Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: BOsJCVqpEUYuYm4sCuSe5qWS4mZnV+4EuSNV07xvCoE=
Subject key identifier: 9A:EA:68:D3:C1:3D:9B:BF:B3:FF:FC:2D:44:C0:1C:2C:2B:06:48:5E
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019873E36AAE9A4606EB7A0CD9B4A9D1F899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 07:02:20 +0000
Manifest this update: Mon 04 Aug 2025 07:02:20 +0000
Manifest next update: Tue 05 Aug 2025 07:02:20 +0000
Files and hashes: 1: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (hash: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: feYtgjertJ9hDjY1UH01813TbJa1mRnxn7T3HTzBFrc=)
3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:6a:ae:9a:46:06:eb:7a:0c:d9:b4:a9:d1:f8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Aug 4 07:02:20 2025 GMT
Not After : Aug 5 07:02:20 2025 GMT
Subject: CN=9aea68d3c13d9bbfb3fffc2d44c01c2c2b06485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:1d:5d:14:ef:78:87:ac:a7:99:93:6c:a4:
2f:16:6b:c3:e5:37:86:1f:30:29:4f:1a:84:fb:54:
24:b9:53:4e:97:66:2c:5c:c5:53:2c:4b:04:cb:53:
44:6d:b6:66:0c:fb:e3:66:11:e9:0a:39:d8:81:ec:
d1:a1:ed:b8:1e:ae:ef:94:8b:89:6e:69:8f:f3:4d:
80:ff:cd:7e:03:64:4b:d6:da:e8:8a:27:db:14:86:
f6:b7:ec:a7:0c:0a:f2:2a:28:d5:4f:14:d1:ab:d9:
01:cb:70:2b:56:19:49:b2:26:c3:c8:d8:82:42:0d:
e5:dc:e7:e1:5c:7c:e7:1a:88:ad:ff:92:7d:4a:f8:
e2:2c:6f:36:0d:0b:e8:59:03:ef:db:f7:5b:81:b0:
97:5b:d1:ca:3c:e2:f8:34:44:f8:b2:07:3d:9d:bb:
fc:16:48:85:ab:bd:a4:46:ba:10:df:c7:4b:41:3b:
85:5a:e3:4c:2e:bc:54:75:e3:fc:1d:01:77:9b:2a:
07:d4:2b:8e:8a:cc:01:0e:0c:c2:d1:73:4a:e8:26:
b8:79:12:25:d1:0c:8c:dd:90:23:68:7d:c0:05:b7:
5f:2d:a0:b7:0d:32:5a:73:3e:83:0d:98:39:06:b7:
a7:75:ff:9a:f3:a0:98:74:99:1f:36:9f:bc:5e:77:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:68:D3:C1:3D:9B:BF:B3:FF:FC:2D:44:C0:1C:2C:2B:06:48:5E
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f1:90:27:9a:90:5b:b8:f1:c0:56:d3:3c:94:1c:00:6c:c8:
75:eb:56:0e:d6:a6:e1:57:8f:72:b2:aa:57:56:63:75:f2:ca:
60:37:1e:6b:27:b5:2f:71:21:73:40:a8:f1:8b:79:a2:e1:bb:
0a:a5:d6:b3:e8:b6:d2:f6:61:64:36:f7:d8:21:d4:b1:d3:d8:
69:34:4a:bc:f3:ef:69:49:35:28:e8:b4:be:12:10:f9:d1:b3:
f3:93:2e:fd:ea:21:76:4f:a3:09:36:0d:0d:d4:85:eb:ba:d8:
c7:c4:47:89:c1:43:2c:8b:15:66:ab:50:ee:3c:4a:1d:1a:17:
ae:29:d1:1e:ba:4c:2c:78:23:c7:4c:01:01:c2:9b:1e:65:80:
96:d7:54:98:6e:df:27:9e:10:d5:b2:c0:0b:68:85:86:1d:8c:
ad:92:06:35:ca:6d:7a:62:5c:4d:e0:bf:4b:c4:a5:c7:19:28:
00:aa:9e:54:ca:83:fd:ac:d7:f0:f5:02:54:6a:1b:55:92:60:
89:c8:16:dc:0a:b6:05:12:69:71:45:f7:37:1e:0a:77:cd:98:
68:93:36:e3:79:e1:cc:24:6f:7f:4e:fa:b3:1f:94:45:d8:b3:
c5:10:3c:0c:b0:f4:32:c7:6a:4d:88:5d:66:30:7f:3a:07:0e:
42:b2:9e:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz42qumkYG63oM2bSp0fiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2
NDE1YTQwHhcNMjUwODA0MDcwMjIwWhcNMjUwODA1MDcwMjIwWjAzMTEwLwYDVQQD
Eyg5YWVhNjhkM2MxM2Q5YmJmYjNmZmZjMmQ0NGMwMWMyYzJiMDY0ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X8dXRTveIesp5mTbKQvFmvD5TeG
HzApTxqE+1QkuVNOl2YsXMVTLEsEy1NEbbZmDPvjZhHpCjnYgezRoe24Hq7vlIuJ
bmmP802A/81+A2RL1troiifbFIb2t+ynDAryKijVTxTRq9kBy3ArVhlJsibDyNiC
Qg3l3OfhXHznGoit/5J9SvjiLG82DQvoWQPv2/dbgbCXW9HKPOL4NET4sgc9nbv8
FkiFq72kRroQ38dLQTuFWuNMLrxUdeP8HQF3myoH1CuOiswBDgzC0XNK6Ca4eRIl
0QyM3ZAjaH3ABbdfLaC3DTJacz6DDZg5Brendf+a86CYdJkfNp+8XncTRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrqaNPBPZu/s//8LUTAHCwrBkheMB8GA1UdIwQY
MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt
YTlhYzY2YmU0OGY3LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3
LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfGQJ5qQ
W7jxwFbTPJQcAGzIdetWDtam4VePcrKqV1ZjdfLKYDceaye1L3Ehc0Co8Yt5ouG7
CqXWs+i20vZhZDb32CHUsdPYaTRKvPPvaUk1KOi0vhIQ+dGz85Mu/eohdk+jCTYN
DdSF67rYx8RHicFDLIsVZqtQ7jxKHRoXrinRHrpMLHgjx0wBAcKbHmWAltdUmG7f
J54Q1bLAC2iFhh2MrZIGNcptemJcTeC/S8SlxxkoAKqeVMqD/azX8PUCVGobVZJg
icgW3Aq2BRJpcUX3Nx4Kd82YaJM243nhzCRvf076sx+URdizxRA8DLD0MsdqTYhd
ZjB/OgcOQrKeMg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:15 2025 by rpki-client