
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: DVwSGw2RXNhbU96oiKvukeMizi/EP/QmWdOyJMewLAs=
Subject key identifier: 33:87:6F:C1:9C:9D:66:B5:5A:FD:23:E2:BD:C6:24:1B:4D:FE:D4:06
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 01984B542C39830E9CF4C857D8727EA0BC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 051E
Signing time: Sun 27 Jul 2025 10:01:04 +0000
Manifest this update: Sun 27 Jul 2025 10:01:04 +0000
Manifest next update: Mon 28 Jul 2025 10:01:04 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: 5VlPCq1AYeCp46t/0iz29X5CLhHVZmvcDr5vQUdMwIE=)
2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:2c:39:83:0e:9c:f4:c8:57:d8:72:7e:a0:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Jul 27 10:01:04 2025 GMT
Not After : Jul 28 10:01:04 2025 GMT
Subject: CN=33876fc19c9d66b55afd23e2bdc6241b4dfed406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:fb:e2:53:7f:08:9e:99:df:63:0f:fb:53:
b0:5a:78:cd:d7:d1:cd:16:dd:7c:87:d5:ee:0d:fe:
4a:df:06:26:c9:50:e5:56:25:e0:42:7a:05:a4:8e:
fa:8d:03:a2:aa:3e:52:d9:7c:81:13:35:12:55:4c:
d7:e8:27:36:b2:89:8d:dc:e0:c0:33:6f:37:36:f2:
32:4d:50:28:c2:71:df:55:dd:24:1c:7a:e0:0d:d1:
2b:d5:5c:ce:85:05:47:66:38:f3:e6:df:f9:83:19:
e0:87:bf:e2:bd:e6:73:85:ab:3f:01:1a:7f:99:34:
86:2b:c0:26:59:23:1f:9b:7b:09:e7:28:d0:c1:24:
1c:36:e3:5b:76:ee:11:34:45:a5:a9:bb:2b:dd:f1:
e3:c7:75:15:f6:7e:e7:8e:ac:43:70:81:0d:08:34:
88:d8:bd:52:76:2a:c2:11:fd:f3:69:c1:49:a1:bc:
25:4e:db:f6:91:f4:91:23:bf:05:8d:ec:3f:e8:63:
0f:31:b6:df:57:fd:6e:e2:46:8f:b2:8d:02:9b:39:
4a:d7:7d:95:75:5d:4f:1b:aa:70:88:bf:79:16:e5:
fb:50:4a:7b:76:1c:56:21:f7:53:66:5d:99:28:d3:
56:d3:9f:e8:3e:99:1a:d8:a0:b9:ba:a7:97:9e:5c:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:87:6F:C1:9C:9D:66:B5:5A:FD:23:E2:BD:C6:24:1B:4D:FE:D4:06
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ba:b4:09:2f:be:22:81:d2:96:f9:da:2c:28:9e:86:cd:95:
13:e6:49:2b:f6:a8:0e:b7:8a:33:bb:a6:c5:42:52:03:67:66:
e3:4d:f3:68:13:86:c0:13:3b:ba:b4:cb:31:a4:d2:7b:36:d5:
fd:c2:b2:05:a6:e2:3d:0a:ff:fd:41:a3:0b:00:15:7d:9e:c1:
68:5f:b1:ab:bf:3a:79:0b:d9:b1:d4:01:24:02:c8:51:87:3a:
0b:d9:a0:02:60:27:5b:d5:72:6f:ce:42:bf:02:68:ff:f8:e6:
3c:58:3d:38:ec:47:4a:34:4a:95:2c:ca:b1:0c:f1:6e:1f:e8:
09:8a:8d:39:a4:b3:ed:3c:3a:81:bc:ec:8a:37:fe:c5:fd:33:
d0:dc:9b:2b:ae:93:51:46:93:17:78:a2:97:5c:8b:a4:62:5c:
ff:2d:c8:ee:8c:7b:66:13:1b:18:98:90:a7:21:2c:b1:02:1d:
ff:5c:2f:bf:10:1a:f8:46:f1:cb:8a:e6:6a:71:fa:95:c9:04:
3d:55:17:1a:b3:17:50:5c:55:4a:83:96:54:0e:5b:c5:c3:63:
96:61:cb:bb:91:19:93:44:0c:a2:5d:a8:13:f4:2c:49:18:08:
db:c2:17:a9:dd:61:9c:80:2b:96:fd:b8:fe:d7:59:a8:0e:81:
5e:bb:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:43 2025 by rpki-client