Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: GSw68BtRlQYvnY7yY4fNasCcQjc44XRdV0G7yUhIyzE=
Subject key identifier: 85:68:E9:23:A9:D9:3E:58:87:75:85:8F:DD:E1:3C:8C:E4:E2:E8:89
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 019A4E190C716B1547B70BD8243785B0B352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: rBznlZq906jEJhdrCn8s6q49/DN2MFgyyOZCIL6yHkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0c:71:6b:15:47:b7:0b:d8:24:37:85:b0:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=8568e923a9d93e588775858fdde13c8ce4e2e889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:af:a7:37:ec:30:d9:82:b2:2d:83:35:5c:
16:1a:e6:af:6a:75:bb:c1:cc:e8:a8:d8:02:0e:39:
cd:d5:56:ed:89:ed:f3:96:a7:7b:4f:ba:0c:42:b3:
5c:08:7c:e0:23:fa:57:9c:55:cf:a7:dc:83:bb:c0:
15:e6:79:73:47:a8:96:b7:0c:14:62:6b:a7:94:a1:
f1:d1:45:39:a6:96:e1:25:86:75:90:70:1f:7a:32:
2a:bf:bd:8b:57:2c:65:e8:8e:e9:4c:72:92:ec:fd:
12:03:9e:36:b3:28:26:31:ee:89:c0:50:63:69:f1:
e6:33:22:ce:56:e6:1b:32:9f:44:ce:51:32:6d:9a:
32:24:45:47:c0:e8:e4:89:b2:77:25:a2:4e:aa:c1:
67:e0:01:80:fa:e4:13:e4:f8:d5:62:41:e3:f7:b2:
86:87:da:ca:ae:f8:fc:e9:ea:89:2b:98:9e:ed:47:
5a:ef:96:e8:11:33:e1:2a:7e:65:75:c9:31:0b:10:
12:b1:ed:36:d3:89:7d:9a:7d:dd:de:c9:1a:3e:82:
d1:14:02:c6:e9:d5:31:39:0a:1a:66:23:3d:aa:df:
2d:83:43:6e:d8:e3:45:c8:1e:19:83:b0:b7:4d:05:
79:24:cb:0e:1c:70:b0:bd:16:fe:48:ab:c9:27:28:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:E9:23:A9:D9:3E:58:87:75:85:8F:DD:E1:3C:8C:E4:E2:E8:89
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:21:9a:eb:d7:e9:d0:49:ee:19:47:36:03:cc:9a:8b:05:08:
c5:05:68:fa:f5:42:dc:62:1e:1a:a9:e8:40:c4:fb:a6:1b:a8:
a4:da:b9:10:ca:db:90:6f:1f:0c:74:2d:fd:1b:85:43:03:61:
f3:77:ce:5f:92:f4:03:a9:e8:fc:69:ed:4b:af:6b:ca:07:e8:
57:91:55:1d:35:84:4a:3e:7f:2f:51:58:d6:89:04:cf:d9:b5:
70:be:1c:98:69:22:08:3a:cb:58:8d:2a:c8:6a:fb:c1:de:65:
a6:89:2f:96:28:4f:86:16:87:34:80:4c:db:d2:55:28:83:3b:
01:c9:0e:18:a4:79:66:34:98:a4:4a:45:5d:ad:53:c8:18:8b:
b2:ba:b9:4a:36:7e:0c:38:fb:e2:6e:d5:a9:60:11:75:e9:b7:
90:a7:9e:b2:ff:8a:4b:4e:e9:3c:18:34:79:22:31:2c:f1:b3:
53:b8:39:70:97:27:46:f0:b3:7b:89:28:37:58:3a:1d:2f:7b:
45:d8:32:6d:1c:b9:fe:d6:72:f1:5c:3b:5f:ce:14:a2:27:7f:
1a:76:26:2b:09:5c:fa:52:8f:32:60:f0:8e:18:ef:1f:e1:94:
0d:69:0c:fb:63:d7:21:24:bb:2a:b4:07:e7:94:b4:92:99:63:
8c:92:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:46 2025 by rpki-client