Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File: sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier: ASUUH1FTTmUG1/uYBRYU8asAM+jKAhPbbD7oUkJs6vs=
Subject key identifier: A0:7E:3F:02:C8:D0:D5:D1:28:32:CA:20:11:C4:6C:87:9C:B5:75:E6
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial: 01992330EB31EEB0E3A96B9FCC7DA33DAFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number: 1556
Signing time: Sun 07 Sep 2025 08:00:32 +0000
Manifest this update: Sun 07 Sep 2025 08:00:32 +0000
Manifest next update: Mon 08 Sep 2025 08:00:32 +0000
Files and hashes: 1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=)
2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: mn/OzTl6r7gx7+2tBik7bep2iLP2URIQJH2r3vjk+T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:eb:31:ee:b0:e3:a9:6b:9f:cc:7d:a3:3d:af:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
Validity
Not Before: Sep 7 08:00:32 2025 GMT
Not After : Sep 8 08:00:32 2025 GMT
Subject: CN=a07e3f02c8d0d5d12832ca2011c46c879cb575e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:5a:c6:4a:e3:9a:6d:5f:7d:23:4e:6c:c5:
e2:84:97:4f:ba:5e:87:41:d4:d9:7c:9d:d4:82:a9:
5f:c0:a8:14:a8:90:51:0a:e5:0c:8c:e8:2c:25:76:
76:69:49:27:4e:91:47:e3:23:10:7c:3f:37:0f:6e:
7a:6e:b0:70:0e:0b:37:86:89:4b:2d:b4:6c:44:28:
7d:65:df:c8:a1:e1:9d:de:1e:6e:f5:30:7f:46:53:
d2:18:74:c2:b1:ce:70:fb:dd:52:9a:b0:48:1f:94:
46:90:75:64:f0:f1:56:60:98:35:f2:93:79:6b:7c:
0b:43:22:9a:f6:3e:92:11:cd:c9:40:60:b6:c4:86:
ae:f1:31:b0:2a:7a:71:ef:67:6c:fc:20:16:9d:77:
69:bd:f9:53:a1:e0:44:c5:54:49:6c:1a:c8:c4:e2:
73:31:d8:cc:e9:35:27:cf:43:70:4e:8a:b1:93:6c:
49:85:9f:b3:c8:2d:b8:61:11:2d:62:db:e5:c1:e7:
d8:90:41:3c:34:c3:3a:b2:21:b7:27:5a:be:84:90:
21:92:39:37:70:2d:ce:01:d1:bb:75:5e:ca:58:90:
9b:e9:da:04:1c:90:d0:aa:fb:ee:20:ef:24:ad:04:
4f:1d:5d:4c:c1:00:de:ed:43:f6:7a:fb:b6:60:ce:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:3F:02:C8:D0:D5:D1:28:32:CA:20:11:C4:6C:87:9C:B5:75:E6
X509v3 Authority Key Identifier:
keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d7:7c:8c:b1:ea:6e:c1:81:32:0e:1c:03:50:db:37:e4:c8:
40:64:4d:24:14:11:87:cc:71:fe:f5:87:28:6d:2a:25:f8:76:
2d:11:33:55:48:81:73:2f:bb:e6:f2:02:07:ef:4b:6c:87:ff:
a7:f7:c7:04:05:76:d8:fa:96:d0:77:6d:b1:a2:bd:29:57:ea:
d7:0e:e6:09:d6:e8:be:cb:55:5d:bd:8a:67:f3:bf:de:e2:f8:
84:8b:6f:74:ad:3a:21:6a:be:7d:e8:6b:6a:ba:55:c5:c1:41:
2e:a3:bf:fc:1e:df:3b:c2:b4:2f:57:ea:66:cf:4f:36:cc:72:
65:72:9d:83:22:fe:2c:29:23:b4:06:61:53:0d:5e:f8:05:a2:
a7:b6:9f:8a:4f:c5:e5:0e:e6:7c:88:87:4c:22:5d:32:4d:aa:
66:e3:27:af:70:f7:36:a8:9d:ca:54:12:5a:e3:71:f3:80:49:
7a:10:9d:79:e7:86:a1:85:5c:66:e6:9e:62:7e:d7:db:ca:77:
8d:9d:24:5d:c9:df:6f:0c:01:96:6a:98:40:31:bc:6d:86:86:
fe:a0:88:97:59:fb:9f:11:19:7a:f0:23:cb:28:2e:46:d3:a1:
8d:22:74:28:b8:1b:c4:20:48:18:7a:98:8e:68:c3:25:57:a9:
9b:38:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:00 2025 by rpki-client