Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: 7nJoHz7QAWASnoFpu3EsXlfb/Zc/PY4GZ6pgdFu1KGw=
Subject key identifier: D5:27:0B:50:6E:59:28:E5:FA:31:1B:C1:31:6C:58:B3:BB:BA:B3:A0
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 01987B9CAA1E82262AD2FE347B3A1191F8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 1598
Signing time: Tue 05 Aug 2025 19:02:01 +0000
Manifest this update: Tue 05 Aug 2025 19:02:01 +0000
Manifest next update: Wed 06 Aug 2025 19:02:01 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: 5SptR2opmXQ3itiDFGDPH7pa9LLnCZNLDKLC4ox8O+g=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:aa:1e:82:26:2a:d2:fe:34:7b:3a:11:91:f8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Aug 5 19:02:01 2025 GMT
Not After : Aug 6 19:02:01 2025 GMT
Subject: CN=d5270b506e5928e5fa311bc1316c58b3bbbab3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:fa:e9:2e:1b:5b:b1:91:7a:ae:37:16:5a:
67:1b:41:f0:30:a0:cf:e0:b1:1c:60:5f:c8:d4:a6:
be:d5:ff:0d:1f:6d:1f:00:d2:0d:ac:4c:22:97:0a:
65:92:99:10:0f:76:e1:19:2c:60:f7:89:72:c9:1e:
96:30:05:22:b5:e2:09:53:1f:e8:bb:06:3a:c4:6b:
1e:5d:3f:25:cd:f0:55:ee:7e:81:c2:0e:e8:bc:45:
d2:f2:fa:b9:fd:07:be:d8:a9:cb:1b:6d:ff:9b:9e:
31:62:30:5f:dd:e7:01:db:27:a8:e1:7c:0a:43:66:
68:c8:95:d6:3f:39:55:62:ce:ed:5c:a9:2e:0a:88:
af:dd:26:e3:60:19:48:14:c3:c6:4a:61:d7:34:96:
65:a8:6e:4a:30:d3:e7:77:79:62:53:f1:24:34:ce:
dd:ab:2f:2d:41:95:4a:8d:83:9a:6a:b0:09:aa:bd:
0d:ce:1d:5f:e7:f9:8b:9e:90:71:4f:95:36:a2:df:
42:2f:d1:89:7a:6a:da:69:d2:1a:b2:2e:4d:bb:b7:
4b:4b:9b:f3:ad:8e:64:ce:b2:a2:e3:53:49:59:4a:
0c:3c:24:e2:65:91:a1:c0:d2:86:0a:62:01:25:1c:
a4:ea:3a:ab:91:c8:cd:98:4d:ae:80:56:27:0c:fe:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:27:0B:50:6E:59:28:E5:FA:31:1B:C1:31:6C:58:B3:BB:BA:B3:A0
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:d4:7e:53:a2:0f:da:dd:2d:62:57:42:34:d3:17:cf:33:
15:4d:ee:90:e5:ab:7a:b1:24:ac:70:8f:54:40:0b:c4:ce:87:
18:75:bd:eb:1b:81:df:c6:3c:a8:d1:2b:22:cf:63:04:da:52:
e5:c2:48:6b:ff:a1:83:6b:00:da:8b:58:74:6d:9e:e5:9c:89:
2a:00:dc:17:a3:14:27:02:ae:4d:79:ac:4a:43:2f:08:f3:1f:
a3:30:b0:4f:00:7c:ef:b0:46:82:df:7a:12:fc:8d:1f:ab:8b:
21:4f:c9:e1:a7:50:40:6c:e7:8d:29:52:84:81:de:cc:41:14:
5c:96:09:86:c0:bc:03:6f:3b:73:30:49:12:c4:d4:52:9f:0c:
4b:46:95:7e:c0:7a:85:5f:9f:b2:a5:ed:76:99:83:48:e2:46:
b5:92:ca:dd:32:3b:61:88:33:e2:ce:00:cb:69:75:d9:91:d3:
b0:82:02:14:bc:88:b2:02:80:ff:34:24:2e:d7:49:9b:66:57:
f9:35:31:7f:7d:96:a0:09:27:67:e6:a2:e2:af:27:33:88:31:
a5:64:29:db:b4:47:f7:bd:eb:e3:7c:22:eb:e8:a0:e6:6a:dd:
f0:19:de:05:ad:12:69:4d:2c:1d:bb:bf:50:44:4d:81:20:3a:
20:67:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:06 2025 by rpki-client