Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: m9HbwmyN9QK4dLyP6R0y73vP1/7EjzQx3UbEfJ34ENU=
Subject key identifier: D7:F8:DE:0B:54:48:AC:1C:ED:03:C7:E6:8B:88:70:2C:46:59:26:35
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 0198733D76DA56F95608D3E68D726E405F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0EC9
Signing time: Mon 04 Aug 2025 04:01:04 +0000
Manifest this update: Mon 04 Aug 2025 04:01:04 +0000
Manifest next update: Tue 05 Aug 2025 04:01:04 +0000
Files and hashes: 1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: qDoJ87vC32VGB4sQczLJJOYtJS4yc0VCgaa0atz2ZZU=)
3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:76:da:56:f9:56:08:d3:e6:8d:72:6e:40:5f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Aug 4 04:01:04 2025 GMT
Not After : Aug 5 04:01:04 2025 GMT
Subject: CN=d7f8de0b5448ac1ced03c7e68b88702c46592635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:fc:2b:37:7e:44:0d:1d:e2:a3:8a:2f:5c:
03:10:93:e0:25:e4:70:ef:0e:3f:51:8e:6b:03:39:
ef:d9:a5:9b:16:8e:02:39:4b:b8:f2:85:11:dd:1a:
d1:83:26:1c:f1:07:62:c7:1b:9f:28:83:a9:68:90:
df:96:5d:29:9d:a9:8b:07:2d:e9:0a:ae:55:75:4b:
b9:e2:64:85:ba:d5:ab:72:d3:0d:79:34:d4:8a:bf:
24:8c:3d:49:b3:fa:0f:63:df:64:e7:bb:17:3a:3d:
45:ba:a0:34:95:4f:39:bd:bf:fe:d8:80:bf:2b:40:
30:e6:24:a3:4f:b5:04:5d:76:c3:3a:7f:3a:7a:ac:
2c:e0:f4:a9:7b:d0:ea:ca:14:5c:48:e4:e1:58:30:
7c:9d:38:9c:91:7f:46:49:f7:fb:80:b8:8a:b3:dd:
dd:13:50:64:b5:34:38:d4:69:bb:be:5d:a4:23:d4:
1a:a4:ce:88:4d:b0:60:de:32:6a:08:11:5e:29:8e:
b7:8b:6b:69:3d:7e:01:df:19:f4:cc:95:80:16:50:
b0:17:c7:f0:a2:38:c6:c1:b7:bc:33:99:3c:b9:13:
a5:84:e1:16:30:84:c8:f0:fb:93:e0:e7:12:d2:5c:
15:a2:6c:6c:1a:42:f4:7e:90:49:f6:19:d0:f0:a2:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F8:DE:0B:54:48:AC:1C:ED:03:C7:E6:8B:88:70:2C:46:59:26:35
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:1b:19:a8:e1:fd:8b:68:e9:29:0a:6e:73:67:d0:ea:d6:
f6:9d:97:08:ad:4e:6e:54:0e:6d:2c:cd:1d:46:36:f6:07:54:
89:9d:f3:e3:db:a5:b4:db:fb:9b:15:44:65:67:b9:52:16:a1:
8c:cd:aa:dd:39:35:0a:0e:d7:ed:07:c4:8d:a7:69:ab:b6:24:
33:d3:37:ca:6c:a3:90:73:9d:06:ed:08:72:16:72:fe:0d:64:
b0:53:cb:ff:c5:8d:8f:f0:12:36:19:ff:e4:1b:3c:dd:80:9d:
6c:f8:43:6a:18:06:b7:45:f8:3e:a3:6b:98:b8:e8:3a:a9:fd:
47:e6:12:47:a4:9e:3b:d9:1d:ae:8f:4e:6a:d3:43:0b:2c:78:
93:47:49:68:c4:45:d9:1f:8c:64:25:28:b9:0a:19:26:90:d5:
22:ec:18:34:6c:f7:70:10:41:b6:f3:5f:2d:f5:e4:87:cb:0a:
33:55:62:ec:61:e3:b8:87:8e:31:c3:27:d7:da:a0:77:1a:ab:
5f:01:9a:55:36:2b:c8:ed:c6:be:b7:ce:0a:47:3a:b7:ce:d6:
e0:51:20:fe:45:e7:f6:64:4d:e5:09:83:b1:8e:05:38:63:57:
23:cb:bd:8f:09:a4:8f:95:62:15:f0:a7:93:f4:2d:82:f2:b6:
ba:a9:a2:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPXbaVvlWCNPmjXJuQF+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDA5NTU1MTA1MDQwNTc4Y2IyOTYwNzAwNzRmNDUxMDcy
NTJlZWIwHhcNMjUwODA0MDQwMTA0WhcNMjUwODA1MDQwMTA0WjAzMTEwLwYDVQQD
EyhkN2Y4ZGUwYjU0NDhhYzFjZWQwM2M3ZTY4Yjg4NzAyYzQ2NTkyNjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjv8Kzd+RA0d4qOKL1wDEJPgJeRw
7w4/UY5rAznv2aWbFo4COUu48oUR3RrRgyYc8QdixxufKIOpaJDfll0pnamLBy3p
Cq5VdUu54mSFutWrctMNeTTUir8kjD1Js/oPY99k57sXOj1FuqA0lU85vb/+2IC/
K0Aw5iSjT7UEXXbDOn86eqws4PSpe9DqyhRcSOThWDB8nTickX9GSff7gLiKs93d
E1BktTQ41Gm7vl2kI9QapM6ITbBg3jJqCBFeKY63i2tpPX4B3xn0zJWAFlCwF8fw
ojjGwbe8M5k8uROlhOEWMITI8PuT4OcS0lwVomxsGkL0fpBJ9hnQ8KIeBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf43gtUSKwc7QPH5ouIcCxGWSY1MB8GA1UdIwQY
MBaAFEpAlVUQUEBXjLKWBwB09FEHJS7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEt
NWU3OWI0NDM1ZTJjLzEvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEtNWU3OWI0NDM1ZTJj
LzEvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKUbGajh
/Yto6SkKbnNn0OrW9p2XCK1OblQObSzNHUY29gdUiZ3z49ultNv7mxVEZWe5Uhah
jM2q3Tk1Cg7X7QfEjadpq7YkM9M3ymyjkHOdBu0IchZy/g1ksFPL/8WNj/ASNhn/
5Bs83YCdbPhDahgGt0X4PqNrmLjoOqn9R+YSR6SeO9kdro9OatNDCyx4k0dJaMRF
2R+MZCUouQoZJpDVIuwYNGz3cBBBtvNfLfXkh8sKM1Vi7GHjuIeOMcMn19qgdxqr
XwGaVTYryO3GvrfOCkc6t87W4FEg/kXn9mRN5QmDsY4FOGNXI8u9jwmkj5ViFfCn
k/QtgvK2uqmibA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:32 2025 by rpki-client