Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
File: SKGBKVSA9hv1hC13EvSV7CSacs8.mft (raw, json)
Hash identifier: J5apomwYLYdL4/n0paQE2pIxR2cXHV+J9JUamQLSyqw=
Subject key identifier: 25:FD:AA:B5:42:05:A7:0B:62:FA:0C:73:BE:E7:82:C6:F4:2A:F7:36
Authority key identifier: 48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
Certificate issuer: /CN=48a181295480f61bf5842d7712f495ec249a72cf
Certificate serial: 01988E0F6661C6E7808017E6A42CDAA40AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
Manifest number: 01B8
Signing time: Sat 09 Aug 2025 09:00:30 +0000
Manifest this update: Sat 09 Aug 2025 09:00:30 +0000
Manifest next update: Sun 10 Aug 2025 09:00:30 +0000
Files and hashes: 1: SKGBKVSA9hv1hC13EvSV7CSacs8.crl (hash: IeZrbToQE6yUEo5/AcszOIWQvoFlgxO3PsXChFXjiT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:66:61:c6:e7:80:80:17:e6:a4:2c:da:a4:0a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a181295480f61bf5842d7712f495ec249a72cf
Validity
Not Before: Aug 9 09:00:30 2025 GMT
Not After : Aug 10 09:00:30 2025 GMT
Subject: CN=25fdaab54205a70b62fa0c73bee782c6f42af736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3a:40:cf:ee:04:21:ab:0d:99:e6:55:42:5f:
e8:25:52:54:e0:0f:46:41:f0:71:b1:0c:51:7d:40:
a2:64:ab:ee:5c:6b:02:44:8b:a5:26:d4:cd:2e:cb:
b4:01:66:50:f6:33:f7:5d:10:6c:71:62:54:c1:d9:
3d:1b:bb:21:1d:63:57:bb:58:37:c5:c8:e9:2c:96:
31:ff:a3:fb:3f:ba:2e:72:63:1e:46:4f:4e:2d:b6:
e4:ee:c3:63:9b:ad:07:59:92:6e:a6:f7:9b:d7:66:
a6:ee:e1:98:a7:06:ab:e5:2f:14:18:66:bf:97:c2:
84:2c:9d:6f:0b:0e:94:7e:c6:59:85:fb:54:53:47:
d1:67:9d:18:a4:cc:43:c0:47:78:cd:72:a0:28:0b:
7e:52:a0:fe:af:25:5e:e2:59:fd:43:19:0b:dd:15:
58:bb:41:de:eb:9b:be:15:56:2b:6b:91:0a:3e:d3:
74:f3:91:64:57:42:75:0a:9c:7a:30:0c:8b:7a:0d:
b0:39:c0:f8:e1:7e:ca:f4:00:bd:f2:ff:25:35:c9:
57:6f:ee:d5:a4:b2:e3:de:03:53:0f:9d:d0:84:13:
4b:10:82:84:ca:aa:db:82:c1:b3:d9:b1:a9:00:c3:
89:60:f2:4c:15:95:f2:cc:8a:73:b6:80:35:3e:b2:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:AA:B5:42:05:A7:0B:62:FA:0C:73:BE:E7:82:C6:F4:2A:F7:36
X509v3 Authority Key Identifier:
keyid:48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:7a:5c:67:b5:a8:b3:ba:e1:76:6b:8a:5e:4c:72:3d:67:
03:00:01:3b:64:92:c5:86:c5:d1:19:10:9d:3f:b2:08:40:10:
2a:54:ae:b2:bb:07:21:77:61:41:61:ae:34:7b:9c:0f:dd:03:
a6:b1:3e:ba:d9:e2:fc:e0:59:ea:62:8d:17:5f:50:30:ca:a9:
1b:17:4d:07:7f:2e:40:5b:d8:f8:ce:8f:c6:e7:45:7c:95:b3:
b1:7a:39:8f:15:5f:70:11:81:dc:94:02:fa:b7:08:b7:bb:b7:
66:c6:2f:00:fa:59:36:99:6a:fd:76:40:51:2b:54:92:e1:5a:
80:ae:a4:6c:1a:b1:68:42:21:20:9a:75:e8:11:f2:d1:bf:4c:
2c:8b:26:0f:83:73:f5:a7:ae:15:6a:00:62:fc:7e:cc:f2:95:
b1:95:96:40:1d:fb:ab:26:e2:59:29:4f:00:6b:b0:d8:59:76:
0b:3a:82:c8:19:df:3c:ca:58:87:d3:05:34:2d:c5:92:29:cc:
55:1b:d8:6d:96:3f:40:6d:59:05:53:70:9b:fd:af:1f:2c:3f:
3a:d8:d4:8d:76:54:4b:3a:1e:9c:64:fb:c5:0b:8c:61:2b:a3:
cf:fc:d8:e1:65:e6:93:14:93:c6:f4:17:43:dd:12:0f:a0:1c:
93:a3:0b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:57 2025 by rpki-client