Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: zwBsjF+gI5nZRhu7qmWnvb/rptQ4mnQFVrK5mzrk5ZU=
Subject key identifier: B3:BD:92:10:64:FD:36:1B:ED:DA:2B:39:B9:0F:21:B4:4A:C5:6D:0C
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019A4B174BAAB2D95D754277A7EDCBD3D7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 0627
Signing time: Mon 03 Nov 2025 19:00:08 +0000
Manifest this update: Mon 03 Nov 2025 19:00:08 +0000
Manifest next update: Tue 04 Nov 2025 19:00:08 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: I75k5bp8D1D8MycoskuSoZlrw3s/Npi5g86ajCrSQUs=)
2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:17:4b:aa:b2:d9:5d:75:42:77:a7:ed:cb:d3:d7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Nov 3 19:00:08 2025 GMT
Not After : Nov 4 19:00:08 2025 GMT
Subject: CN=b3bd921064fd361bedda2b39b90f21b44ac56d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:35:5a:d5:30:57:77:37:ba:13:42:4b:8c:
ac:5e:f9:77:a1:94:57:c7:0d:75:f8:b3:56:38:1f:
ce:81:6e:45:b2:b3:70:55:45:33:66:f0:4b:9e:55:
66:34:f5:d9:89:4e:66:1d:c4:e2:17:e3:7b:17:1d:
bb:dc:74:2b:4e:e6:bb:93:04:1f:c3:9a:7e:1b:9b:
c8:22:7d:63:9b:fe:56:6f:03:e0:d5:c9:57:60:cc:
ff:7f:14:05:2a:86:5e:6b:b9:f9:1d:78:42:5b:a2:
bd:6e:07:fd:e3:8b:8a:78:c0:12:5f:14:62:54:0a:
59:2a:32:bf:65:6e:c4:48:f6:28:f5:8b:8e:b2:7f:
1e:f6:8e:bf:d0:ed:af:31:5c:24:6f:f7:92:23:12:
92:00:54:ca:61:6a:aa:4d:43:d6:13:09:62:7a:fc:
c0:28:2f:24:e8:57:ba:2f:8b:6c:15:16:50:e9:4d:
ab:fc:c1:78:b3:22:a4:73:84:53:c9:c5:12:ac:e8:
97:4d:e4:7b:21:60:ef:d9:3c:6a:2f:b6:91:27:bf:
70:09:26:11:7f:7c:21:2e:65:a9:e8:6a:88:39:60:
da:83:96:06:b0:3f:9f:29:8d:a1:ac:40:e6:a7:68:
f6:4d:2f:00:db:5e:d3:80:8d:1a:e7:8d:86:39:6a:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BD:92:10:64:FD:36:1B:ED:DA:2B:39:B9:0F:21:B4:4A:C5:6D:0C
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2a:78:2f:a1:31:cd:da:42:10:ea:04:18:22:98:65:6b:1e:
4f:55:0d:16:01:1f:46:69:59:b6:e5:8a:e9:45:38:90:f8:84:
b3:75:82:a9:04:86:64:b2:41:1a:98:28:86:3b:81:9d:b0:cf:
45:6a:1e:4e:62:66:d1:4c:03:01:46:1f:d1:86:07:a7:61:a6:
57:34:e2:53:a3:9c:c7:8c:a6:06:a8:70:ed:dc:d2:ca:7b:c0:
13:b3:f0:c8:5e:18:e9:c7:ef:05:a9:58:c1:36:09:a4:93:1f:
ce:18:e1:d6:af:8e:f4:92:f8:bf:8b:41:0d:f8:6d:17:a0:1a:
ab:6b:4a:e4:d4:19:f5:c1:38:8f:0b:9e:a3:23:d7:63:29:b5:
04:a4:35:29:51:b9:a0:39:33:3d:6e:22:74:02:c6:49:e0:ff:
34:c8:0c:95:85:a9:0a:51:6d:fb:f5:73:b3:90:2b:ba:6b:39:
2b:64:6d:45:6b:1d:49:f0:40:6a:22:3e:ac:4a:b2:6e:dc:83:
29:38:c9:bc:0d:20:c0:3d:8b:17:43:9d:3c:cf:cb:9b:28:3e:
95:09:93:41:6f:20:cd:a1:7d:cb:6e:83:61:73:a6:fa:b1:83:
72:24:66:1a:86:c4:7d:3f:7f:14:d7:59:4e:51:af:ce:4d:db:
35:55:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:00:52 2025 by rpki-client