Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier: LTRIEtMknhs3ir01dwXS2/GR/0EdxcD8iS8lZe6XhOU=
Subject key identifier: 20:4B:9F:02:EA:1A:9F:B4:62:5E:97:BE:74:A0:16:4A:5F:09:8A:DC
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 01992255E11E4BFAAE76C0BC40AACA367EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 04:01:17 +0000
Manifest this update: Sun 07 Sep 2025 04:01:17 +0000
Manifest next update: Mon 08 Sep 2025 04:01:17 +0000
Files and hashes: 1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=)
2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: nwjBu753kgMTtVmF/nOCOQiHvdffkVm1m2m9ANSjddM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e1:1e:4b:fa:ae:76:c0:bc:40:aa:ca:36:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Sep 7 04:01:17 2025 GMT
Not After : Sep 8 04:01:17 2025 GMT
Subject: CN=204b9f02ea1a9fb4625e97be74a0164a5f098adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:25:55:1f:ee:8c:26:c1:66:ec:f1:46:ef:
e2:22:df:a3:fb:d0:29:49:eb:45:47:b8:f5:da:d3:
15:d5:3a:b5:05:b6:58:6c:9b:b9:f5:1a:b0:1e:3b:
7b:a0:f0:7f:59:f1:e0:cf:2e:48:e7:93:0c:f1:7f:
1d:94:ea:17:5e:88:1b:aa:97:be:ce:56:56:f1:28:
3f:ff:05:dc:7b:ad:79:76:35:05:94:83:d8:4c:80:
25:92:dd:06:7a:55:12:c6:64:2c:15:5b:58:ea:41:
ae:aa:a1:eb:37:c4:f8:d8:87:c7:df:f3:be:98:f5:
b7:0a:5f:3b:3b:b9:5a:c5:74:03:6d:74:65:9a:01:
3d:31:d2:ca:76:83:ba:0a:11:e2:d2:a1:59:0a:c4:
df:a9:fb:36:0d:45:6b:4f:79:0c:92:7d:8f:6f:83:
1d:10:21:9c:40:f8:c6:5a:73:52:ea:21:39:48:37:
84:19:22:61:8b:02:af:b7:01:8c:9d:67:50:72:fa:
93:88:54:a9:a1:2e:41:8d:ba:f3:85:9b:f6:e9:c7:
45:0c:b5:cf:f8:94:cd:70:43:21:7e:33:a1:8f:bb:
2f:6d:29:73:40:ab:73:f5:e6:3e:89:99:c1:19:3e:
2f:34:59:11:ae:cd:5d:e1:e3:33:db:83:0c:15:37:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:9F:02:EA:1A:9F:B4:62:5E:97:BE:74:A0:16:4A:5F:09:8A:DC
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:47:ec:4d:bf:5a:60:1c:24:16:a0:d9:8f:d5:1b:a2:20:18:
63:7b:91:d4:5f:8f:dc:b5:a9:f1:fb:20:b0:d7:5b:8f:e4:84:
f4:e6:8e:89:d0:bb:ab:14:86:2a:63:79:53:73:74:91:d0:00:
81:05:0c:3e:9f:08:24:fd:64:7f:0e:fb:94:bb:dc:db:b1:09:
83:35:81:d8:db:33:00:d6:3b:9f:a3:b2:ba:12:cf:e8:4f:73:
4c:ed:57:3c:33:43:cb:ae:af:16:4b:c2:f5:90:21:a3:76:58:
ad:2a:da:45:19:e3:09:21:9b:a6:a5:d3:54:80:46:a7:a7:18:
41:c5:e3:91:33:2d:11:3f:e5:be:d1:41:6d:25:ad:76:a1:eb:
89:ab:2d:f1:19:94:d7:2b:67:35:4d:4d:66:ac:b8:e6:e1:0e:
ba:23:cb:86:9b:55:3d:26:0f:81:6c:0a:2d:95:db:f3:f9:8f:
73:82:dc:4f:41:0c:25:21:38:d4:3d:54:61:17:e2:e6:72:e4:
42:b7:2f:b6:7c:9f:be:c9:24:51:ff:d6:47:c8:d3:57:1f:b3:
f0:c7:4e:1d:65:98:15:fd:8b:b8:1f:06:27:f5:85:da:a3:b7:
76:3a:d0:f4:2f:1b:ac:fe:b2:c6:2c:a3:c6:a0:09:ef:83:e8:
c8:80:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:44 2025 by rpki-client