Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File: sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier: +f3/++P+HJU5RAGtwu47ZdJu2MULI6igFR3dtWDg9Yc=
Subject key identifier: 7D:6D:69:7C:7D:B5:D2:DB:12:EE:07:79:67:9A:05:67:70:05:CB:30
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial: 019A7149CA18767ACA138714CE5C7B575219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number: 1603
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=)
2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: RXL14JnFRKOpbVGzKhqwNegRlktI2PU4UXQ0bkAhG4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ca:18:76:7a:ca:13:87:14:ce:5c:7b:57:52:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=7d6d697c7db5d2db12ee0779679a05677005cb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:2c:1e:80:a8:0d:cf:65:60:63:61:06:c1:
71:e1:a6:22:d2:8c:5e:ac:df:76:93:78:5f:34:b4:
b7:6d:fe:3b:d3:14:6e:34:e6:39:2b:44:3e:e6:dd:
69:17:cc:23:b2:53:ed:ff:d8:c6:02:57:b4:9a:15:
13:75:ae:f4:af:07:37:f9:d9:70:f4:81:2a:ac:02:
9a:81:55:e1:2a:0f:46:a9:32:6f:79:fd:c7:aa:3e:
29:f6:26:f0:cd:95:90:b4:49:9f:f6:f2:2a:3c:c8:
83:ad:b9:03:df:e4:34:ae:7a:f7:56:c9:85:a3:92:
1c:c0:af:43:81:9d:ba:0f:8e:3f:e1:ef:eb:0c:0e:
d4:96:36:ab:cd:de:6d:15:4c:63:ac:87:f2:00:90:
49:1a:76:a8:ef:81:11:34:62:14:15:a8:0b:55:fb:
13:f6:de:28:1f:b9:40:02:93:24:2b:d6:c5:2c:6f:
33:99:65:bd:ef:cc:40:b4:93:2f:57:50:18:5b:4a:
90:22:e5:66:2a:51:76:ad:97:26:6f:37:c6:50:78:
1d:5a:91:84:75:58:12:6f:db:47:3b:68:87:f5:e8:
29:3e:c9:dd:29:27:dd:88:28:b7:01:3f:57:00:f7:
67:ae:bd:56:8d:4b:d4:67:31:fc:39:1d:2c:6b:43:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6D:69:7C:7D:B5:D2:DB:12:EE:07:79:67:9A:05:67:70:05:CB:30
X509v3 Authority Key Identifier:
keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:da:e5:92:8c:88:e5:aa:19:c8:b3:3e:71:0a:85:a4:e2:
03:d3:21:63:37:ce:18:09:21:95:0a:a7:fc:18:39:d0:a9:34:
57:61:45:5a:47:61:8f:cf:5e:f9:12:60:b0:de:63:1d:8f:1f:
2c:04:dd:8f:7b:19:c0:cb:fd:ba:06:f0:fe:2a:ab:53:4c:c0:
56:31:5c:36:f8:90:fa:ff:e4:6e:25:a0:f8:fd:4f:16:3d:9d:
ea:83:cc:77:f1:9d:77:c0:d0:5c:02:4b:2f:a2:02:03:26:a1:
90:05:c5:08:16:02:fe:81:15:25:37:86:52:ad:db:a0:e5:00:
9e:28:dc:4b:c4:77:39:70:ef:2a:ac:4b:35:c5:a8:cb:d6:f8:
5e:81:03:16:98:08:a1:e0:91:95:de:30:3d:05:76:2d:83:c3:
39:fd:43:da:86:d6:98:53:84:70:cb:ea:f6:45:c6:88:b7:09:
99:30:f5:a7:d0:07:fc:0b:76:05:f5:dc:ea:6a:8e:08:a5:5f:
03:75:d0:05:4b:82:21:da:5a:5b:9c:40:03:9e:54:b6:30:1b:
6e:4e:64:66:f4:c1:21:eb:32:b6:19:90:6b:b3:26:b2:bd:36:
ec:e1:99:3d:49:3e:c4:25:99:d5:f3:ea:bd:33:a7:16:7e:36:
87:5a:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:52 2025 by rpki-client