Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: uh3relqRKSycOtr/xBG1KDbtcG15k3ac7uphfoAXEW8=
Subject key identifier: BA:A3:7D:5F:7A:D1:16:4D:51:30:F9:A1:AD:5F:BD:C8:01:07:DF:18
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019A71EEB60DBABB682BC7838A518D7DB23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 163C
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: TC+UOOQIKKWV+vJ1tl/hrZE71N/fV57N18sIfzS7D/A=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b6:0d:ba:bb:68:2b:c7:83:8a:51:8d:7d:b2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=baa37d5f7ad1164d5130f9a1ad5fbdc80107df18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:32:b8:54:86:07:ba:d8:e5:2b:24:0b:18:
c2:5e:1d:8a:28:cd:41:ca:e7:e1:5a:d1:2d:6b:ad:
41:79:c4:ba:20:5c:dd:27:e9:fb:99:79:02:fc:57:
35:31:1e:77:49:36:06:1c:d5:2b:5f:be:9a:1f:e4:
47:bf:40:3c:35:3c:47:65:66:d4:79:b3:6d:e9:59:
f2:91:c8:9f:58:07:d8:11:e5:aa:f8:f3:b4:30:eb:
22:e7:b5:a6:ba:a2:34:da:aa:b9:d5:ae:00:b3:8a:
33:6d:b7:4b:b5:b6:99:9f:96:7b:3a:2b:9c:a4:2f:
fb:3c:ec:1a:26:8a:ac:24:2f:07:e0:91:27:b0:ea:
25:55:9e:df:ce:fa:de:c5:f8:14:96:2f:5d:d8:6b:
3f:af:20:2c:43:79:11:02:4b:25:e3:af:9f:de:06:
96:2c:3f:63:33:50:39:00:91:50:65:c6:ba:85:ea:
b0:18:f8:37:4d:52:f8:4b:b5:46:f9:e8:ab:67:a0:
00:1f:24:80:ad:ca:c1:1b:cf:ad:10:e8:4e:f2:12:
8e:20:2b:82:31:97:64:b2:e3:d0:16:81:2d:8a:4b:
ef:ce:bc:5b:f6:db:8d:9e:46:a3:14:fd:e3:f3:b7:
15:ff:9f:bf:8f:b9:08:e0:9b:4c:df:bd:25:74:5b:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:7D:5F:7A:D1:16:4D:51:30:F9:A1:AD:5F:BD:C8:01:07:DF:18
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d6:04:d9:85:b9:d6:f6:95:b7:36:94:f7:f1:de:8c:4c:c4:
92:6c:ae:8d:af:fd:c8:73:c8:c8:ee:66:68:c3:ba:fa:89:e7:
03:60:64:1a:6b:56:87:cf:42:44:2f:da:3a:cf:fb:c5:de:75:
02:ab:99:12:d5:06:a5:4b:cf:b3:66:5d:c3:83:f5:e6:fa:a7:
5b:1c:67:d8:d8:79:10:16:d1:ea:b5:f0:02:09:17:0f:a0:b7:
10:70:85:0a:60:d4:f0:4e:e3:a8:98:67:36:0e:97:27:99:1c:
e4:75:d6:47:72:1c:eb:5a:76:cc:e6:4a:a3:a5:a0:92:16:fb:
12:86:f7:26:55:63:e9:c4:bb:b6:8a:d8:b0:96:fe:a3:72:00:
11:fc:a9:ac:5a:40:98:90:cc:74:42:eb:f8:a9:32:b9:8c:8d:
5d:1d:6c:fe:96:4e:fc:8d:3f:fb:74:20:a7:4c:d2:19:65:fe:
57:ce:8d:09:f3:cb:1a:33:ae:b9:ad:40:2e:46:d1:32:4e:f7:
ae:59:24:62:0c:8e:4a:b7:84:98:6f:53:97:ff:fc:ee:df:9e:
b0:9c:d7:a1:ae:c6:ef:b6:da:b1:9c:2d:b4:52:28:37:83:f2:
bb:93:42:d8:1b:3a:82:2e:ec:53:36:f6:fc:d1:9b:c5:d7:d9:
5f:d7:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:46 2025 by rpki-client