Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier: 6daqHG2UQj0nB7QDIsNDcgxmg0li+CkT49w3EpymA7s=
Subject key identifier: 51:80:A4:56:2E:86:6C:42:A4:20:DF:4B:7E:3E:2A:25:36:90:1B:8B
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 019A4DAA89E1E651B9E90F9099E01D60D6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 07:00:13 +0000
Manifest this update: Tue 04 Nov 2025 07:00:13 +0000
Manifest next update: Wed 05 Nov 2025 07:00:13 +0000
Files and hashes: 1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=)
2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: 23liMj+lBfLs/JqDEMgJZI00L/fNTulSD5J+lgSe92I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:89:e1:e6:51:b9:e9:0f:90:99:e0:1d:60:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Nov 4 07:00:13 2025 GMT
Not After : Nov 5 07:00:13 2025 GMT
Subject: CN=5180a4562e866c42a420df4b7e3e2a2536901b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:70:31:1c:68:6f:97:26:9d:d9:ab:a6:08:
be:04:38:3f:2c:b8:93:94:10:be:7e:7b:62:e2:1f:
90:fc:00:9f:a1:7c:23:5b:db:33:55:e4:fc:03:dc:
7d:57:82:76:7b:61:3d:e1:42:91:4b:7b:09:b7:4e:
e6:fb:4b:60:73:dd:b5:c1:72:57:f6:73:8c:6e:d3:
af:c7:18:84:97:36:8c:91:1b:a2:c6:5a:e6:c8:de:
05:1e:3f:c5:72:f8:1b:eb:f0:1d:70:ee:5b:85:33:
bf:a5:1b:ee:09:54:67:86:c6:b7:99:4f:0f:9f:2f:
ee:da:58:68:ec:4c:25:72:b9:bb:b9:58:28:ea:e7:
ce:71:00:c6:1b:aa:44:0f:db:53:d1:ff:73:81:94:
61:dc:7b:b7:c7:74:8d:f5:6c:dd:3a:02:cd:76:38:
53:e3:20:dc:10:f6:aa:be:71:1f:1d:ea:03:3c:26:
ea:98:37:02:34:3f:6b:7e:4d:3a:fa:de:fe:40:da:
52:c7:e9:1c:97:19:6a:a2:46:0d:e1:2f:4d:d7:6a:
57:1c:b6:3d:37:79:ee:c9:6f:21:45:81:18:dd:23:
78:89:7f:bd:7f:e0:ad:d3:48:24:3a:e3:6d:11:d4:
10:89:1c:af:e7:bf:bd:f2:a1:ad:61:b8:1a:85:50:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:80:A4:56:2E:86:6C:42:A4:20:DF:4B:7E:3E:2A:25:36:90:1B:8B
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ee:53:77:f0:eb:94:68:df:8f:20:24:b9:cb:e4:a9:3a:2f:
c6:d1:87:0f:cc:d3:e0:b0:65:2c:9b:06:4a:91:1d:c6:aa:fe:
b5:78:b1:94:03:b6:25:a3:44:ce:e3:10:cc:4a:05:63:9f:3a:
c5:a5:c0:e9:94:6d:4d:96:ab:87:c2:03:6d:86:eb:b0:df:ec:
13:47:e9:fb:bb:67:9d:46:30:d1:ae:0f:b7:c2:57:ec:01:81:
b3:b2:29:01:26:0d:9a:21:fe:ce:9f:48:75:6a:06:96:ce:f8:
ee:57:6c:2a:c4:07:f8:b7:de:18:2b:9e:2a:96:9c:3f:9c:54:
ac:42:d1:a0:78:bb:76:bc:bf:35:05:5b:e7:35:42:fb:63:89:
38:ab:b1:8a:41:8c:ae:86:2a:9a:ef:70:1a:38:2e:d6:b0:77:
fa:15:ca:33:b9:33:a2:c5:d1:26:8c:ea:23:b9:9f:96:ea:7f:
ec:31:1f:94:86:3d:e6:27:cf:53:19:54:44:f5:e7:d3:82:fc:
c9:b8:d2:93:50:4e:ee:cd:13:5b:a1:df:03:38:86:4e:d6:ef:
16:5d:49:7f:c8:c4:94:76:60:a5:25:7b:4d:ab:72:c4:73:5d:
d7:39:68:30:36:47:2c:8f:c4:6b:38:cf:29:90:54:d4:4b:ef:
5f:0f:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:03 2025 by rpki-client