Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier: MiWyDoMRSwjO/VYfQ9/a2jMlRo3yxaUfKpVlMm9M3W8=
Subject key identifier: 41:00:9A:64:7A:F0:7C:D7:67:CD:8E:A0:7B:2E:3B:73:C6:4D:3D:C4
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 0199240D236464DC06011712B8B653BBE29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 12:01:04 +0000
Manifest this update: Sun 07 Sep 2025 12:01:04 +0000
Manifest next update: Mon 08 Sep 2025 12:01:04 +0000
Files and hashes: 1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=)
2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: Eev6Mc/DvlE7GxuLnbB3P1YlkB0Gqr555bkEsbWVEWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:23:64:64:dc:06:01:17:12:b8:b6:53:bb:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Sep 7 12:01:04 2025 GMT
Not After : Sep 8 12:01:04 2025 GMT
Subject: CN=41009a647af07cd767cd8ea07b2e3b73c64d3dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:21:c9:c1:a3:a1:80:b5:6f:d6:6e:5d:a9:
d8:23:cf:22:97:e5:42:e3:0f:40:fa:66:6a:51:8e:
05:b2:8b:4a:2e:7b:ee:4f:f3:1c:5a:c8:ca:63:55:
21:ed:f4:2d:a6:41:8d:c9:2e:a1:76:7f:de:68:ca:
91:a1:63:48:5c:d9:44:ba:6c:fa:b9:df:39:ad:95:
88:b0:4e:45:0e:e2:02:ae:d7:b6:3c:fc:fc:81:fe:
66:87:95:c4:ba:4b:87:22:86:1c:6a:55:45:5c:b8:
f5:ae:6c:f0:40:cf:94:fb:05:7a:2a:c2:8d:4e:36:
65:87:91:0b:f0:bc:32:19:76:5a:2c:08:63:bc:4c:
31:01:30:e1:cb:c7:fc:b8:60:4a:71:9c:f1:44:ca:
4b:ac:c4:05:e8:27:bb:aa:fe:e9:e3:63:57:22:16:
51:b6:95:87:38:d0:cd:3c:95:6a:6d:cd:f9:a4:14:
7f:13:43:9b:d3:ed:4c:c2:45:30:62:5e:36:b3:6a:
1d:a5:b3:a8:09:6f:21:17:f3:05:2f:38:ef:aa:48:
8a:f0:63:f8:80:c4:c2:a3:78:2a:8e:d6:d3:16:79:
3c:9e:41:b9:92:0b:a8:18:f9:55:ac:01:99:b7:70:
50:10:fc:a9:7d:01:f3:76:01:aa:20:af:0c:97:a3:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:00:9A:64:7A:F0:7C:D7:67:CD:8E:A0:7B:2E:3B:73:C6:4D:3D:C4
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e1:f0:f2:2f:04:a0:4e:e9:77:ec:db:a5:d4:4b:7a:6c:7a:
94:2e:2b:bd:60:d5:17:c6:09:06:d2:b7:6f:b2:78:97:c2:cf:
76:ac:97:2e:0a:19:ac:d0:01:48:b8:eb:ef:1b:14:8f:20:9e:
ea:ea:7d:ef:49:1b:cb:22:b1:a5:bc:5a:51:3a:d4:22:24:d2:
36:6d:9e:f5:01:6e:71:47:e8:76:9a:79:7c:95:3c:ee:3a:51:
3e:0d:e8:ef:3d:bb:77:8d:b6:28:fa:22:d4:8d:32:40:2c:46:
ba:4b:5e:96:b1:56:6c:6e:2f:cc:a0:4d:b5:87:d5:20:c3:6a:
86:5b:9e:5c:a5:48:02:58:b5:04:ff:94:e8:db:43:6f:58:77:
c6:47:f7:9a:8f:7a:e8:e1:7b:7d:12:72:24:e3:b9:a7:fe:5e:
b0:22:62:c7:3e:d2:ef:01:8b:39:3a:42:dc:26:9c:1d:ac:cb:
65:ac:d4:89:82:db:a8:88:d7:0d:ba:16:d2:60:ae:23:bc:bf:
ce:a2:42:cd:a1:44:8f:7f:33:e5:d7:01:27:5e:a4:00:8f:04:
a3:08:71:94:12:e3:95:3b:a7:d8:a5:b4:7c:47:ca:cd:f8:18:
82:1a:4a:1b:b8:c8:2f:95:51:db:a3:a4:e5:cc:a1:94:39:e4:
04:a2:3a:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDSNkZNwGARcSuLZTu+KbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk
Mjk5NTEwHhcNMjUwOTA3MTIwMTA0WhcNMjUwOTA4MTIwMTA0WjAzMTEwLwYDVQQD
Eyg0MTAwOWE2NDdhZjA3Y2Q3NjdjZDhlYTA3YjJlM2I3M2M2NGQzZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVshycGjoYC1b9ZuXanYI88il+VC
4w9A+mZqUY4FsotKLnvuT/McWsjKY1Uh7fQtpkGNyS6hdn/eaMqRoWNIXNlEumz6
ud85rZWIsE5FDuICrte2PPz8gf5mh5XEukuHIoYcalVFXLj1rmzwQM+U+wV6KsKN
TjZlh5EL8LwyGXZaLAhjvEwxATDhy8f8uGBKcZzxRMpLrMQF6Ce7qv7p42NXIhZR
tpWHONDNPJVqbc35pBR/E0Ob0+1MwkUwYl42s2odpbOoCW8hF/MFLzjvqkiK8GP4
gMTCo3gqjtbTFnk8nkG5kguoGPlVrAGZt3BQEPypfQHzdgGqIK8Ml6M2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEAmmR68HzXZ82OoHsuO3PGTT3EMB8GA1UdIwQY
MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt
OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw
LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuHw8i8E
oE7pd+zbpdRLemx6lC4rvWDVF8YJBtK3b7J4l8LPdqyXLgoZrNABSLjr7xsUjyCe
6up970kbyyKxpbxaUTrUIiTSNm2e9QFucUfodpp5fJU87jpRPg3o7z27d422KPoi
1I0yQCxGuktelrFWbG4vzKBNtYfVIMNqhlueXKVIAli1BP+U6NtDb1h3xkf3mo96
6OF7fRJyJOO5p/5esCJixz7S7wGLOTpC3CacHazLZazUiYLbqIjXDboW0mCuI7y/
zqJCzaFEj38z5dcBJ16kAI8EowhxlBLjlTun2KW0fEfKzfgYghpKG7jIL5VR26Ok
5cyhlDnkBKI6rw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:16 2025 by rpki-client