Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: lA3nW0f5HvScp7hKidPIVdEcWKlhsCFuRQYQ2AgiGGQ=
Subject key identifier: 7D:44:C2:17:85:70:B7:6C:FF:D0:B5:01:27:17:09:F0:DB:96:C9:F9
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 01987ED35D729FD37D5509D0BFB5BCD299FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 052B
Signing time: Wed 06 Aug 2025 10:00:37 +0000
Manifest this update: Wed 06 Aug 2025 10:00:37 +0000
Manifest next update: Thu 07 Aug 2025 10:00:37 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: 3E/BQbLUb3ijPJycNDaCXWPM4zvtdSLlctLWhbbRj9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:5d:72:9f:d3:7d:55:09:d0:bf:b5:bc:d2:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Aug 6 10:00:37 2025 GMT
Not After : Aug 7 10:00:37 2025 GMT
Subject: CN=7d44c2178570b76cffd0b501271709f0db96c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:fa:45:ff:ff:9f:5f:3d:c8:b2:5d:5a:03:
88:3b:d7:ed:f5:a4:73:ae:0c:4a:3e:57:34:61:f2:
01:ee:7a:2f:c4:dd:4c:f6:88:2c:06:c8:0e:26:57:
00:00:d2:90:22:8e:40:fe:b0:58:69:ba:6e:aa:17:
02:67:b3:5f:6b:b9:67:f8:3e:87:fa:a3:8b:b6:9a:
59:fc:05:58:31:38:7e:f9:5e:61:37:ea:24:fa:b3:
0b:6e:d6:0f:81:6b:be:d0:f1:2b:44:6a:86:fe:f6:
ce:3b:12:48:0f:56:31:bd:4c:5e:34:50:f0:72:4e:
67:c4:1b:f4:b4:0c:26:a2:a0:fc:19:7c:13:ea:31:
b3:0b:01:20:19:e3:be:b7:07:b8:cc:b6:bf:92:0f:
74:99:07:f4:71:ea:04:9b:c8:4e:0a:52:6a:a7:df:
8e:ce:65:fa:00:f7:88:ca:48:a2:1e:80:48:f4:8b:
08:8a:03:f3:6f:3a:a7:76:4d:f2:1a:e5:6e:86:64:
db:d8:29:00:5e:df:5f:b5:fa:5c:4c:5e:d9:14:8a:
97:14:bc:c4:6f:36:9d:ff:05:35:a9:98:26:38:77:
a2:fa:ba:70:ba:f5:92:28:b6:fc:c5:a4:c7:fd:68:
78:54:fa:3c:3e:4b:b7:4a:e7:b0:d8:7a:51:83:a8:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:44:C2:17:85:70:B7:6C:FF:D0:B5:01:27:17:09:F0:DB:96:C9:F9
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:87:3d:d6:5e:56:38:2c:d5:5e:92:7a:d8:06:33:44:92:ad:
69:3f:21:e1:a6:39:48:a3:df:50:3a:a3:cc:3f:85:ff:44:9d:
c9:66:11:27:fc:e0:d7:8a:c5:64:46:a8:d4:11:37:c5:c6:36:
d9:cf:44:4a:27:ce:da:b1:ba:01:f1:f7:4d:9c:1e:62:9e:37:
2d:6d:3d:64:c3:9c:c7:d7:c4:34:1d:4d:09:50:db:ee:db:a5:
17:d6:ab:63:6b:8a:0d:31:d4:f2:cf:c3:a3:7c:9f:e1:fb:a5:
10:f3:77:ef:fb:89:96:2e:85:b1:6c:fd:83:6a:81:c3:72:66:
8f:cc:e1:bf:56:de:43:f1:8e:b2:ff:29:8d:a0:69:9b:be:fd:
fe:2d:d0:b1:c5:38:e3:33:03:ab:34:0c:eb:57:af:1e:98:05:
fb:bc:18:b0:61:cc:d0:44:c2:ed:67:5b:84:d4:06:33:3c:ae:
1c:16:3d:be:ab:59:4e:23:20:69:28:44:d1:5c:5e:94:81:1d:
9e:64:0c:fe:8d:d3:51:d8:d1:d6:a1:be:29:62:20:07:b9:62:
6e:02:67:87:21:b7:78:a2:11:70:62:84:2c:7a:c4:73:9a:62:
c9:be:1e:94:e2:c0:48:0f:5a:b1:cf:88:bf:0e:32:56:df:49:
b7:b7:6e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+011yn9N9VQnQv7W80pn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWM4MDZiNWJjYTRjN2Q5MTZkNTAzZDVjNzkzYzhkZjQ0
ZWU2ZDMwHhcNMjUwODA2MTAwMDM3WhcNMjUwODA3MTAwMDM3WjAzMTEwLwYDVQQD
Eyg3ZDQ0YzIxNzg1NzBiNzZjZmZkMGI1MDEyNzE3MDlmMGRiOTZjOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuML6Rf//n189yLJdWgOIO9ft9aRz
rgxKPlc0YfIB7novxN1M9ogsBsgOJlcAANKQIo5A/rBYabpuqhcCZ7Nfa7ln+D6H
+qOLtppZ/AVYMTh++V5hN+ok+rMLbtYPgWu+0PErRGqG/vbOOxJID1YxvUxeNFDw
ck5nxBv0tAwmoqD8GXwT6jGzCwEgGeO+twe4zLa/kg90mQf0ceoEm8hOClJqp9+O
zmX6APeIykiiHoBI9IsIigPzbzqndk3yGuVuhmTb2CkAXt9ftfpcTF7ZFIqXFLzE
bzad/wU1qZgmOHei+rpwuvWSKLb8xaTH/Wh4VPo8Pku3Suew2HpRg6jadwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1EwheFcLds/9C1AScXCfDblsn5MB8GA1UdIwQY
MBaAFEisgGtbykx9kW1QPVx5PI30TubTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzIt
NzIzYmFhOGU2ODhhLzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzItNzIzYmFhOGU2ODhh
LzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoc91l5W
OCzVXpJ62AYzRJKtaT8h4aY5SKPfUDqjzD+F/0SdyWYRJ/zg14rFZEao1BE3xcY2
2c9ESifO2rG6AfH3TZweYp43LW09ZMOcx9fENB1NCVDb7tulF9arY2uKDTHU8s/D
o3yf4fulEPN37/uJli6FsWz9g2qBw3Jmj8zhv1beQ/GOsv8pjaBpm779/i3QscU4
4zMDqzQM61evHpgF+7wYsGHM0ETC7WdbhNQGMzyuHBY9vqtZTiMgaShE0VxelIEd
nmQM/o3TUdjR1qG+KWIgB7libgJnhyG3eKIRcGKELHrEc5piyb4elOLASA9asc+I
vw4yVt9Jt7duzA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:44:57 2025 by rpki-client