Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier: pr/uF04yJMHapZGxm8OAxVnTjF9WUpC/vBjtOVCHFPM=
Subject key identifier: 7E:A4:FF:66:72:88:C6:B9:DE:70:3E:D9:74:36:01:01:39:13:2A:1D
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial: 019A71B92795C630B5DB1238062C09A44D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=)
2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: 9s5PmKSb9pSsun0PIQrf3xEg88aOHBNk+w9jgerDw9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:27:95:c6:30:b5:db:12:38:06:2c:09:a4:4d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=7ea4ff667288c6b9de703ed97436010139132a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:0b:54:0a:ec:00:45:79:76:30:19:59:4b:
c3:ec:b7:5d:38:4f:a4:f7:cc:72:08:53:43:f3:51:
af:3c:f0:7c:53:6b:36:ab:b4:8c:e4:f7:b1:7e:28:
98:4e:5d:e1:74:c1:8a:6b:bd:a5:1c:6c:12:08:1a:
5a:19:e6:d2:8b:5d:f4:ef:99:a9:ae:9a:e8:51:d2:
57:8a:59:6d:ca:50:3f:ad:db:5a:84:97:97:1a:6e:
8b:7b:7d:98:6a:39:8a:7b:07:60:18:06:e7:a8:0c:
7f:56:0d:ba:ab:93:34:50:cf:02:26:33:7e:3f:c4:
40:5f:93:83:d6:21:b9:05:01:49:4c:b1:18:29:31:
b7:31:df:12:61:50:34:32:01:03:51:4c:dc:b0:42:
6c:c9:5d:3f:4f:ed:ad:87:8d:98:f3:e2:7c:c6:82:
63:0d:00:f6:1b:24:f0:ef:07:bc:a0:bb:fd:f7:48:
10:3a:be:86:23:41:00:fe:1f:f6:3a:d7:8e:61:dc:
a2:1f:c8:bb:c0:9b:c1:4d:4f:c0:32:54:e6:71:c3:
65:7c:bf:a1:61:fe:06:52:95:44:d0:40:43:a5:d4:
cd:7c:84:50:57:bc:bb:44:ad:af:94:cc:8e:6d:bb:
b7:be:5f:74:af:e6:8a:de:a9:35:5b:b3:58:57:64:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:FF:66:72:88:C6:B9:DE:70:3E:D9:74:36:01:01:39:13:2A:1D
X509v3 Authority Key Identifier:
keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:15:28:4c:35:71:00:fe:21:a4:8e:51:bb:25:8c:32:06:1a:
a5:7d:a1:64:88:13:c9:bd:e4:75:62:c3:84:d7:9f:a0:7a:a7:
02:f5:59:e3:47:e2:71:83:7b:3e:30:7f:ff:9a:93:08:e0:b7:
c1:14:7e:4c:75:d3:04:1b:81:73:75:29:67:9e:7e:db:88:e6:
2a:7a:c4:dc:6c:8d:65:25:7b:d5:70:b2:7c:51:1b:48:7f:c6:
fb:c2:08:5d:af:01:1e:49:6f:22:f4:b7:5e:75:49:82:76:f9:
2f:1d:00:26:2c:f3:e6:dc:58:3e:de:5c:f0:58:91:e7:e7:fc:
ee:7a:20:90:81:34:9b:c4:0c:71:f2:97:de:97:33:39:b6:cc:
66:a4:0b:74:e7:63:da:1f:dc:ff:af:f1:c0:8e:bb:e5:5d:23:
c8:13:c4:88:15:64:83:81:ab:a0:10:c2:c1:d8:ec:ad:a4:4a:
7f:7a:11:00:aa:0f:94:67:a3:6d:03:b3:0b:38:a9:51:52:10:
2d:f8:cc:21:be:63:32:62:0a:8b:9a:94:7b:6e:b1:a3:b8:cf:
1b:89:67:d1:20:1b:2c:83:4f:d8:d9:5c:30:43:04:99:15:cc:
84:a0:b7:a5:39:f0:b3:0d:93:3c:17:d1:7b:98:57:ed:76:75:
7b:6d:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:00 2025 by rpki-client