Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: qYSSz3doqGPyFCkz5uQPi7OCuKIFfGwhm/OjVQdWxMM=
Subject key identifier: 54:70:CC:E1:C5:93:84:AC:73:B7:6C:88:43:88:4A:72:66:4E:A2:0F
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 019A503DB929AC6EE10437AEC91FB592AE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 09D7
Signing time: Tue 04 Nov 2025 19:00:13 +0000
Manifest this update: Tue 04 Nov 2025 19:00:13 +0000
Manifest next update: Wed 05 Nov 2025 19:00:13 +0000
Files and hashes: 1: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: meXcdgC0ezPCl2FdL3uupmCh11Jk8yZCpO8eLHDtSZ4=)
2: y3LlHCcHKFo-BQ_p86jxyc013sQ.roa (hash: 70W6ragDKntXJcQVl89iuaUr+4h8ye/EbsXthKhbWqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:b9:29:ac:6e:e1:04:37:ae:c9:1f:b5:92:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Nov 4 19:00:13 2025 GMT
Not After : Nov 5 19:00:13 2025 GMT
Subject: CN=5470cce1c59384ac73b76c8843884a72664ea20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:e9:b1:57:2d:5c:ed:55:3c:dd:aa:4f:c4:
1b:02:01:d5:23:b6:df:63:1b:a4:03:4f:cb:b9:55:
09:02:b7:3f:6b:89:17:ab:2b:48:d9:4d:e3:d6:27:
e5:dc:6b:a5:8b:e8:7f:e3:ae:44:1a:41:34:e8:ed:
5f:51:2b:c6:08:d9:4a:fd:69:74:dc:7d:cb:47:c5:
c1:a0:fc:dd:f9:5e:83:14:b7:dd:91:25:68:9c:4d:
a3:be:e2:7b:8b:d5:b8:de:a1:bd:71:ee:00:c9:70:
52:e5:46:46:4e:15:72:4c:e4:df:1a:e9:70:f4:bc:
8a:79:c3:16:88:85:d2:06:a6:f2:80:b5:37:02:54:
7d:c7:74:4f:3c:53:cf:e8:f5:8b:80:10:4e:be:c3:
e2:22:fd:45:20:7a:e8:9a:8d:78:12:36:91:99:b0:
0b:83:c3:ef:1a:fe:b5:40:67:08:c9:43:09:d4:fe:
f9:e5:d3:0b:ae:b5:ea:8f:8f:4e:91:da:bd:12:3c:
8c:2b:dd:a4:1e:05:c4:95:75:ef:35:32:f3:6f:26:
86:31:cf:dd:4a:e0:9f:14:e2:77:ee:34:4e:c9:a0:
f6:00:12:94:56:f2:5a:91:81:6d:f0:02:a0:6b:e0:
cc:72:5b:bc:c2:72:d8:55:99:02:9b:36:78:ff:aa:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:CC:E1:C5:93:84:AC:73:B7:6C:88:43:88:4A:72:66:4E:A2:0F
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9f:5c:d1:4a:c1:f5:a3:fe:a7:12:1e:4c:39:13:30:a5:ac:
69:19:34:b0:f2:ba:55:50:32:61:7b:25:0c:35:a4:cc:b7:9e:
23:30:2a:56:de:a0:8d:d8:4e:b0:c0:91:9e:f6:91:84:01:58:
2f:a8:e3:c5:31:56:b5:d0:4c:54:51:c5:67:f1:5e:de:53:2b:
de:a0:83:d9:c9:82:7b:8c:6d:13:ed:ba:99:86:0e:e7:9b:40:
50:ee:2d:f4:d5:2e:2d:ca:64:7a:fe:03:ae:41:76:60:67:14:
fb:31:2c:f4:b4:49:dc:44:18:45:8f:a6:ac:d0:d3:8d:64:9c:
03:21:4f:40:6c:1c:fc:2e:b2:6c:ce:db:b5:2c:0c:f6:ec:3a:
f1:60:2f:7c:af:40:f5:d1:87:6e:86:f3:a5:e5:04:27:98:3a:
29:13:d8:e4:1d:1e:7d:ce:10:2f:ee:c5:5b:7c:67:98:0f:2d:
a2:32:aa:ba:2c:15:a2:57:06:0f:b2:42:f3:d2:af:eb:71:01:
9e:34:fa:f5:4e:39:10:0e:ce:75:40:5b:36:aa:c6:1d:bb:18:
48:6c:8a:f8:d6:b0:9a:0d:ca:5b:06:1a:0d:8e:e1:a3:0c:26:
e7:8e:58:db:c6:3d:81:d2:67:b5:92:d3:5b:3f:2a:e9:92:35:
ef:aa:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:20:11 2025 by rpki-client