:80:c1:4d:c6:23:16:ec:15:fa:76:e2:3d:c2:
f9:b7:01:e2:00:57:72:19:9c:4c:f2:4f:9c:2d:3b:14:18:80:
0c:3b:13:65:8a:2c:2a:e9:44:f4:6f:0c:88:7b:15:1c:99:67:
b8:e1:77:68:c4:13:54:f9:67:aa:57:df:cf:76:11:6d:ed:0f:
56:5d:81:eb:9c:6d:d1:06:65:e1:3d:33:7b:8f:01:29:11:be:
23:d7:1b:7b:08:4c:f6:91:0c:dc:bc:d6:05:40:f5:19:90:2e:
ba:0e:5d:7c:70:7d:24:62:14:58:7d:4b:c7:21:6c:73:61:9e:
98:d5:e9:a7:56:61:da:23:31:fe:11:b0:cf:33:ed:79:2b:a5:
c7:57:d1:49:3f:54:d0:c4:c5:53:70:80:1f:21:d1:fb:7b:b1:
d1:31:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:04 2025 by rpki-client