Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier: nOZ6QbHXd+gp30MV9uAlHEtUUWSmyUlFBHbGORDZwK4=
Subject key identifier: 03:A4:56:79:CB:93:6B:22:55:18:9F:34:CB:54:13:97:F4:3B:1D:2A
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 019A714994342340F8C8D0F73EA7E7EB137D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number: 0703
Signing time: Tue 11 Nov 2025 05:00:38 +0000
Manifest this update: Tue 11 Nov 2025 05:00:38 +0000
Manifest next update: Wed 12 Nov 2025 05:00:38 +0000
Files and hashes: 1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: VNJPvfaJOPGS6bVRn9Ox3zTl3thfQ/jyxXRiH3iC80o=)
2: YWHB5SFom3PZ1H1nBp8hYONydPQ.roa (hash: vl5j8Bemgq1rdDQ2l7TbBx5NbkCDljfvRSq6QiMNiQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:94:34:23:40:f8:c8:d0:f7:3e:a7:e7:eb:13:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: Nov 11 05:00:38 2025 GMT
Not After : Nov 12 05:00:38 2025 GMT
Subject: CN=03a45679cb936b2255189f34cb541397f43b1d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:ef:4c:92:b6:a9:ea:6a:1c:1b:e3:70:d4:
cc:5d:31:fe:d7:d0:b4:b8:33:57:8a:1b:80:55:53:
db:71:a4:c8:4a:30:c4:53:b9:99:2f:b3:fd:0d:b9:
35:15:2e:ab:48:55:df:3e:34:ba:ac:ab:9c:37:3f:
23:9c:a0:5c:3b:13:4d:ac:c4:f0:01:8a:ea:55:70:
4f:1b:8f:64:38:ea:4a:7e:ca:ef:66:ef:32:78:75:
fd:f6:73:6e:3f:c0:59:d7:43:ae:cd:a6:48:5d:ae:
95:3d:1e:55:5d:7e:8a:81:10:1f:53:9e:38:60:a2:
45:31:cd:c5:77:a2:ea:bf:a8:05:6e:aa:44:65:f1:
cc:57:db:83:d6:3d:07:fc:e9:cd:71:76:5d:59:b2:
1e:ec:34:06:a3:eb:d2:fa:1c:b3:7e:91:65:92:fc:
21:28:6a:fe:de:02:43:4f:67:7b:99:b4:b9:c4:32:
02:eb:f4:b1:b9:0f:6c:5b:9d:3a:be:d1:fa:7d:0d:
37:30:54:9c:f8:c6:26:cf:56:db:f0:6e:62:33:9f:
d1:33:f7:ef:ee:09:8e:6e:c0:75:5d:e5:c6:04:f5:
cb:45:da:6a:ce:c1:22:5b:99:d1:74:c5:4f:49:8f:
7a:c9:72:86:4c:d3:35:13:47:d9:14:82:f5:5f:21:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A4:56:79:CB:93:6B:22:55:18:9F:34:CB:54:13:97:F4:3B:1D:2A
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:57:77:d4:f6:08:06:dc:65:1a:54:03:55:75:5c:16:04:4b:
e0:e8:16:45:a7:d7:04:f2:e0:da:7e:88:90:ab:1e:95:b9:64:
3b:79:06:ea:93:28:0e:0e:ad:e8:9f:99:a3:76:6c:f8:6a:77:
bf:ce:4c:61:9b:9c:92:3d:a1:06:a8:2c:cc:6e:e5:51:6d:4b:
ae:0f:0f:63:4c:92:d9:26:66:95:f8:21:27:6e:3d:3b:15:ab:
0b:a3:9a:a3:67:fc:98:58:c6:7c:06:0b:8a:37:d8:0e:09:98:
2c:9c:5e:0b:fe:bf:79:84:43:b7:83:38:fb:19:a6:2e:98:21:
0f:0d:c8:eb:b0:30:f4:1d:f5:91:c3:70:47:42:3d:61:f6:27:
5b:ac:89:7c:38:22:67:5d:c4:dd:c4:16:5f:fd:05:6e:65:e8:
d5:88:7e:4e:2e:ab:96:73:f0:f4:c8:f5:68:cd:92:14:e3:e1:
48:ad:9b:d1:97:e0:59:6b:b8:ac:56:a0:70:16:cd:3d:81:bf:
c2:4a:eb:d5:11:7e:01:43:08:cb:41:f0:d9:9a:aa:94:12:af:
6c:9d:1b:49:10:f7:69:e2:58:ab:ec:df:b5:5f:13:31:b2:57:
05:c1:35:14:07:71:f0:33:e0:7d:92:a3:15:f9:34:41:a5:c7:
32:fb:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:15 2025 by rpki-client