Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
File: SKGBKVSA9hv1hC13EvSV7CSacs8.mft (raw, json)
Hash identifier: DV+WHvC+kxzEfzdX36lJLbP60Qi42YZCaLoM07FZMus=
Subject key identifier: B2:48:66:77:79:94:11:82:8C:1E:C5:AF:06:44:FC:11:14:31:A6:5F
Authority key identifier: 48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
Certificate issuer: /CN=48a181295480f61bf5842d7712f495ec249a72cf
Certificate serial: 019A70DC849AA8B801A47D94CDF3718B9FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
Manifest number: 02B2
Signing time: Tue 11 Nov 2025 03:01:31 +0000
Manifest this update: Tue 11 Nov 2025 03:01:31 +0000
Manifest next update: Wed 12 Nov 2025 03:01:31 +0000
Files and hashes: 1: SKGBKVSA9hv1hC13EvSV7CSacs8.crl (hash: cAdYyGEDafGGBew+PWO6CIywYovyjyDgoHHzK1p7EIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:84:9a:a8:b8:01:a4:7d:94:cd:f3:71:8b:9f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a181295480f61bf5842d7712f495ec249a72cf
Validity
Not Before: Nov 11 03:01:31 2025 GMT
Not After : Nov 12 03:01:31 2025 GMT
Subject: CN=b2486677799411828c1ec5af0644fc111431a65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:04:2e:0b:ec:48:36:6a:7f:90:a7:03:97:
1e:af:cc:94:0c:2a:d4:ec:e1:38:50:a8:56:28:86:
9e:15:18:2b:d1:06:e9:dd:c5:4d:6c:a7:81:81:5c:
2e:2c:86:9c:52:ba:19:9c:e0:71:12:a5:7e:bb:35:
da:f4:e8:06:91:09:8b:e9:21:99:f0:c3:c3:3f:ad:
80:a0:56:65:02:b8:16:82:e6:fe:8f:f9:6e:20:80:
6f:f4:13:e1:78:9a:6a:11:6c:80:f2:df:00:c0:93:
e0:80:1d:8f:db:74:b4:53:e3:6b:ac:1f:f6:3e:77:
14:0b:df:b6:f4:44:41:d9:0c:75:d7:8e:52:75:5f:
e7:44:4e:43:86:35:b7:0e:c5:90:f7:29:1d:36:f5:
bc:ae:34:4c:c7:26:59:7d:c0:d1:81:00:c6:1e:5d:
0d:55:87:ef:18:36:7e:8c:25:aa:9c:af:50:9c:62:
11:1e:5f:dd:43:c6:0f:f9:09:c7:fa:5e:0f:8c:18:
71:e9:81:2d:12:32:e1:30:48:d2:68:c3:ea:15:65:
34:6f:fe:e7:72:53:32:c9:67:c1:04:96:69:25:b9:
48:6e:f7:27:57:ef:aa:6e:65:c2:4b:7a:e0:2d:4c:
a5:af:d3:7f:5f:28:87:20:9a:48:b2:27:f6:67:a5:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:66:77:79:94:11:82:8C:1E:C5:AF:06:44:FC:11:14:31:A6:5F
X509v3 Authority Key Identifier:
keyid:48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:10:23:df:dd:7e:c8:3e:bc:4c:3c:0f:43:33:7d:ba:42:2c:
07:1e:d8:85:5b:fa:f0:1d:42:5c:77:8d:4c:60:09:b2:0b:f5:
86:35:ad:5d:c9:a9:9b:d8:21:4e:12:6c:ea:db:06:ac:a1:18:
0d:7c:28:cd:06:1c:b9:b5:05:08:fc:fd:d7:76:25:d3:95:66:
81:72:2b:4d:7c:c4:0d:8b:9d:84:bc:8d:94:fe:11:ef:b5:04:
e4:d9:f5:9c:bc:d9:8d:4f:15:de:58:2f:96:cb:99:b8:12:f4:
41:bd:33:9e:76:49:21:4b:e8:cb:09:d0:ce:b1:ec:b9:75:88:
80:55:4e:07:57:37:f9:b8:af:67:6c:6e:6f:07:42:01:5f:00:
5d:65:bd:47:c4:f5:6e:ff:4d:19:42:81:eb:e5:f3:59:4b:b7:
1a:c0:f2:9c:72:d6:c0:46:21:bf:7d:e1:43:09:e5:9a:66:c4:
2e:4c:72:e7:d5:94:ec:a4:c3:37:fe:4d:54:9e:14:53:8f:86:
f5:d9:15:90:6e:ce:be:c9:5e:50:35:12:3c:f2:fd:7d:5b:8d:
25:88:6b:45:07:b1:7e:8a:f2:8b:8f:e5:45:90:7b:11:80:3e:
16:c9:3e:be:ce:8b:42:c5:50:16:0d:42:86:9a:2e:4c:c2:16:
63:de:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:26 2025 by rpki-client