
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: 4MXqfichdaDRnHc1As45dhoODObMtMEQFdPWiQifINs=
Subject key identifier: 50:10:2A:99:46:B2:7F:6A:FD:A9:30:2D:50:01:E1:E7:9E:4A:03:A3
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 01987B9C4AD26A7A70BEC3CBDCF1676BABD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 0537
Signing time: Tue 05 Aug 2025 19:01:36 +0000
Manifest this update: Tue 05 Aug 2025 19:01:36 +0000
Manifest next update: Wed 06 Aug 2025 19:01:36 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: b5Gp/rOKjD8YEEAJ3ymC/iODnjleojppy0j/Zv+0SNg=)
2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:4a:d2:6a:7a:70:be:c3:cb:dc:f1:67:6b:ab:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Aug 5 19:01:36 2025 GMT
Not After : Aug 6 19:01:36 2025 GMT
Subject: CN=50102a9946b27f6afda9302d5001e1e79e4a03a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:5f:4d:37:ab:c6:12:78:aa:ea:14:6f:e7:
e5:a9:44:94:f2:0e:f5:99:36:fe:9c:30:7e:98:ed:
8f:80:90:1b:ac:2f:86:82:c4:09:6e:7d:2e:6d:b2:
9f:7d:78:8c:4f:91:3b:02:93:fa:a4:2d:3b:89:23:
4d:6c:17:55:8c:b1:17:c0:a6:04:40:c0:0c:b1:e8:
99:ed:97:e9:bd:a0:37:69:24:07:70:2c:89:9f:3a:
de:6e:7f:7c:48:77:e8:0c:47:ac:96:5b:ef:c2:d3:
0f:07:60:7b:c4:3b:19:7b:2a:47:05:7c:78:2c:d9:
f2:81:d0:bd:c4:30:c0:24:2a:8c:4c:71:a4:b2:53:
32:43:6c:ef:55:18:18:9f:66:bb:c8:be:cb:96:3c:
96:de:08:f3:33:1e:85:0c:92:cb:1e:ce:47:3e:0a:
4a:ac:8f:a4:26:0e:08:70:ab:30:c8:96:fe:f7:8f:
52:81:47:15:8e:af:1f:67:44:8b:33:af:fb:01:30:
ad:53:23:05:53:a9:d3:a5:fd:c0:dc:1d:18:fe:06:
f2:ee:3b:97:60:55:26:94:7a:d0:fc:73:1f:5d:b2:
05:a3:65:db:76:88:c9:c5:5c:6f:09:93:e4:07:c9:
77:22:58:1d:c1:28:bb:48:3b:66:22:3c:5e:86:0f:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:2A:99:46:B2:7F:6A:FD:A9:30:2D:50:01:E1:E7:9E:4A:03:A3
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d7:ee:6d:e8:6f:2c:bc:cb:05:b5:be:e4:90:0c:04:99:8b:
53:fd:ff:ac:af:1d:27:c1:15:bc:2d:70:c7:4d:70:59:f9:a0:
a9:2c:e2:75:a7:86:7a:f9:5b:6a:80:f6:2a:0c:4f:b3:71:97:
02:29:7d:c0:dd:89:43:39:e9:2c:3e:c7:ab:37:c4:ca:3a:d5:
56:be:66:31:29:59:98:8b:b8:1d:2b:1d:a9:53:12:3d:f6:2c:
53:39:46:f7:1c:08:7b:f0:16:b0:c0:43:7d:3f:e5:66:73:f7:
ab:ef:36:a5:0f:b5:22:cc:3f:c1:cc:a2:17:74:01:fb:8b:5a:
90:5c:e2:3d:0a:f0:0a:a7:37:db:17:60:42:fa:97:ce:ac:d1:
9d:e7:cb:7e:94:7f:d6:60:57:32:e0:18:68:cb:69:ec:ea:02:
a6:1b:80:6e:2f:03:cb:7f:60:eb:50:9f:67:fa:9b:47:c6:84:
8f:07:36:8f:b7:d6:89:7c:f9:ed:5e:ad:82:db:50:24:cf:dc:
24:6a:02:df:56:e0:65:bd:21:ac:84:b8:70:10:6b:19:c5:e2:
60:15:1b:ac:3c:c6:d4:44:b3:e2:c7:4c:d6:9a:59:0d:09:24:
8e:49:ee:27:f0:32:b4:13:8b:a2:8f:f4:54:df:e5:e2:54:49:
90:5c:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:36 2025 by rpki-client