Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: GAQwZdfh/D3Pm3VmfdsfSvlcVvnuvT28K4oN4THXYKc=
Subject key identifier: C4:58:68:69:CB:52:F8:CA:A2:11:8A:36:66:25:5C:10:E0:E7:36:A5
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 01974A437BBC3EF6AEDC7CA37FEF87F8591C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 0499
Signing time: Sat 07 Jun 2025 12:00:25 +0000
Manifest this update: Sat 07 Jun 2025 12:00:25 +0000
Manifest next update: Sun 08 Jun 2025 12:00:25 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: JP0M2Xr2ImI2FrdtYYPJ7ZMDrgov4JJEOiQ8CX4WrMc=)
2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:7b:bc:3e:f6:ae:dc:7c:a3:7f:ef:87:f8:59:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Jun 7 12:00:25 2025 GMT
Not After : Jun 8 12:00:25 2025 GMT
Subject: CN=c4586869cb52f8caa2118a3666255c10e0e736a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:08:93:28:fb:e2:c5:96:c9:9b:25:82:e8:
4e:70:46:b2:2a:17:ad:15:a7:1d:8f:52:c4:0e:bd:
8f:e7:2f:a9:26:90:c0:73:ec:79:6f:74:27:d8:35:
dc:15:f7:33:9f:02:28:17:cd:17:85:1c:c4:d5:20:
60:96:f4:2a:5e:84:57:1e:62:81:98:7c:3c:fd:c8:
30:bf:7d:19:6e:95:2a:0a:8e:b6:d7:09:7e:ec:27:
75:26:d9:f4:ff:5a:89:17:56:28:9a:17:55:f4:54:
7e:7c:75:6b:60:19:6c:d7:ed:04:b0:12:94:8e:cc:
89:53:db:55:74:54:9d:01:c4:cc:fb:ed:34:ca:0c:
da:e6:ab:5b:76:79:be:c4:b1:33:03:0b:58:f5:46:
3c:1a:07:a8:bd:8a:e5:b5:1b:1c:4d:b2:99:ed:49:
55:11:54:10:10:5f:e6:f9:3b:b7:15:fa:14:e5:e7:
23:e1:c7:e9:f7:76:9d:c1:44:7b:cd:ca:ec:33:4a:
a2:37:63:50:5b:7d:99:bc:49:12:92:8b:59:f1:b1:
71:60:51:be:29:70:56:fe:e4:04:d7:69:cf:96:5c:
3a:af:9f:53:c5:13:c6:56:17:fb:bf:ff:1d:cc:91:
2c:76:0a:89:ad:30:fb:54:36:11:1b:4b:61:9e:a2:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:68:69:CB:52:F8:CA:A2:11:8A:36:66:25:5C:10:E0:E7:36:A5
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:51:06:a8:de:59:8f:2b:b1:21:20:06:a8:94:e4:98:d9:
a1:6a:8a:9e:2c:2f:fe:db:69:7b:a2:92:8b:3c:66:ff:0d:02:
29:4b:b9:30:58:bc:2b:a5:9c:47:2a:19:a5:0e:89:b1:1b:0e:
4a:3d:d8:38:0d:f6:be:81:2e:c8:e4:1c:f1:18:46:39:d8:84:
a8:ea:08:a0:94:b0:0e:b5:3d:31:81:2a:7d:12:ac:1e:3b:70:
61:e3:1e:96:02:b1:1a:c4:73:d3:54:ad:5f:77:32:56:4a:07:
b3:61:74:d9:85:30:e0:c0:64:ad:60:ac:af:f0:b8:4f:56:b5:
e3:4d:e3:8f:70:f4:98:0b:0d:47:e2:0d:4d:34:2c:4a:e4:8b:
d5:39:81:7d:8c:28:32:40:be:2a:d4:5b:03:ae:f7:d4:2a:b4:
c0:e2:26:cd:d2:07:48:e4:ee:32:c4:13:4c:d9:d0:54:8d:ab:
fe:36:46:a5:7e:f5:d5:ff:52:94:e1:7a:20:78:5f:18:7f:f2:
f3:9f:91:1f:38:44:0d:18:88:4a:d0:c4:9d:70:9e:1f:1b:cf:
78:f8:a5:16:a9:ff:f6:43:68:66:b1:20:51:f4:e1:35:e1:be:
4b:5c:86:d0:31:b9:80:1e:92:f2:40:88:9a:6d:ec:aa:fc:13:
88:65:4b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ3u8Pvau3Hyjf++H+FkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDU0NzJiNTUwYjM0ZmRiMDFhZGNkNTEwYTlkY2Q4MjFj
OWQ5OTEwHhcNMjUwNjA3MTIwMDI1WhcNMjUwNjA4MTIwMDI1WjAzMTEwLwYDVQQD
EyhjNDU4Njg2OWNiNTJmOGNhYTIxMThhMzY2NjI1NWMxMGUwZTczNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm0Ikyj74sWWyZslguhOcEayKhet
Facdj1LEDr2P5y+pJpDAc+x5b3Qn2DXcFfcznwIoF80XhRzE1SBglvQqXoRXHmKB
mHw8/cgwv30ZbpUqCo621wl+7Cd1Jtn0/1qJF1YomhdV9FR+fHVrYBls1+0EsBKU
jsyJU9tVdFSdAcTM++00ygza5qtbdnm+xLEzAwtY9UY8GgeovYrltRscTbKZ7UlV
EVQQEF/m+Tu3FfoU5ecj4cfp93adwUR7zcrsM0qiN2NQW32ZvEkSkotZ8bFxYFG+
KXBW/uQE12nPllw6r59TxRPGVhf7v/8dzJEsdgqJrTD7VDYRG0thnqKzhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRYaGnLUvjKohGKNmYlXBDg5zalMB8GA1UdIwQY
MBaAFEpFRytVCzT9sBrc1RCp3NghydmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgt
MTJjMDU4YmZhY2MxLzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgtMTJjMDU4YmZhY2Mx
LzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkp5RBqje
WY8rsSEgBqiU5JjZoWqKniwv/ttpe6KSizxm/w0CKUu5MFi8K6WcRyoZpQ6JsRsO
Sj3YOA32voEuyOQc8RhGOdiEqOoIoJSwDrU9MYEqfRKsHjtwYeMelgKxGsRz01St
X3cyVkoHs2F02YUw4MBkrWCsr/C4T1a1403jj3D0mAsNR+INTTQsSuSL1TmBfYwo
MkC+KtRbA6731Cq0wOImzdIHSOTuMsQTTNnQVI2r/jZGpX711f9SlOF6IHhfGH/y
85+RHzhEDRiIStDEnXCeHxvPePilFqn/9kNoZrEgUfThNeG+S1yG0DG5gB6S8kCI
mm3sqvwTiGVL2w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:45 2025 by rpki-client