Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: g8vM8ZCdK423MHRDJpmqZgI3HG8a/XXVBGhA87kpUvw=
Subject key identifier: D3:48:41:A3:57:ED:B8:9A:E3:AD:58:A0:B7:CF:55:B1:9C:88:E2:1D
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 0199DF2952B0AFDEE445F592FA69907AD25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 012A
Signing time: Mon 13 Oct 2025 20:00:51 +0000
Manifest this update: Mon 13 Oct 2025 20:00:51 +0000
Manifest next update: Tue 14 Oct 2025 20:00:51 +0000
Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=)
2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: ENRzABeG5by2Uz/PEjf32Yl5Cj2UUhrqId7oFPgJJEQ=)
3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 17:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:df:29:52:b0:af:de:e4:45:f5:92:fa:69:90:7a:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Oct 13 20:00:51 2025 GMT
Not After : Oct 14 20:00:51 2025 GMT
Subject: CN=d34841a357edb89ae3ad58a0b7cf55b19c88e21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:d4:2b:05:69:5a:40:98:59:8d:f4:ea:3e:
79:25:02:1d:2d:2f:b0:dc:2b:0b:94:b4:78:1c:cf:
35:6b:ce:3b:e7:23:2f:69:e2:eb:fc:84:d4:12:05:
96:53:52:b5:f2:83:93:65:2b:c2:5f:1c:59:e1:35:
e5:0a:3b:2a:e8:46:fd:60:9f:35:cb:43:92:c9:e8:
ab:aa:3c:3b:fa:4d:92:76:81:6a:cf:18:e7:26:d4:
40:55:c9:f1:c0:9c:0b:71:b9:6d:f2:0a:8c:32:c5:
8e:93:9e:d8:6e:d6:67:99:76:ab:56:e2:65:b8:94:
d8:5a:d0:04:0f:7a:39:f5:c2:e8:6c:8e:b9:d1:5e:
d9:f6:b8:46:1c:43:04:f5:0a:ae:1a:77:e1:10:1b:
69:0b:0d:79:64:90:7c:e3:a7:81:54:14:1d:f5:c9:
35:97:43:ea:72:12:40:7b:5e:6e:39:e5:e5:d1:60:
f1:63:75:0b:b2:3e:cf:a6:c3:2e:c6:31:02:d9:85:
3c:3c:11:5f:3d:f1:e1:7c:f9:3f:a0:f1:8e:08:4b:
77:8e:14:f0:41:7c:1a:c5:c3:96:2f:60:4c:70:b0:
dd:5c:75:59:b8:16:7b:ea:75:20:41:65:f9:32:fd:
8a:68:b4:f0:e5:04:41:42:fe:74:74:34:e0:a2:46:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:48:41:A3:57:ED:B8:9A:E3:AD:58:A0:B7:CF:55:B1:9C:88:E2:1D
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:53:af:76:cc:2c:08:c5:06:63:e0:0b:32:de:2c:82:86:67:
e3:52:e2:ea:de:9e:6c:c3:97:25:52:cb:88:7e:c3:01:93:e1:
7f:2c:57:76:1a:7d:7f:a4:51:93:55:7f:18:2c:4c:c9:84:e9:
38:7f:08:1f:30:3e:20:5f:2b:cd:fd:57:f9:f6:58:8e:09:90:
a1:bb:d0:2b:4b:22:44:bd:36:a4:33:90:62:32:44:3d:3e:e2:
98:b9:6f:5b:82:5d:d5:77:72:6c:1e:74:76:e3:92:cf:ce:be:
39:21:91:56:55:56:e7:01:87:3f:e1:eb:04:63:95:7e:a1:2a:
39:fa:2e:2f:2e:95:9a:b8:05:4a:35:91:ef:ee:57:ac:8b:52:
4a:32:fc:18:fd:dd:af:ba:69:07:aa:29:8e:71:52:41:3f:8d:
66:0b:e0:c2:4f:29:b8:3e:34:75:3b:b7:6a:06:94:7d:ab:28:
5e:5d:b2:dc:24:24:57:5a:ea:62:64:04:5e:5a:23:d0:8a:d8:
8f:fa:1c:bc:d5:c0:b5:52:e6:c7:78:b8:bc:1e:97:97:58:05:
e2:96:d0:a0:c1:dd:c7:ed:ad:b1:76:8c:c5:37:93:45:61:2c:
99:d7:14:48:47:49:7f:17:72:cf:ae:aa:d0:e6:e0:01:8d:56:
23:96:bb:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnfKVKwr97kRfWS+mmQetJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YTJlODExZjAwYmFlMTZhNDQ3NDIzZjExZTI0MjE3MTQy
Y2ZmN2MwHhcNMjUxMDEzMjAwMDUxWhcNMjUxMDE0MjAwMDUxWjAzMTEwLwYDVQQD
EyhkMzQ4NDFhMzU3ZWRiODlhZTNhZDU4YTBiN2NmNTViMTljODhlMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e3UKwVpWkCYWY306j55JQIdLS+w
3CsLlLR4HM81a8475yMvaeLr/ITUEgWWU1K18oOTZSvCXxxZ4TXlCjsq6Eb9YJ81
y0OSyeirqjw7+k2SdoFqzxjnJtRAVcnxwJwLcblt8gqMMsWOk57YbtZnmXarVuJl
uJTYWtAED3o59cLobI650V7Z9rhGHEME9QquGnfhEBtpCw15ZJB846eBVBQd9ck1
l0PqchJAe15uOeXl0WDxY3ULsj7PpsMuxjEC2YU8PBFfPfHhfPk/oPGOCEt3jhTw
QXwaxcOWL2BMcLDdXHVZuBZ76nUgQWX5Mv2KaLTw5QRBQv50dDTgokY6iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNIQaNX7bia461YoLfPVbGciOIdMB8GA1UdIwQY
MBaAFEii6BHwC64WpEdCPxHiQhcULP98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTIt
MWFiYWRkMWIxMmQ2LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTItMWFiYWRkMWIxMmQ2
LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFOvdsws
CMUGY+ALMt4sgoZn41Li6t6ebMOXJVLLiH7DAZPhfyxXdhp9f6RRk1V/GCxMyYTp
OH8IHzA+IF8rzf1X+fZYjgmQobvQK0siRL02pDOQYjJEPT7imLlvW4Jd1XdybB50
duOSz86+OSGRVlVW5wGHP+HrBGOVfqEqOfouLy6VmrgFSjWR7+5XrItSSjL8GP3d
r7ppB6opjnFSQT+NZgvgwk8puD40dTu3agaUfasoXl2y3CQkV1rqYmQEXloj0IrY
j/ocvNXAtVLmx3i4vB6Xl1gF4pbQoMHdx+2tsXaMxTeTRWEsmdcUSEdJfxdyz66q
0ObgAY1WI5a7Iw==
-----END CERTIFICATE-----
Generated at Tue Oct 14 00:54:03 2025 by rpki-client