
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File: Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier: 1peU55IotrhuvdVddpUu3zh2usCitdXike1sUR9MS6I=
Subject key identifier: 68:9D:1E:44:C1:FC:E5:57:66:6D:7A:57:FF:C5:12:03:13:F7:97:F7
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019A500717D4BA4E01A6DEA18C28D649619B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number: 0D71
Signing time: Tue 04 Nov 2025 18:00:33 +0000
Manifest this update: Tue 04 Nov 2025 18:00:33 +0000
Manifest next update: Wed 05 Nov 2025 18:00:33 +0000
Files and hashes: 1: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
2: F6wdCUdNs0S6x-lvMlPtyMpUfZs.roa (hash: 9jMOcYoLdDpo5EB5/0BEoeSC3reaOBGBRYSNiNLwg9k=)
3: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
4: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
5: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=)
6: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
7: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: QDRCjcFPfRodq+vQSkbOLrvd5T2vACuVkP5kqfbwjbE=)
8: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (hash: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=)
9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=)
13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
14: peIOlV3OfBEMu-qBfSwFNIMmyUg.roa (hash: 6anSx7OoDk9TVb+rhIIUnKyoMu5IPmI9Uc6n5lkG9F0=)
15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
16: rAiRJTmW8XfVmhpte53A3cU5F0E.roa (hash: 4rCJoUat5Hf3Yqw8erIeJ6FU4KlxG5HpAnlRqviFfYc=)
17: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=)
18: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
19: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:17:d4:ba:4e:01:a6:de:a1:8c:28:d6:49:61:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 4 18:00:33 2025 GMT
Not After : Nov 5 18:00:33 2025 GMT
Subject: CN=689d1e44c1fce557666d7a57ffc5120313f797f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:1c:76:67:03:ce:38:8e:55:5d:dd:ad:85:
f9:24:c1:1d:13:7a:04:fe:06:48:36:8c:82:31:71:
6e:be:45:0d:cb:85:c3:53:f7:81:fc:89:2b:da:04:
6e:df:ab:fc:f7:68:3e:7b:9c:27:22:6e:49:fc:f1:
28:0a:9c:0c:7f:8b:3e:c2:71:9f:c8:f3:bb:05:15:
03:5d:9c:21:01:57:9d:86:ca:1f:eb:be:59:5a:f0:
13:05:99:d1:53:fb:b6:46:2f:a6:26:9b:d3:02:2b:
39:62:e7:01:68:f9:a2:d4:dc:08:28:a9:f1:76:8d:
70:fa:00:8a:d5:ac:30:0f:e6:d1:41:9b:aa:48:58:
c9:c6:d1:43:41:28:50:08:fb:4e:85:6d:f2:27:c7:
00:a9:96:2d:68:c7:32:69:1b:d3:d4:b3:8f:62:45:
67:ef:ff:2d:32:3f:b1:7a:eb:dd:62:62:d5:db:c4:
0b:86:ac:14:ed:96:1b:fc:35:2a:9b:f5:ae:2e:13:
7d:4c:10:6d:4f:1a:f4:06:d9:3d:8e:f2:fa:1c:15:
da:90:99:ed:63:4f:15:f3:40:fa:33:d6:8e:89:fa:
93:6c:d6:f2:88:e2:26:a2:16:63:cf:7e:9e:92:f6:
36:bf:81:20:87:36:a5:57:37:d1:48:4a:de:cc:90:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:1E:44:C1:FC:E5:57:66:6D:7A:57:FF:C5:12:03:13:F7:97:F7
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c2:7f:ad:1c:44:5b:95:52:52:57:46:cc:ee:17:6a:af:bc:
dd:72:65:c0:3a:4d:15:42:0b:ce:0c:d3:83:3b:6c:21:79:27:
a1:83:d3:6d:36:f7:68:8a:30:b7:a0:ed:f9:8d:e6:dc:02:09:
16:bd:8a:90:b1:92:4c:52:3f:9b:ee:c9:a1:3f:dd:92:34:31:
60:c4:89:92:b5:f6:3d:f1:27:c3:6a:40:93:ac:02:9e:be:21:
e4:b6:ea:e3:ec:65:bd:37:9d:20:1c:cd:d2:a7:58:15:2f:1b:
9b:42:b5:b0:dc:2d:94:1d:35:bf:0b:4a:22:5b:ef:d8:93:06:
71:03:cf:7d:54:84:22:46:ab:52:91:7b:6a:ce:98:fe:b6:86:
c5:1a:a6:54:55:1e:fa:e4:b0:a2:c2:9e:c8:ea:8d:5a:dc:27:
22:1a:c9:22:86:6c:b4:0e:da:2a:7c:26:6f:67:17:51:d8:83:
8b:04:b9:d2:41:dc:37:88:9e:c1:5b:81:81:9a:ed:32:5f:b6:
71:a2:ad:d1:fb:19:f3:96:bb:72:55:16:d5:e7:83:ba:66:dd:
9b:bb:79:ac:4d:b7:c0:c5:97:34:c7:85:61:ee:3d:f7:fd:d6:
57:4c:63:35:67:2d:6f:09:22:31:ee:15:55:8a:44:2c:27:18:
89:9d:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:18:18 2025 by rpki-client