Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier: +i/+A9MhEx0kIm0kDyqFEgLy0ADIvjoslrlLWnCwnzo=
Subject key identifier: C1:22:01:AE:42:2D:38:AA:F7:CE:FC:F1:04:AF:5D:7D:38:1E:1F:99
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 0199239F94B94C699CA62ABFCD35C421557E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number: 0F6B
Signing time: Sun 07 Sep 2025 10:01:24 +0000
Manifest this update: Sun 07 Sep 2025 10:01:24 +0000
Manifest next update: Mon 08 Sep 2025 10:01:24 +0000
Files and hashes: 1: KSNAER4Mydp8HyU9sU8i1lEowuM.roa (hash: k7Cs9APUIR/QxVIdcXpLwc8DXRZq1n3B8dEj7Z0wTKs=)
2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: QPiHN/WHoi8UjUMcoi7yWcwjAgyN4VMPZF7cvIzs60s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:94:b9:4c:69:9c:a6:2a:bf:cd:35:c4:21:55:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Sep 7 10:01:24 2025 GMT
Not After : Sep 8 10:01:24 2025 GMT
Subject: CN=c12201ae422d38aaf7cefcf104af5d7d381e1f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:f4:b8:ae:2c:5b:bf:5e:4b:97:c7:b1:51:
16:4d:b8:bc:4c:31:5f:2b:e2:e0:a9:d9:c3:bc:d3:
d2:de:20:be:71:ad:d1:22:a1:08:b0:7d:f0:ec:40:
79:0f:04:3d:25:8f:e2:a5:fd:9e:79:59:13:da:6c:
25:d0:33:6c:af:f3:bc:eb:3f:7f:c4:c5:a6:f2:25:
38:b9:a3:7f:f2:71:9e:fa:d3:cd:12:1a:8e:4a:cd:
53:b2:6d:7c:da:59:21:30:22:0d:b4:8a:16:f4:5a:
94:f1:ea:5f:4c:9a:dc:38:95:4d:a9:f1:3b:0c:9f:
88:59:46:dc:e3:05:59:26:bc:1a:74:e0:1c:dc:15:
28:7e:16:91:79:50:98:ff:e9:5b:21:d1:37:bc:4a:
e9:89:eb:87:2b:8d:5b:0e:c4:ff:49:c3:9a:23:d8:
67:bd:85:fb:36:7c:6e:16:1c:f4:a7:f2:a2:13:b8:
7c:d9:41:0a:49:82:b8:51:7d:b4:c4:f2:1d:71:24:
6a:66:97:fa:c9:41:1a:0a:c2:e8:93:49:57:d3:33:
ac:e3:7a:24:26:88:1d:07:38:9f:22:f7:33:e3:51:
a4:dc:0c:2e:41:f8:e5:4c:99:a5:e4:e1:68:2a:78:
a0:a6:11:2a:e6:9b:80:74:05:af:b6:d0:a0:a9:b7:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:01:AE:42:2D:38:AA:F7:CE:FC:F1:04:AF:5D:7D:38:1E:1F:99
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:91:a5:4f:91:13:12:1f:d9:ab:22:c9:df:7a:f1:f9:82:ec:
1c:0d:38:e4:bd:c5:94:c2:99:86:1e:5a:47:8d:7c:bb:03:3f:
2a:ff:62:a7:03:67:82:c7:25:50:35:41:ab:f0:b8:91:fe:47:
16:be:d8:d0:4d:cd:4f:7f:62:32:22:68:36:f5:1a:6b:10:6f:
64:7c:ec:cb:72:45:1e:df:35:9a:67:47:c8:52:5a:34:bb:d6:
36:0a:43:87:77:d9:b7:68:f5:16:eb:29:38:b1:d7:06:d5:97:
49:42:4c:10:32:83:41:e4:40:a6:1c:1e:81:33:53:4e:6f:06:
3e:81:a5:0d:04:e6:74:59:44:d2:a3:b9:40:8c:44:2c:56:3c:
b8:6f:60:87:f8:df:c8:5b:24:e3:34:90:1b:0d:ed:61:ee:c9:
ad:f0:c5:9a:4d:6b:0a:09:06:0e:95:62:c8:df:fb:2e:fd:78:
3d:0a:e7:03:61:71:36:ec:c0:d6:47:33:dd:13:bf:88:ce:e1:
b4:1f:85:0f:24:01:0e:53:a8:b5:6a:dd:b5:d3:43:59:c7:ec:
62:a7:e8:23:78:0d:67:73:d4:55:de:34:ba:2a:55:9d:68:18:
61:74:fb:2c:29:a4:45:73:ac:fd:0e:0c:89:74:03:42:85:85:
16:20:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:34 2025 by rpki-client