Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json)
Hash identifier: ALS2EsGrwQa+on+n38H2rxfKGnwRsRq9cxYTYaSd9Uk=
Subject key identifier: E5:50:9A:9D:7C:D8:A0:69:36:66:37:B3:58:0C:34:AA:FE:E5:C2:66
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial: 019A53084F931FB368981DB11675395DCF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 08:00:44 +0000
Manifest this update: Wed 05 Nov 2025 08:00:44 +0000
Manifest next update: Thu 06 Nov 2025 08:00:44 +0000
Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: YurBwAKKeQQU9F8BV7vaorwF8Mdal5MC/qQtVJu0SNQ=)
2: fxES6V-YcHLIYfWbK1XCrf--99E.roa (hash: /7Za8qsVUiet1d+zZvUbv7RF8k01UQmlJjxyUgXzNdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:4f:93:1f:b3:68:98:1d:b1:16:75:39:5d:cf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Validity
Not Before: Nov 5 08:00:44 2025 GMT
Not After : Nov 6 08:00:44 2025 GMT
Subject: CN=e5509a9d7cd8a069366637b3580c34aafee5c266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:4e:98:65:f1:d4:69:c9:de:6e:35:57:df:
d9:48:9a:83:87:c3:9a:72:25:d9:a7:31:bb:df:0f:
a1:f7:7c:6b:b7:07:0b:46:ce:35:c5:96:cf:4b:d0:
fd:2b:ef:55:e2:b7:1b:c8:60:bd:67:a5:86:08:66:
24:de:3b:f3:b5:0a:b0:b8:d2:69:32:7c:f2:dc:bc:
b0:06:f3:08:62:b1:c5:e4:28:5f:7b:35:1f:e4:dd:
6c:a1:01:b7:26:2a:01:b1:ab:60:e2:99:30:9e:1b:
d5:9e:b5:ab:d6:8c:92:c4:c7:88:bb:38:df:cb:bf:
20:a0:52:23:89:0d:5d:de:94:fd:77:49:35:9d:04:
fe:4c:b4:bf:f6:54:96:37:31:f7:de:be:8c:b3:bf:
7a:24:ac:b1:94:94:d9:46:89:be:df:c4:1b:9c:8b:
11:c9:dc:a1:8f:21:15:4c:e9:30:4c:bc:8b:ff:0e:
4e:7f:71:37:e1:61:7f:5e:0b:f0:2c:23:77:ea:b4:
d5:ae:23:a6:11:93:3a:6b:d8:fb:11:9a:22:a0:ed:
8f:46:bf:9d:5c:95:61:cb:67:f7:49:18:60:17:49:
26:a6:58:c5:a4:f4:f8:29:69:98:1e:17:61:bb:8e:
13:a0:a3:41:b5:39:3d:18:e5:36:bb:a1:11:2f:90:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:9A:9D:7C:D8:A0:69:36:66:37:B3:58:0C:34:AA:FE:E5:C2:66
X509v3 Authority Key Identifier:
keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:36:b8:3d:89:f1:b5:f1:72:f3:ff:2c:bb:cf:8f:5c:20:9a:
d3:46:8b:6a:8d:8c:4e:5c:59:57:e9:e0:b9:c1:20:78:51:59:
10:67:2e:77:fb:93:b8:8d:32:97:8b:8f:9d:5b:bd:2b:49:af:
6f:be:da:a8:1c:ec:cf:6f:8f:74:61:ee:75:cc:f6:8e:de:d9:
f1:45:b1:8f:81:3c:49:2a:5e:71:d3:40:99:0b:51:26:10:0d:
0c:25:97:32:ed:de:6e:d6:b2:e2:95:1c:e3:a1:c4:f5:df:d8:
7b:e3:2c:ec:a0:e5:08:f3:d7:0e:26:1e:8b:65:58:fb:c4:4c:
72:aa:b5:4d:5e:2e:00:43:a7:1c:cc:9a:a0:41:eb:01:fa:aa:
49:3e:f2:49:8e:e3:63:b2:6b:dc:b2:09:57:b6:d0:c0:f9:f8:
82:ef:2c:01:06:fd:73:0b:78:26:83:ed:1a:60:8b:6e:b0:c2:
2a:d0:f2:0a:cd:e4:99:5f:46:39:2b:da:be:64:20:35:da:f0:
2f:9a:21:5f:99:70:7d:81:98:93:c4:96:e9:0b:3f:c0:db:4d:
77:ed:f1:ae:d1:70:46:98:96:f5:4f:d8:ab:8d:19:37:cb:fa:
64:02:b7:96:3c:74:14:69:27:bd:ab:91:f6:a1:11:d8:aa:d1:
71:85:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:49 2025 by rpki-client