Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: tdu0qUvTuhi3TyOgbuoSs8vC9eHVofI/9p+pjv5Vh1w=
Subject key identifier: A1:22:2D:2C:8D:0D:F5:16:6B:E1:18:B5:70:6E:10:76:59:9A:FD:8E
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 019A28558B4F90C4DD4A2B8D0FC1A8E41C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 1676
Signing time: Tue 28 Oct 2025 01:01:26 +0000
Manifest this update: Tue 28 Oct 2025 01:01:26 +0000
Manifest next update: Wed 29 Oct 2025 01:01:26 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: 5cBzAiOOjtjTGPGM9rVfee8fgvgVl18kHv2hrKFv5IU=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:8b:4f:90:c4:dd:4a:2b:8d:0f:c1:a8:e4:1c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Oct 28 01:01:26 2025 GMT
Not After : Oct 29 01:01:26 2025 GMT
Subject: CN=a1222d2c8d0df5166be118b5706e1076599afd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:89:44:37:ee:1f:88:e5:d1:ed:ff:d5:82:
73:fc:84:b2:53:f6:24:b2:c9:4a:36:d5:ff:07:04:
a2:fb:74:cd:8d:08:3d:1a:1d:29:07:88:47:42:af:
26:41:51:d7:f3:9e:19:ce:23:0f:45:3e:9e:63:59:
85:73:25:aa:d7:b8:53:7b:5e:8c:71:4d:6e:d6:2e:
f2:26:b7:65:bd:3a:f0:44:c4:98:ce:4c:1a:76:39:
db:c6:76:66:df:66:1b:9e:92:c2:fc:8e:e9:53:ae:
5a:30:33:c4:38:49:6e:43:bd:fc:d1:b8:0d:3c:e5:
63:72:59:38:02:1f:50:1e:8f:24:e1:7a:96:a7:b5:
4c:d4:08:1c:c1:bd:c0:48:8e:a3:c7:c9:fb:51:29:
da:29:37:54:0c:43:ac:af:0b:0c:fa:5e:13:47:e9:
30:24:c9:82:7c:1c:fc:7f:1d:b4:19:89:7f:3a:c4:
2c:df:73:b4:1a:89:86:dc:2d:84:51:e9:d5:79:9d:
61:8b:70:b1:43:0c:11:91:0c:ad:dd:1f:16:76:9b:
47:44:75:35:f3:e7:5f:cd:31:94:58:72:4b:6a:a4:
a1:c8:40:62:59:5c:7d:b8:0d:12:7a:dd:06:07:68:
3d:dd:38:d0:d9:4c:2f:ba:f6:6a:92:91:12:49:4d:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:2D:2C:8D:0D:F5:16:6B:E1:18:B5:70:6E:10:76:59:9A:FD:8E
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:28:96:c1:5e:4f:e7:27:c5:e1:af:51:f5:c3:82:df:6c:6c:
78:55:ac:a6:78:a7:1a:a2:2e:7a:af:d9:67:c1:ac:33:aa:65:
0e:46:ca:a8:72:33:e3:18:8f:e6:3c:8a:7f:45:a0:7c:86:20:
5c:e9:7d:8c:46:a9:f0:8b:bd:c6:d4:af:08:5a:4d:b8:11:ca:
f0:34:98:79:f6:5b:32:56:a4:2c:00:09:b6:3c:f2:26:92:3c:
fe:98:6b:7c:bb:52:9d:fc:98:b3:39:51:29:d1:9c:45:63:d9:
00:6c:5c:cb:37:ce:0f:11:34:ee:92:d9:0a:72:c8:c5:4c:80:
72:c1:b9:4c:85:08:1e:76:06:11:17:10:a7:43:f1:37:04:af:
e7:24:1b:88:e9:45:a9:52:61:9b:f9:f6:f2:67:c6:89:1e:15:
1b:45:3e:f4:5a:6f:f8:fd:15:04:93:3c:81:c7:89:b8:58:fb:
77:fc:c4:49:4d:d1:16:7f:3b:3a:8e:9d:0d:18:8a:5f:77:09:
21:11:70:0e:0d:89:04:6c:85:5a:2a:a7:a1:91:ef:da:9f:06:
43:dd:2b:97:4e:c8:68:4e:a2:55:18:84:3a:13:e9:2d:82:49:
c8:dc:84:a8:77:e6:02:21:5a:ee:7a:7a:be:af:c6:e2:89:4b:
5f:f7:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:07:18 2025 by rpki-client