Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: Wi2kkBItytK1+VsvnY+EsBwUUWDu12GC40fGfTz00Ys=
Subject key identifier: 76:84:CA:BF:F5:D7:87:44:77:16:12:FC:25:AB:5F:C9:89:4D:14:9C
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019A52D20E4CC3AC8078C0973C0BDFB25106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0BF3
Signing time: Wed 05 Nov 2025 07:01:29 +0000
Manifest this update: Wed 05 Nov 2025 07:01:29 +0000
Manifest next update: Thu 06 Nov 2025 07:01:29 +0000
Files and hashes: 1: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (hash: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: Sm+2YGs4wNPSMDvR6giYmqoSkngKJjLkcORfgFTHeuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:0e:4c:c3:ac:80:78:c0:97:3c:0b:df:b2:51:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Nov 5 07:01:29 2025 GMT
Not After : Nov 6 07:01:29 2025 GMT
Subject: CN=7684cabff5d78744771612fc25ab5fc9894d149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:31:4d:f4:c8:94:25:ac:2f:4e:51:ed:93:
51:a0:36:b6:13:6f:60:79:09:d3:3e:f8:9a:6b:06:
2d:26:49:bd:9c:58:be:ad:d1:b2:71:a6:e4:da:9b:
e4:06:6a:6e:b7:e6:42:52:a5:bc:e3:96:a1:20:ca:
d4:49:8e:80:3e:4d:9a:ed:b1:6c:c0:04:17:c4:94:
7e:0f:46:79:fb:cb:98:71:a4:a9:f2:23:84:1b:06:
15:12:69:91:a6:8e:38:92:ff:ec:e7:ff:c9:9d:22:
25:77:b6:fa:d5:8d:14:b7:6c:2a:44:a4:ef:d6:f5:
9c:91:64:6d:2e:85:94:75:c5:9f:34:59:dc:95:90:
39:5f:7b:55:e8:04:14:04:e0:54:12:cc:38:75:a3:
b5:e9:a5:d9:b6:6e:8b:ae:47:36:b0:62:17:a5:e7:
b2:c1:d3:ce:1a:7f:6e:65:b2:8a:01:20:12:76:48:
ba:39:83:65:81:3a:11:b8:9a:48:fd:96:c8:0d:f7:
51:a1:e7:dc:5c:52:6b:2c:d9:f8:ee:e1:81:c8:99:
5c:0c:d4:07:5a:9f:bc:bf:c7:1e:04:90:79:bc:f1:
21:85:0b:07:d1:50:07:5c:8e:69:62:41:a4:0e:a8:
df:b6:b6:be:a5:cc:24:ae:ab:d4:00:3c:75:b3:fa:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:CA:BF:F5:D7:87:44:77:16:12:FC:25:AB:5F:C9:89:4D:14:9C
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a2:86:9a:a3:8b:c9:66:29:db:f1:71:80:a4:33:98:09:91:
99:9d:4f:ea:98:7d:7b:54:1a:ca:3f:a4:0d:f2:3d:f5:e5:6d:
2c:eb:d1:29:3f:1f:76:7c:5c:1a:54:10:2d:1d:48:74:f8:c0:
f2:cd:73:bc:45:ca:85:96:87:59:b9:86:ad:36:00:55:09:f0:
8b:e9:8f:a3:83:bb:68:36:82:ba:d9:e3:88:98:fa:5d:c5:d3:
02:70:39:01:f6:b4:3b:fd:d2:dd:40:01:2d:cc:55:ed:f8:10:
53:c4:d3:9b:1e:01:5f:3d:a6:52:d2:54:fe:50:77:42:01:73:
2e:51:b1:26:ec:05:82:66:a7:90:d4:04:a4:b8:de:b4:02:54:
f6:17:d8:b3:25:e5:dc:8a:33:d3:3f:e9:86:f7:24:e3:22:91:
a0:6c:24:65:55:40:07:e0:aa:73:75:cb:52:ca:ad:83:7e:ee:
97:cc:de:ba:77:26:b2:31:dd:c0:a1:45:fb:1c:6b:97:33:81:
a8:5d:b2:dd:7b:f5:d4:57:86:ac:b0:15:b5:38:7d:f1:47:9d:
56:bf:9f:5d:b1:1a:90:09:50:87:a1:d4:81:51:17:cf:db:21:
c7:d0:ca:28:e7:16:f5:e8:7b:82:be:21:29:b9:fb:de:61:9e:
82:df:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:43:05 2025 by rpki-client