Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: 7b6gLDmnrw9gUiXjCTkizrG6fbG2XPk9ZWZmpvY0IV8=
Subject key identifier: 2E:C1:CB:F9:87:3E:A4:DC:CB:DE:86:D4:8F:11:AC:C9:A8:71:A3:B7
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019A4D3CDF3EF6109144FE0A7EE21CD78684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 1629
Signing time: Tue 04 Nov 2025 05:00:25 +0000
Manifest this update: Tue 04 Nov 2025 05:00:25 +0000
Manifest next update: Wed 05 Nov 2025 05:00:25 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: qqnVaWe+/asXRF+ajm0YMyc4EeOdo1/Bde70qJNkUBw=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:df:3e:f6:10:91:44:fe:0a:7e:e2:1c:d7:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Nov 4 05:00:25 2025 GMT
Not After : Nov 5 05:00:25 2025 GMT
Subject: CN=2ec1cbf9873ea4dccbde86d48f11acc9a871a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:6c:7f:4b:1e:cd:84:ff:43:81:6e:8f:d9:
9f:65:6c:db:4a:3f:91:9a:2d:70:70:2b:67:f3:28:
5e:5b:bd:c8:ff:4f:b7:2f:0a:0b:95:b2:15:55:cf:
28:df:a5:d4:92:6a:d2:0b:16:46:50:95:bf:6d:17:
06:11:82:1f:32:ba:d5:97:08:ef:83:8b:99:c6:55:
19:27:a8:7f:ee:49:61:8b:79:2a:2e:8c:b2:a8:da:
68:9f:2c:3b:b9:2b:b2:a4:92:92:33:2f:92:64:0d:
84:02:d5:12:e7:c5:43:46:1a:ff:6b:db:ac:f8:0a:
09:e5:8c:84:5a:bd:60:36:90:20:de:9d:4d:77:52:
2e:bf:bb:ea:b9:18:22:36:1b:32:34:b2:25:36:6f:
6e:cc:c5:a9:4d:a0:1b:27:3f:09:21:6f:1b:0c:2b:
b8:27:d5:cb:8e:ef:d3:98:0a:e2:c7:94:c3:04:22:
35:f4:89:c7:73:6f:38:1b:f5:ce:7b:90:9d:8b:71:
5d:b5:d0:04:8b:11:e7:f7:27:fd:67:e2:81:98:2e:
58:29:c4:3a:d0:f8:5a:aa:15:5f:79:d5:8f:35:4c:
fe:14:20:2b:4a:53:18:f4:98:2f:7c:d5:d1:aa:38:
a4:55:0e:b3:ba:da:7d:b5:b1:70:bb:67:03:b1:f0:
22:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:CB:F9:87:3E:A4:DC:CB:DE:86:D4:8F:11:AC:C9:A8:71:A3:B7
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9b:49:54:a4:ec:e8:5e:7d:03:bf:fe:14:f6:b8:ba:92:4e:
fc:22:a3:e5:44:d3:8d:e1:cb:2e:1f:1e:2c:d8:31:06:44:23:
28:68:73:b6:c7:8b:c5:de:fe:8f:31:7f:57:5f:5b:87:35:71:
fc:07:c3:3f:c8:90:f5:24:20:57:ab:b2:fe:c2:89:5a:eb:5c:
eb:44:2b:9c:bd:3a:9e:5a:81:14:f8:44:dc:39:5f:7e:8c:4d:
f9:bc:7b:d8:be:9e:f3:ba:f1:53:b3:25:75:ca:f4:08:04:e1:
68:50:d0:ef:00:34:da:94:9e:76:7e:e7:2b:56:2f:31:2a:d1:
e9:b5:0e:f4:23:15:72:96:77:a9:a7:f6:b4:ef:62:f4:44:d1:
99:d4:b0:5d:1a:5d:25:9d:b2:4b:1c:ba:6b:0d:a5:85:8b:b1:
d1:d9:dc:b5:73:49:29:40:70:67:52:51:ba:ab:f0:dd:8a:05:
ec:1c:63:ed:5b:56:47:a2:88:02:e9:3c:00:4f:ce:56:be:ed:
39:85:b3:4b:07:90:c2:94:a6:5b:46:6e:7c:fd:2e:94:12:d0:
34:42:38:23:b2:05:4c:ba:02:d2:5e:79:7b:b3:7e:c1:6e:fa:
8b:6a:13:e5:8d:2f:55:db:1e:ab:a3:13:df:3d:16:ee:ee:00:
39:70:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:20 2025 by rpki-client