Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier: oNfep5QmKo0AjNkzUbE+/qjLUpILA616DRWJQ+bRuQc=
Subject key identifier: FC:42:D1:89:4C:D4:A0:6D:71:D4:14:DA:F1:7E:ED:31:3F:22:4B:7F
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 019A4EF456E3A32F370BCD84593652CEC8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number: 1006
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: KSNAER4Mydp8HyU9sU8i1lEowuM.roa (hash: k7Cs9APUIR/QxVIdcXpLwc8DXRZq1n3B8dEj7Z0wTKs=)
2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: LOjhO5n1IAjxiLJhqXytx0rr19yoQyT2OJOlByFZZto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:56:e3:a3:2f:37:0b:cd:84:59:36:52:ce:c8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=fc42d1894cd4a06d71d414daf17eed313f224b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:ba:10:05:68:f4:d8:08:cd:28:ca:e3:e8:
c6:8a:9a:63:c4:63:f8:b3:12:d7:9f:3f:09:35:de:
5a:d0:2d:cc:46:43:cb:c4:ee:bc:23:09:e3:c3:28:
52:7c:af:3b:68:85:cb:f5:1f:d7:8a:31:b0:fc:4c:
83:0e:7d:0f:36:b0:2c:e6:88:f7:2b:33:f5:aa:95:
58:1f:a7:2e:d1:74:dc:f2:ec:1c:31:ca:b7:b5:10:
9a:37:c5:43:1e:55:e5:51:62:7e:54:37:25:25:40:
6d:d4:e6:ec:80:13:a3:37:6b:85:7d:f1:dc:d7:4a:
ea:c1:e6:29:62:50:78:82:c1:b1:9b:a7:36:be:90:
68:e2:ac:03:fd:f9:4c:09:91:3e:57:e4:32:f1:ed:
77:62:94:2c:0b:b5:34:c4:9a:dc:14:36:3a:77:3d:
a9:2c:5f:af:60:12:3b:2a:7c:e9:35:17:67:be:f4:
ee:84:bf:c1:13:de:65:2c:87:90:6a:0e:82:10:64:
33:2b:55:e2:df:c7:8f:b7:2d:d9:f4:12:29:a5:99:
2a:a2:3c:ef:bc:4d:a1:16:7d:83:fe:f6:1b:f0:72:
6d:75:0a:a6:79:e5:18:fa:3b:ef:0b:0d:1a:3a:51:
d8:a2:23:4b:4d:b6:58:32:b4:3f:61:d8:b8:15:10:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:D1:89:4C:D4:A0:6D:71:D4:14:DA:F1:7E:ED:31:3F:22:4B:7F
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:60:53:67:10:30:50:ba:9c:5b:bf:e1:0d:68:a9:39:b2:
ed:f7:fc:4d:19:f5:d4:48:cd:3b:4b:ef:3f:e6:da:53:e7:72:
1d:81:e0:d8:35:82:ff:6d:75:de:1f:88:96:39:c4:7c:c4:c3:
47:d2:da:63:dd:48:24:ef:9e:c7:d7:59:fe:ce:77:76:d1:51:
d1:ff:1b:b1:06:00:b5:e0:4b:6e:0b:15:71:5f:d9:47:69:93:
6d:46:fa:4d:9b:90:32:67:11:8a:5b:a2:92:bd:39:84:38:e9:
bf:4d:67:ce:d6:85:8c:0f:44:55:71:d7:57:0b:ad:68:83:8d:
d7:ac:43:0c:76:db:8e:30:11:b7:a7:6d:ce:20:04:c9:9e:67:
5a:3b:db:26:6c:7a:65:08:26:8c:20:18:f0:e8:c6:52:6d:8d:
d2:67:66:6f:6d:cf:5c:f3:29:cd:3b:90:df:e4:85:a9:f3:f7:
66:43:fa:e7:9e:cc:26:7d:24:3d:6c:02:37:d8:95:67:d9:47:
fe:98:c2:b7:06:88:6f:57:b6:59:e6:a5:ff:fc:b1:8f:1a:f6:
28:1c:90:bc:3f:7c:9d:eb:9c:87:eb:06:3a:5f:d2:96:4c:22:
b8:5e:d6:16:4d:ca:2b:98:a0:36:c4:e3:97:86:41:53:b0:78:
c9:93:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:28 2025 by rpki-client