
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File: Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier: Ai0cgQpobAgg56KFztUo53hOmEAYyKkfXRSWGxlPM3k=
Subject key identifier: 35:99:A7:26:46:F3:84:1D:03:5C:40:C1:24:D5:F2:8F:79:9D:57:E7
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019A4E18BA093747455C531F7DFE234EFC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number: 0D70
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
2: F6wdCUdNs0S6x-lvMlPtyMpUfZs.roa (hash: 9jMOcYoLdDpo5EB5/0BEoeSC3reaOBGBRYSNiNLwg9k=)
3: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
4: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
5: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=)
6: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
7: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: XdQVVDl9XEZEz0UF/fcyTL9GJwrlToRrBf0UbmhqmXo=)
8: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (hash: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=)
9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=)
13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
14: peIOlV3OfBEMu-qBfSwFNIMmyUg.roa (hash: 6anSx7OoDk9TVb+rhIIUnKyoMu5IPmI9Uc6n5lkG9F0=)
15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
16: rAiRJTmW8XfVmhpte53A3cU5F0E.roa (hash: 4rCJoUat5Hf3Yqw8erIeJ6FU4KlxG5HpAnlRqviFfYc=)
17: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=)
18: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
19: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ba:09:37:47:45:5c:53:1f:7d:fe:23:4e:fc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=3599a72646f3841d035c40c124d5f28f799d57e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:4c:2f:f8:50:39:65:3a:18:3a:d7:0a:69:
19:8e:1b:dd:b2:1b:d3:19:4c:c5:4f:d5:7e:e2:09:
f6:cc:42:0b:ca:3b:55:f2:2d:aa:98:ba:1c:66:b8:
49:15:7a:b7:9f:a4:5c:2e:0b:a6:9a:06:ab:30:db:
0c:23:ef:7b:2f:45:81:89:2c:87:88:54:48:35:7c:
71:7f:bc:e5:3b:f0:e9:95:a8:b1:11:e9:74:65:eb:
cd:ba:c4:5a:ae:f5:72:65:07:e4:a5:be:3d:a8:f3:
db:e5:12:8e:0f:13:52:49:8c:f3:fe:b3:01:56:20:
1b:2e:48:8a:ac:3a:10:95:49:66:ca:d9:6f:5d:a8:
be:1c:a0:9c:a8:e7:d0:2a:51:86:f6:ba:31:b0:60:
d5:fa:34:2d:b8:53:16:d9:be:78:62:4e:05:96:1b:
97:f9:44:2f:39:7f:f4:2b:20:7f:70:6b:aa:93:da:
d4:7d:a7:52:fa:29:a8:d9:fb:53:56:4b:ff:a0:ee:
28:2a:a0:87:34:93:71:37:2b:23:00:8f:07:46:c9:
3d:72:48:c5:0e:14:e5:d5:ac:c1:6a:1c:81:36:59:
b4:3f:0a:47:bf:a5:01:9a:78:c6:fc:6f:d0:ab:a7:
10:ba:f7:bb:d3:60:ef:44:26:cc:71:93:be:db:20:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:A7:26:46:F3:84:1D:03:5C:40:C1:24:D5:F2:8F:79:9D:57:E7
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:26:e4:78:25:a4:4a:a3:6d:23:50:df:50:67:0e:18:6e:ea:
e5:db:4f:75:57:1e:ab:4c:42:30:39:67:2c:88:b4:b2:d5:81:
9e:98:6b:7d:f8:90:73:32:51:17:34:2d:6d:30:75:18:16:b4:
5d:cf:5a:a6:f4:a3:d5:13:29:f5:b2:e5:e8:0b:8e:31:90:8f:
a3:c9:12:98:46:be:c5:72:f5:f5:dc:80:94:94:88:4c:51:8d:
47:17:89:e4:6c:25:66:08:4b:5e:8b:10:b3:be:d8:a1:d4:d1:
8d:f6:19:3f:d9:f9:1c:65:2b:50:98:f3:a4:01:ee:17:ee:b6:
91:48:51:e4:1d:ad:4b:06:cb:5b:af:aa:27:84:24:17:43:33:
df:fb:d7:f5:d3:85:ed:0f:92:7a:64:73:fd:1e:4c:23:40:e2:
d4:c7:dc:fa:b2:cc:fe:61:ca:7f:0a:9f:54:cc:0a:0b:ff:d0:
1b:bb:86:43:eb:7a:90:a4:9d:ae:f8:1b:4f:a1:9f:1c:4c:a6:
03:de:d5:4b:cd:9f:4e:f7:2f:74:3a:81:20:15:d2:e9:21:8c:
51:71:f2:ed:7f:9e:84:91:f5:ad:43:34:c5:aa:8d:e9:29:3e:
ee:14:fd:ff:c0:1b:29:30:8a:b1:2a:f3:77:bb:7a:e1:5f:b5:
b3:c2:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:15 2025 by rpki-client