Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: MCL+hC2WZmV40kNFR60+XqgVEcTRXpNMCmvU0cTf2RU=
Subject key identifier: AA:B7:9C:24:C8:1B:85:2D:76:E6:CB:00:4C:6F:ED:B7:44:C2:57:CA
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 01987306B34ADC8AC8A65DCE6F4C902AA872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 03:01:15 +0000
Manifest this update: Mon 04 Aug 2025 03:01:15 +0000
Manifest next update: Tue 05 Aug 2025 03:01:15 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: WmOcYJri2R8aEhPmDjbY5E/RCm+etarXnp/ivmvZQQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:b3:4a:dc:8a:c8:a6:5d:ce:6f:4c:90:2a:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Aug 4 03:01:15 2025 GMT
Not After : Aug 5 03:01:15 2025 GMT
Subject: CN=aab79c24c81b852d76e6cb004c6fedb744c257ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:e8:5f:3b:27:8f:61:1b:29:45:0b:be:3b:
28:7f:6a:79:43:0e:50:50:0f:4c:48:b3:6d:c3:7a:
de:1d:08:47:96:3d:77:a0:18:d7:0e:15:4a:e8:b1:
3f:44:cb:31:6c:85:35:03:9c:1a:fd:8b:e1:5e:31:
12:c8:32:a0:c3:a3:e6:18:1c:8e:99:a5:5b:9a:26:
8f:9f:2d:b5:b4:93:82:ed:2b:2b:a0:8b:0a:14:65:
8c:ac:41:4b:b5:1c:c9:1c:1b:23:0a:62:0c:e8:3e:
5a:d6:77:fb:00:f0:62:e9:c2:fc:e4:ef:62:b6:8d:
3b:26:e4:24:df:30:f9:15:6d:f9:c6:ff:bd:be:58:
80:84:d1:74:55:b5:fb:e7:c6:d8:53:56:02:5a:d0:
c6:cd:79:33:be:11:24:62:64:42:36:1f:fb:bf:1b:
a1:3b:54:bd:6c:95:e2:b5:00:1e:43:d3:38:ac:2c:
ee:3d:69:a9:b7:32:4d:64:88:fa:f2:c6:d5:0f:ba:
85:50:47:dd:80:28:d1:9f:e4:fa:17:50:7e:6d:fa:
b0:e9:bb:3a:25:fb:65:fa:f9:16:42:e3:ca:83:1b:
e7:84:d5:9b:4e:53:b9:bf:0a:6e:21:89:47:93:95:
6f:72:52:4a:65:1d:ae:29:21:6b:9c:4c:39:8f:4e:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:9C:24:C8:1B:85:2D:76:E6:CB:00:4C:6F:ED:B7:44:C2:57:CA
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:46:ee:e7:4f:96:f8:c0:aa:72:41:6d:f5:76:ff:cc:76:a7:
2f:71:b2:6d:5e:e0:44:12:5c:2c:9e:ce:7b:1d:ae:18:bb:5a:
e4:2c:e2:02:92:fd:13:63:be:10:23:a6:18:ed:1b:24:4b:2e:
3f:73:9c:1e:ac:ec:c7:ed:e2:cd:bf:5a:a4:02:34:65:06:d3:
30:c4:f9:6a:85:8d:38:2b:8d:7d:96:05:7d:12:67:2a:32:2d:
eb:39:33:00:b1:05:0c:b3:16:cc:1f:53:c9:f5:e3:11:4b:bd:
1f:8f:97:ee:32:38:e8:72:b7:9c:79:9d:6d:56:31:c6:a4:60:
de:75:98:f4:9d:a6:32:e9:66:51:4b:1a:6d:f3:0b:e8:90:fd:
4b:55:8c:78:0f:8a:7b:fc:ae:1a:e4:e7:28:9a:b8:87:f3:57:
b5:df:cc:68:44:f4:95:8d:8b:29:f9:bd:0f:68:4d:4b:ed:ab:
a1:62:85:2c:b5:e4:64:7d:19:71:b4:13:83:5c:1b:05:e9:94:
03:3c:02:95:2f:0a:c5:67:ca:87:51:77:a5:bd:ac:de:22:7c:
e0:45:2a:74:7b:eb:89:2c:d3:8e:19:9e:64:ae:da:e0:d3:2d:
9a:82:a1:7f:18:68:79:38:88:88:e9:0c:67:9d:fd:38:80:5d:
e1:f2:39:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBrNK3IrIpl3Ob0yQKqhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGUyY2YwMDJkNDVmZjlhZGUyYWI4NjQzYWRiZmUwODNj
YTEyZDAwHhcNMjUwODA0MDMwMTE1WhcNMjUwODA1MDMwMTE1WjAzMTEwLwYDVQQD
EyhhYWI3OWMyNGM4MWI4NTJkNzZlNmNiMDA0YzZmZWRiNzQ0YzI1N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJXoXzsnj2EbKUULvjsof2p5Qw5Q
UA9MSLNtw3reHQhHlj13oBjXDhVK6LE/RMsxbIU1A5wa/YvhXjESyDKgw6PmGByO
maVbmiaPny21tJOC7SsroIsKFGWMrEFLtRzJHBsjCmIM6D5a1nf7APBi6cL85O9i
to07JuQk3zD5FW35xv+9vliAhNF0VbX758bYU1YCWtDGzXkzvhEkYmRCNh/7vxuh
O1S9bJXitQAeQ9M4rCzuPWmptzJNZIj68sbVD7qFUEfdgCjRn+T6F1B+bfqw6bs6
Jftl+vkWQuPKgxvnhNWbTlO5vwpuIYlHk5VvclJKZR2uKSFrnEw5j05SmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq3nCTIG4UtdubLAExv7bdEwlfKMB8GA1UdIwQY
MBaAFEpOLPAC1F/5reKrhkOtv+CDyhLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYt
OWFjODFlZjQ1OTJjLzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYtOWFjODFlZjQ1OTJj
LzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkbu50+W
+MCqckFt9Xb/zHanL3GybV7gRBJcLJ7Oex2uGLta5CziApL9E2O+ECOmGO0bJEsu
P3OcHqzsx+3izb9apAI0ZQbTMMT5aoWNOCuNfZYFfRJnKjIt6zkzALEFDLMWzB9T
yfXjEUu9H4+X7jI46HK3nHmdbVYxxqRg3nWY9J2mMulmUUsabfML6JD9S1WMeA+K
e/yuGuTnKJq4h/NXtd/MaET0lY2LKfm9D2hNS+2roWKFLLXkZH0ZcbQTg1wbBemU
AzwClS8KxWfKh1F3pb2s3iJ84EUqdHvriSzTjhmeZK7a4NMtmoKhfxhoeTiIiOkM
Z539OIBd4fI51Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:48 2025 by rpki-client