Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: mQYMfv4p733QmYW337PjIsiK4v+xcGZTqrZX50PtW5U=
Subject key identifier: FD:CF:C8:31:1A:18:99:20:DE:05:B5:0E:E6:0D:B2:8E:5C:19:30:44
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 019A7301BC104F226BC129D2EA1E2B33732C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 062E
Signing time: Tue 11 Nov 2025 13:01:24 +0000
Manifest this update: Tue 11 Nov 2025 13:01:24 +0000
Manifest next update: Wed 12 Nov 2025 13:01:24 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: 3IMHCfb2+vTrzdl4cJpdslxnGM59gxFQpkmA6SaCOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:bc:10:4f:22:6b:c1:29:d2:ea:1e:2b:33:73:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Nov 11 13:01:24 2025 GMT
Not After : Nov 12 13:01:24 2025 GMT
Subject: CN=fdcfc8311a189920de05b50ee60db28e5c193044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:88:f4:2e:e7:d0:f0:d9:22:4e:9d:e0:63:
af:88:51:83:44:9a:87:e0:c3:d5:ac:e5:e1:60:4b:
42:d5:b3:95:ce:f8:1f:99:02:ea:03:13:3e:6a:52:
2f:5b:c6:bb:e8:bf:1a:95:4e:fd:15:e5:51:a0:9a:
db:4e:09:7e:bd:e2:78:57:48:34:f1:52:5a:cd:6a:
61:16:fa:71:d6:ab:02:49:3f:3f:19:89:ad:0f:97:
60:88:04:49:20:af:09:5e:ce:3f:0b:67:03:1e:8c:
6f:e4:10:fe:8f:b4:8c:75:5c:1e:39:1e:7a:5d:ac:
94:b9:04:a4:ad:3f:54:21:9d:83:06:8e:66:0f:38:
52:6d:1d:7d:f6:c2:7f:2c:e9:cc:56:b8:77:d6:e1:
aa:f5:20:36:81:9d:f6:a8:58:84:e4:40:a0:2b:69:
f5:43:21:2a:54:9d:87:47:01:24:a5:ae:9d:c2:54:
78:6d:85:df:06:f3:ef:7f:90:d3:90:59:e3:20:c4:
09:60:f5:27:34:d2:d4:3b:a2:01:7d:77:ac:63:b4:
a4:0a:f7:5a:cc:6d:da:5a:79:4e:02:87:e7:36:e0:
ef:23:32:8d:91:d4:65:33:06:c4:e8:51:be:6b:5d:
72:45:e6:0b:8a:18:55:6b:93:f4:2b:21:2e:aa:ef:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:C8:31:1A:18:99:20:DE:05:B5:0E:E6:0D:B2:8E:5C:19:30:44
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:ba:c1:3c:7a:e2:4d:1c:23:9f:b5:0f:99:af:7c:4f:5a:
17:d5:4c:d1:20:f8:29:ee:e8:a5:b9:50:5a:76:e5:12:2b:7e:
1f:96:24:f9:1e:32:35:d1:35:3f:f4:c4:51:13:eb:7d:b2:b7:
28:81:3b:5a:be:40:1c:f3:8e:8d:49:6a:a9:9b:0d:78:d7:5e:
52:ba:d4:b1:10:6d:37:c9:b6:11:eb:3a:77:7d:ba:dc:94:1e:
ba:9a:24:75:bf:67:52:e3:87:11:eb:ac:74:92:b9:4b:a6:ab:
98:5e:11:60:43:4b:ed:f9:29:f1:03:c2:f6:b0:72:fb:c6:55:
ce:57:2f:35:dd:41:06:fb:6f:ff:77:f6:45:47:a3:cd:1f:f0:
80:c3:2a:fe:a6:04:04:26:2d:9e:ed:c5:d5:3d:08:10:c0:c3:
bb:24:bd:d0:cb:f6:48:53:50:45:0e:5a:f5:ce:d5:ca:db:2c:
12:43:b9:b8:b9:d8:bd:bb:b0:fb:3c:29:53:23:b5:54:1f:69:
39:30:b5:39:d3:2d:8b:cb:c4:a8:c3:4d:e5:19:68:3c:fa:2a:
d7:f2:bd:3d:a5:0d:2d:4b:5d:51:bc:90:7a:5d:0d:29:2a:ed:
bb:0d:92:7d:27:37:62:a2:92:df:03:de:be:61:01:d5:e7:e4:
4e:09:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:01 2025 by rpki-client