Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: mj+HY8nnCWJYtBiheRy+kFAiX9bgseWjsuJKxk7+YbM=
Subject key identifier: 7A:98:5B:F4:B4:3F:A2:B7:5E:C6:BF:3F:2C:9D:E2:13:7E:2E:CC:86
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019A51199A04087A8B6D79400481CC272AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 0165
Signing time: Tue 04 Nov 2025 23:00:23 +0000
Manifest this update: Tue 04 Nov 2025 23:00:23 +0000
Manifest next update: Wed 05 Nov 2025 23:00:23 +0000
Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=)
2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: RvBVFS07BKpcIBNEDTNzQYLAI6nLv5QhreWOgQi6iq8=)
3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:9a:04:08:7a:8b:6d:79:40:04:81:cc:27:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Nov 4 23:00:23 2025 GMT
Not After : Nov 5 23:00:23 2025 GMT
Subject: CN=7a985bf4b43fa2b75ec6bf3f2c9de2137e2ecc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:b0:6e:19:31:d5:90:43:8c:1f:27:c6:82:
a2:c7:60:48:5f:da:c7:42:3c:16:66:20:28:46:8c:
1a:ec:59:a5:9a:36:d4:50:de:7a:71:17:47:68:87:
be:96:ef:db:f1:9d:e8:2a:d6:d2:cc:3e:b8:e5:34:
e1:0a:e3:58:ee:c2:08:73:bf:26:9e:49:ab:62:66:
8b:23:0f:95:fd:a9:34:d9:09:70:60:ce:da:80:01:
4f:6d:8e:5e:ef:ae:b2:dd:9c:45:14:80:77:9b:69:
a4:e2:d6:79:9f:22:85:d1:03:64:ba:1e:42:15:c8:
c5:dc:05:be:b6:40:b8:47:31:6d:ef:13:97:b1:c0:
24:d8:cb:81:f7:04:23:2c:2d:03:e5:e8:89:fd:5c:
91:fe:0a:81:0b:5f:99:38:b3:ac:fb:50:ee:ac:f4:
a8:ce:50:1e:c4:92:e0:36:a1:8d:fe:0d:42:92:a4:
00:94:5e:ba:c3:40:b4:b3:b2:c1:5e:50:f2:13:08:
bd:5b:03:86:6d:58:c6:0b:17:44:09:be:7a:98:92:
ea:0d:ae:7b:53:3a:96:f3:1a:00:b2:4b:b8:c9:47:
38:6b:c9:03:b5:d0:43:9c:79:2b:38:f8:1e:fe:ee:
f6:d4:2a:a2:a6:d3:60:3f:f2:f9:16:12:b9:09:e2:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:5B:F4:B4:3F:A2:B7:5E:C6:BF:3F:2C:9D:E2:13:7E:2E:CC:86
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b5:93:01:53:bd:28:4a:33:d4:a7:95:93:e7:74:92:a3:d0:
6b:16:00:f5:4d:93:76:87:64:3c:0e:84:4a:3b:19:dd:d9:85:
96:08:b3:72:24:dc:62:c8:bd:3d:1f:d5:50:9f:fc:08:02:ff:
3a:07:c7:17:cb:e7:51:10:d9:70:28:a2:74:7d:33:3f:a4:ca:
5e:1e:b6:7a:f0:f9:f6:04:21:f5:59:96:ba:50:69:3c:29:87:
53:3e:d2:c2:b9:8e:df:08:4d:d1:ab:46:f1:e2:c6:7c:07:7e:
56:85:da:ea:0c:30:a9:46:17:f4:a7:f0:89:93:45:82:18:27:
04:58:e4:9c:69:b9:ac:d5:4b:1d:4f:58:0c:23:b5:05:f1:ff:
f3:8d:15:a8:ea:60:c1:df:e6:94:82:85:3c:14:8a:7e:50:df:
1c:da:bc:87:66:c3:fa:cb:24:4f:f5:4a:41:7f:62:ab:23:03:
98:2e:07:34:a9:39:bb:8b:da:af:48:47:39:3f:2c:1a:72:20:
95:a2:87:16:c8:59:38:d0:9f:f7:1f:03:3c:f3:b8:56:01:ca:
f3:d4:8a:57:4c:a1:19:30:f4:54:1b:5b:e2:27:bc:33:1c:ac:
f3:b9:6e:0d:90:3f:d3:f2:bf:6f:19:08:72:6d:be:58:1e:95:
b1:f7:b5:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGZoECHqLbXlABIHMJyq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YTJlODExZjAwYmFlMTZhNDQ3NDIzZjExZTI0MjE3MTQy
Y2ZmN2MwHhcNMjUxMTA0MjMwMDIzWhcNMjUxMTA1MjMwMDIzWjAzMTEwLwYDVQQD
Eyg3YTk4NWJmNGI0M2ZhMmI3NWVjNmJmM2YyYzlkZTIxMzdlMmVjYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubWwbhkx1ZBDjB8nxoKix2BIX9rH
QjwWZiAoRowa7FmlmjbUUN56cRdHaIe+lu/b8Z3oKtbSzD645TThCuNY7sIIc78m
nkmrYmaLIw+V/ak02QlwYM7agAFPbY5e766y3ZxFFIB3m2mk4tZ5nyKF0QNkuh5C
FcjF3AW+tkC4RzFt7xOXscAk2MuB9wQjLC0D5eiJ/VyR/gqBC1+ZOLOs+1DurPSo
zlAexJLgNqGN/g1CkqQAlF66w0C0s7LBXlDyEwi9WwOGbVjGCxdECb56mJLqDa57
UzqW8xoAsku4yUc4a8kDtdBDnHkrOPge/u721CqiptNgP/L5FhK5CeLGBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqYW/S0P6K3Xsa/Pyyd4hN+LsyGMB8GA1UdIwQY
MBaAFEii6BHwC64WpEdCPxHiQhcULP98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTIt
MWFiYWRkMWIxMmQ2LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTItMWFiYWRkMWIxMmQ2
LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrWTAVO9
KEoz1KeVk+d0kqPQaxYA9U2TdodkPA6ESjsZ3dmFlgizciTcYsi9PR/VUJ/8CAL/
OgfHF8vnURDZcCiidH0zP6TKXh62evD59gQh9VmWulBpPCmHUz7SwrmO3whN0atG
8eLGfAd+VoXa6gwwqUYX9KfwiZNFghgnBFjknGm5rNVLHU9YDCO1BfH/840VqOpg
wd/mlIKFPBSKflDfHNq8h2bD+sskT/VKQX9iqyMDmC4HNKk5u4var0hHOT8sGnIg
laKHFshZONCf9x8DPPO4VgHK89SKV0yhGTD0VBtb4ie8Mxys87luDZA/0/K/bxkI
cm2+WB6Vsfe18g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:27 2025 by rpki-client