Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: x5AqMEP+cRV+a+EpNT8rCFfAUju2zQ+NZPtB30SrxFY=
Subject key identifier: 30:6E:40:7F:08:5D:30:CC:63:CB:CD:89:12:90:18:A7:35:6B:FD:31
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 01992255641614A8C5D3E72E7E93F406DF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 03F6
Signing time: Sun 07 Sep 2025 04:00:45 +0000
Manifest this update: Sun 07 Sep 2025 04:00:45 +0000
Manifest next update: Mon 08 Sep 2025 04:00:45 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: djAl8b34c+Nbb0yhpTPzfnsfN/cr3bQb+UIU5+gw3LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:64:16:14:a8:c5:d3:e7:2e:7e:93:f4:06:df:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Sep 7 04:00:45 2025 GMT
Not After : Sep 8 04:00:45 2025 GMT
Subject: CN=306e407f085d30cc63cbcd89129018a7356bfd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:6d:cc:d1:1a:36:24:78:7f:e4:df:16:fd:
9d:41:20:32:0f:f0:e9:b8:72:b4:21:34:e5:aa:52:
f5:89:e3:65:48:74:11:b2:2e:a2:18:55:4a:5a:89:
ab:b5:f0:58:b8:d5:63:c7:c5:ec:54:58:c5:87:29:
98:b1:cf:0c:89:23:f4:88:05:74:d3:75:5f:28:27:
84:63:68:18:86:24:49:ce:b1:09:81:5c:40:04:29:
7d:34:8b:bb:7f:aa:4d:1b:bd:bf:4f:a0:6d:6d:e5:
ff:3c:7d:8c:9e:89:11:42:84:cb:d7:12:13:ca:e0:
72:0f:fd:2f:2c:cf:fc:7c:67:ed:a2:9c:e4:69:ec:
4a:4a:e3:bc:c3:21:3a:f4:2f:70:b2:47:6d:bf:54:
8c:7f:a6:44:17:fe:5d:f1:c5:85:ac:da:41:2b:1c:
b6:42:ba:aa:bf:64:ea:45:84:bb:c9:c1:1d:40:cb:
69:22:10:c4:f4:05:7f:63:af:61:5f:fd:81:29:49:
56:22:e6:ee:17:9a:29:46:13:06:23:49:1b:0c:30:
a0:70:dd:fb:d0:16:11:2c:c9:ed:8b:f4:93:2d:4e:
c4:ec:6a:d7:09:d4:f6:92:24:16:61:42:c8:94:89:
49:0b:b3:6f:42:ac:57:66:99:bf:a0:58:2c:3b:45:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6E:40:7F:08:5D:30:CC:63:CB:CD:89:12:90:18:A7:35:6B:FD:31
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:86:35:53:7e:6e:0b:cd:10:92:00:7d:ef:ab:b8:c7:30:70:
d7:23:f8:51:5e:43:53:6a:ef:e1:e2:08:5c:a8:20:16:38:9d:
16:25:e2:95:d6:b6:30:f1:1b:ca:32:10:45:5a:84:49:4f:0f:
2f:db:a7:b6:af:7b:db:36:db:c0:0c:97:47:c3:ca:4a:ab:4a:
c2:4c:43:27:16:18:67:61:fb:4d:9a:50:5d:66:7e:eb:dc:ed:
78:d7:9f:5f:8f:dd:da:a9:cd:f8:98:e8:0a:ca:df:bf:74:4b:
9f:2a:98:86:85:f8:1a:7e:4e:2e:8a:72:6e:ca:8f:04:7c:9e:
86:33:2b:a0:93:29:52:20:94:c9:6e:8f:35:14:86:7c:3c:9b:
6e:4d:61:d2:cb:fe:7b:18:77:4d:6b:74:d4:78:88:35:38:fd:
f8:09:83:50:5f:b4:14:b8:91:a7:6d:dc:a5:d8:54:f7:5d:53:
0b:d9:62:bb:44:02:ad:5e:6c:21:97:8b:df:a3:29:94:d5:2c:
74:9e:c1:72:53:90:8c:95:8f:de:8e:64:dd:7e:41:7a:09:31:
4b:a3:8b:fa:04:3b:3b:d3:24:2b:e7:25:f6:31:05:8e:8f:4a:
5b:8b:7e:1d:9a:31:20:e7:a2:33:86:60:da:77:d8:40:7a:d5:
df:01:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:42 2025 by rpki-client