Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: RN73G7mVCT/Wfi5496Q1KI/qu6kmisDAbVZTCXOh/NU=
Subject key identifier: 90:CC:99:AA:C6:CB:3A:1B:54:4A:6A:3A:FC:BE:9B:E8:84:75:77:05
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019896DC7DA1EC450EB476C715745B829995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 1546
Signing time: Mon 11 Aug 2025 02:01:29 +0000
Manifest this update: Mon 11 Aug 2025 02:01:29 +0000
Manifest next update: Tue 12 Aug 2025 02:01:29 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: W5AJa1CBCu0UhrhdQT1+X2rb7Twe/q4Zhn1GvHx7WP8=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:7d:a1:ec:45:0e:b4:76:c7:15:74:5b:82:99:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Aug 11 02:01:29 2025 GMT
Not After : Aug 12 02:01:29 2025 GMT
Subject: CN=90cc99aac6cb3a1b544a6a3afcbe9be884757705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:10:57:b7:ec:e2:7d:b1:49:2c:5d:77:89:
bb:a7:b7:3d:24:4f:8e:44:e8:80:50:53:4b:b0:a6:
a0:02:4a:24:3e:f3:6a:7c:79:95:5f:5c:97:bf:26:
f1:f8:5c:32:49:c2:c2:15:80:47:59:f5:78:fe:66:
38:8a:9d:39:6b:e5:b3:03:76:c3:21:2e:bc:3a:35:
8e:27:14:72:62:e4:b9:8d:70:e6:e4:ff:68:43:7c:
ca:dc:da:1a:fb:5f:28:e4:2f:1b:94:10:44:68:4f:
5b:ca:8f:d4:19:a1:4e:25:cf:d7:24:c9:06:73:88:
fe:31:98:ef:04:e9:d2:be:93:68:73:42:f6:03:bb:
fe:27:c0:33:86:55:23:1c:78:8b:1c:b6:21:07:2e:
95:99:5c:e2:de:ce:9d:be:6b:9a:fe:04:b6:ea:d3:
06:e2:20:e1:df:1a:ef:04:c9:26:ef:77:dd:54:75:
c5:37:2b:9c:a7:fd:54:12:a7:ee:11:7c:4e:57:52:
88:94:21:24:42:e9:d9:75:f8:bf:e0:a3:3e:d0:70:
4e:d5:e5:ae:b0:36:f2:48:10:47:20:77:f0:8b:8a:
e5:78:97:cd:25:e6:47:f7:a1:5f:1b:7b:30:b0:74:
ac:54:6b:28:92:bc:92:f6:9d:9d:0b:e4:64:96:28:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CC:99:AA:C6:CB:3A:1B:54:4A:6A:3A:FC:BE:9B:E8:84:75:77:05
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b9:64:74:fb:69:c5:57:54:01:25:ac:47:5e:84:8a:62:e5:
93:b1:f9:e5:00:c1:e0:22:d7:a6:f8:d0:cd:76:c8:6b:81:ee:
90:56:d1:2d:e3:3f:db:15:7c:c3:3f:88:0f:76:02:9f:99:77:
4f:52:25:c7:39:9b:ee:d9:57:47:63:bf:cd:82:b5:ed:5a:83:
7d:a7:8f:0f:3d:34:03:c2:4f:ca:37:49:bb:57:b8:cb:b3:ff:
bf:e8:fe:14:36:85:20:4b:fe:18:1c:a4:44:a3:0b:3c:eb:f7:
47:18:a5:d3:88:ee:86:b8:f1:65:2a:9c:9a:0a:83:a7:f8:b8:
29:b0:5c:52:c6:1b:4f:d4:7e:11:89:25:8a:fb:b9:01:ad:78:
bf:26:82:ab:ed:b0:a6:10:7c:fa:ab:10:32:b5:e4:29:0b:d4:
52:e0:ef:91:b2:57:0c:ad:8e:52:6b:d5:c8:fb:3c:2b:3d:13:
c4:0b:75:d9:42:5d:f0:61:44:a3:72:6d:f8:b5:9d:3c:98:e5:
ed:d6:50:05:57:6d:65:cd:3d:65:24:64:a5:db:bf:d2:47:99:
55:64:5e:14:8e:da:6c:c0:ff:89:bf:ae:51:6d:2c:c0:2e:26:
dc:d0:3f:5f:db:e4:92:06:2c:ad:6e:9b:7f:a8:d6:f4:1b:f2:
60:aa:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:58:50 2025 by rpki-client