Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier: 9FcgrMrHj/M7+VHaxoJs0QIbo2rrcQnhgLObOmdwU8Y=
Subject key identifier: BF:0D:87:34:D5:48:D8:75:99:DE:57:7A:F8:8A:AF:52:15:22:F2:DD
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial: 0199239EEE043C3A1D39BA0EF88F5F810AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:00:42 +0000
Manifest this update: Sun 07 Sep 2025 10:00:42 +0000
Manifest next update: Mon 08 Sep 2025 10:00:42 +0000
Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=)
2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: JphWmejEdJdUoKiecV+GJBmpuQnCGre/WSF72xU58Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ee:04:3c:3a:1d:39:ba:0e:f8:8f:5f:81:0a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
Validity
Not Before: Sep 7 10:00:42 2025 GMT
Not After : Sep 8 10:00:42 2025 GMT
Subject: CN=bf0d8734d548d87599de577af88aaf521522f2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:50:1e:4b:87:2d:a2:6c:c5:24:75:20:b3:
54:ce:e9:a4:57:24:be:af:62:b7:b1:36:65:70:13:
e0:e2:e7:fa:f1:ef:a6:d9:0e:54:d2:fd:34:9b:59:
13:ae:88:45:39:f3:09:c3:80:d6:6d:88:3d:72:d2:
f8:bd:aa:a9:ef:8a:12:e5:ce:54:49:0d:70:d2:62:
53:68:e5:c5:35:5e:a7:29:61:f4:6a:0f:3e:b2:2b:
93:aa:7c:86:2f:10:6a:f5:9e:fc:b6:13:0d:40:36:
51:bd:70:f0:77:90:7d:c4:bf:7d:94:43:78:37:cb:
0b:7e:fa:1c:c7:62:79:a0:a6:49:93:27:bb:87:00:
50:a8:11:87:bd:c6:dc:dc:a6:df:72:4d:d3:b7:54:
f2:49:66:6d:2f:f6:20:da:9c:2b:9b:2b:8c:15:75:
c4:1f:f1:19:62:f9:1d:84:b6:99:c8:7d:9b:f3:7b:
9c:63:71:44:5c:00:9b:3b:10:72:d2:e4:78:83:5b:
7c:dc:7c:85:ed:9b:73:4d:55:b9:33:f5:56:9f:75:
97:87:f6:0c:85:4c:9b:c2:79:f6:6c:2c:f7:3c:21:
99:ef:7b:20:e6:a4:4e:3b:80:79:23:97:80:34:0c:
ad:d6:06:8d:86:25:1a:5d:88:3a:74:6b:cf:3a:25:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:87:34:D5:48:D8:75:99:DE:57:7A:F8:8A:AF:52:15:22:F2:DD
X509v3 Authority Key Identifier:
keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:13:8e:bb:62:66:2f:66:00:81:20:29:38:ee:09:ea:48:d5:
fa:17:e1:b8:3f:70:a7:3b:16:11:c4:7d:c2:18:1a:58:c2:4a:
11:5d:18:60:32:cb:ab:d2:c3:6d:c3:ee:fc:96:a3:7a:0a:09:
2e:e6:9f:eb:8e:ce:f4:12:1a:8d:85:65:b6:2b:77:8b:30:36:
f9:4c:67:0e:fa:97:23:24:ee:02:e5:3f:96:eb:b4:93:a1:14:
b9:bd:de:ff:71:b8:f6:ad:4a:c7:8e:0d:b0:8f:f5:e1:1d:0e:
1e:24:bc:a2:5c:bd:06:b9:5f:21:fa:6b:7b:e9:17:f2:01:d6:
6b:23:23:80:61:2c:2f:71:20:82:08:2a:40:ae:0c:99:e6:aa:
29:e9:d6:ff:a9:d7:cc:04:b4:1d:99:5e:9d:c2:53:49:ba:eb:
43:4a:8c:8c:06:46:8c:89:ac:53:3c:a7:26:a3:87:be:a3:21:
1b:a0:d1:2c:17:ed:a0:ba:ae:53:ae:14:38:a9:29:93:f5:b3:
bc:e4:13:b4:1d:31:ca:36:2e:7c:1e:cb:92:56:f0:12:b3:3d:
58:53:12:9e:8b:8b:d0:0a:61:86:06:8d:3d:aa:1f:23:48:57:
6c:fd:3b:d8:23:f5:06:38:c4:83:df:d1:d3:1c:03:02:7a:43:
c7:91:9d:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnu4EPDodOboO+I9fgQq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDRkMjcxODhmZTUyNmJkNzI2MzY3MzgxOTVkMWViN2Y2
MDYzMzUwHhcNMjUwOTA3MTAwMDQyWhcNMjUwOTA4MTAwMDQyWjAzMTEwLwYDVQQD
EyhiZjBkODczNGQ1NDhkODc1OTlkZTU3N2FmODhhYWY1MjE1MjJmMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv9QHkuHLaJsxSR1ILNUzumkVyS+
r2K3sTZlcBPg4uf68e+m2Q5U0v00m1kTrohFOfMJw4DWbYg9ctL4vaqp74oS5c5U
SQ1w0mJTaOXFNV6nKWH0ag8+siuTqnyGLxBq9Z78thMNQDZRvXDwd5B9xL99lEN4
N8sLfvocx2J5oKZJkye7hwBQqBGHvcbc3Kbfck3Tt1TySWZtL/Yg2pwrmyuMFXXE
H/EZYvkdhLaZyH2b83ucY3FEXACbOxBy0uR4g1t83HyF7ZtzTVW5M/VWn3WXh/YM
hUybwnn2bCz3PCGZ73sg5qROO4B5I5eANAyt1gaNhiUaXYg6dGvPOiXwewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8NhzTVSNh1md5XeviKr1IVIvLdMB8GA1UdIwQY
MBaAFLJE0nGI/lJr1yY2c4GV0et/YGM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEt
NGQwMGQ2MDMyYWZlLzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEtNGQwMGQ2MDMyYWZl
LzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhOOu2Jm
L2YAgSApOO4J6kjV+hfhuD9wpzsWEcR9whgaWMJKEV0YYDLLq9LDbcPu/JajegoJ
Luaf647O9BIajYVltit3izA2+UxnDvqXIyTuAuU/luu0k6EUub3e/3G49q1Kx44N
sI/14R0OHiS8oly9BrlfIfpre+kX8gHWayMjgGEsL3EggggqQK4MmeaqKenW/6nX
zAS0HZlencJTSbrrQ0qMjAZGjImsUzynJqOHvqMhG6DRLBftoLquU64UOKkpk/Wz
vOQTtB0xyjYufB7LklbwErM9WFMSnouL0AphhgaNPaofI0hXbP072CP1BjjEg9/R
0xwDAnpDx5GdKQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:39 2025 by rpki-client