Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: lHVZCNZkSItqh+80tZg+YLpTPSNlyh+sfLuOWgEG7Yw=
Subject key identifier: 2B:A1:51:77:72:2E:27:11:5F:3F:A2:DA:7C:F1:E4:57:DE:14:3D:B6
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019A50E26D62AC46F4C6F97223B7DB9C14BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 062A
Signing time: Tue 04 Nov 2025 22:00:07 +0000
Manifest this update: Tue 04 Nov 2025 22:00:07 +0000
Manifest next update: Wed 05 Nov 2025 22:00:07 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: Shob/iZoVnB6xLrev1DnnXp9I1eDLrM9wvyE2h3gBD0=)
2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:6d:62:ac:46:f4:c6:f9:72:23:b7:db:9c:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Nov 4 22:00:07 2025 GMT
Not After : Nov 5 22:00:07 2025 GMT
Subject: CN=2ba15177722e27115f3fa2da7cf1e457de143db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:c9:6a:c2:93:c8:6f:16:73:fc:21:d2:ba:
93:10:c5:06:3f:9b:73:4c:af:21:28:e5:7e:9c:66:
7b:6a:15:ff:b5:5a:57:c8:c3:af:6d:96:e6:58:f0:
bc:00:58:ed:c1:67:02:fe:57:93:df:09:81:88:95:
e9:35:1d:d7:ea:26:8f:88:13:c6:94:2f:50:fb:8a:
d5:43:fe:ee:a6:dc:8c:c4:dc:d7:6d:01:79:04:01:
e8:23:a0:3a:18:8e:16:9c:c3:7b:54:db:8f:c2:7d:
e3:32:0a:7a:e1:ae:61:17:4d:11:f8:1c:e6:a5:90:
0c:f2:4d:98:ad:81:10:cf:6b:cc:da:78:3f:78:ef:
be:80:a7:e3:f6:fe:ea:d6:59:de:a0:82:e9:04:62:
c6:b0:9a:ab:4e:53:67:33:f4:fc:94:df:a8:65:98:
c7:81:91:1c:64:f9:42:c1:4d:3c:0a:75:e0:4b:90:
1a:24:5b:89:c0:c2:6d:b4:02:30:67:e3:84:26:7f:
a1:2f:9d:67:0c:a7:93:03:a7:dd:1b:34:6a:9f:b9:
e7:82:c9:0f:44:39:ae:11:3b:7a:d7:d0:58:67:28:
8d:1c:59:4c:67:5d:89:82:37:02:54:9e:c7:13:be:
0a:0c:08:20:c0:1e:78:83:9b:e0:84:b0:6b:98:0a:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:51:77:72:2E:27:11:5F:3F:A2:DA:7C:F1:E4:57:DE:14:3D:B6
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:11:26:5c:88:36:1d:ef:23:81:37:64:f6:f4:cd:6d:31:f8:
e1:07:44:b2:e0:19:1c:ff:3e:70:db:5a:3e:7b:c1:e4:d2:c5:
b2:94:1e:00:64:53:f5:97:88:13:7d:63:59:b4:e0:5e:91:4c:
f8:a4:61:53:bc:75:3c:ba:6e:cb:f0:e4:54:19:c4:d5:47:32:
2b:e4:99:c1:f9:d6:43:8a:e9:bf:b7:ae:43:d2:b3:80:a2:7a:
e5:e7:39:6e:4b:32:45:01:87:ae:61:62:9b:1e:97:be:4d:9e:
03:55:eb:ee:c4:91:ca:13:2a:ca:3c:ab:cc:3c:f8:10:c6:f9:
e1:e0:d7:ec:d0:a2:e6:0a:83:d0:0c:05:a8:4e:f9:95:1b:09:
2f:0e:18:0e:4e:50:29:54:29:4e:46:2c:e4:12:01:e1:a0:8c:
89:69:4f:30:fe:37:99:ba:43:c0:f4:34:92:34:97:86:ae:41:
0b:0c:de:ca:b5:4f:29:1a:c5:71:e7:7f:ed:b6:2f:c2:af:17:
f7:ec:bc:c8:d7:fa:1e:8f:5b:27:72:2e:54:cc:52:a1:b4:e4:
b8:cd:83:db:3d:1d:58:48:79:41:5d:ed:56:b7:c3:e1:7a:d5:
91:e1:a5:51:ab:65:43:ca:ec:e0:ac:b8:41:e1:e6:41:40:7c:
a7:66:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:01 2025 by rpki-client