Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: mkRUVJcaZQxFxj8QrjCaJeiSkgCCdj0q2m9oA1nqdss=
Subject key identifier: E5:4E:24:8B:DF:75:17:55:1C:08:6E:4C:9C:BA:C5:16:10:50:82:4D
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019A4EF45080A87781FE34D3D2B55F6515C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 0629
Signing time: Tue 04 Nov 2025 13:00:25 +0000
Manifest this update: Tue 04 Nov 2025 13:00:25 +0000
Manifest next update: Wed 05 Nov 2025 13:00:25 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: vQWsPxGwP3ubVE2UO9uwq766OPyeFJtfGShUlyF7sAc=)
2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:50:80:a8:77:81:fe:34:d3:d2:b5:5f:65:15:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Nov 4 13:00:25 2025 GMT
Not After : Nov 5 13:00:25 2025 GMT
Subject: CN=e54e248bdf7517551c086e4c9cbac5161050824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:ce:29:1e:be:a5:3d:25:85:25:b5:19:21:
e4:41:d6:09:d9:c5:03:34:22:bf:26:98:50:4e:38:
89:e8:36:0f:13:57:f9:cd:98:a0:cc:48:2c:b7:40:
e8:39:57:15:d5:fa:d6:6c:61:8d:1b:69:8d:c1:e3:
07:5c:ab:21:50:c9:7b:16:1b:7a:84:59:a5:71:d0:
1e:60:ea:f4:0e:c5:71:3f:55:fb:d5:d9:5a:90:4f:
f3:2b:5a:c3:aa:89:52:f7:08:83:85:6b:84:bf:1a:
ad:82:70:58:cb:6e:f5:36:01:39:97:21:52:5f:22:
46:50:84:87:c2:a2:38:78:f2:8b:50:ec:66:2b:ba:
79:46:60:80:89:38:ca:21:6c:b3:bb:32:b1:8a:23:
c2:cc:67:64:99:2e:72:ba:7e:50:e5:a2:f3:71:74:
55:c6:14:dd:c5:8f:eb:86:3a:ec:eb:0e:9f:ee:ac:
03:e2:cc:f7:2d:ab:77:9e:eb:81:40:2a:76:b9:88:
2a:17:85:60:fb:a9:2a:d7:18:7e:be:36:b5:0b:cc:
2e:3d:30:d9:ac:d5:61:a8:76:4a:45:1a:47:f2:2d:
bc:56:4d:3c:99:ef:fd:d1:f0:19:ea:f4:9f:ab:c7:
15:1d:41:55:da:69:3c:71:e7:0b:7d:76:ac:db:fe:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:24:8B:DF:75:17:55:1C:08:6E:4C:9C:BA:C5:16:10:50:82:4D
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3e:01:1f:72:b9:98:32:3f:dc:c0:9f:a9:0b:ec:a4:47:d0:
49:be:40:6c:55:32:ea:1f:ee:31:d2:03:fd:34:70:96:db:3a:
04:1d:c1:2f:38:01:ac:cc:be:1c:64:0f:cd:4e:e3:1d:ec:91:
04:82:86:f5:e6:7a:35:b6:b6:a4:cf:e0:09:44:8b:68:38:a5:
05:08:08:00:46:dd:5a:1b:1a:5f:1e:a7:93:17:9c:ed:c8:6a:
06:a4:01:33:85:9b:31:62:54:6e:8a:94:ce:6b:15:0c:1c:9e:
d4:3f:4a:f3:33:10:b5:cf:37:1d:c9:fd:84:92:bf:6e:10:49:
87:96:8d:f6:e8:09:d1:42:41:21:cb:eb:5e:3d:68:60:d9:74:
f0:b1:55:41:a5:18:f8:e1:2e:8c:bc:99:6e:0e:0d:bb:ed:b4:
ba:46:f6:d8:63:4c:a8:0c:f8:c1:81:c7:1a:dc:af:70:87:69:
45:2b:b7:b3:8c:2f:10:b7:9a:6f:99:8f:42:02:de:a4:74:d5:
61:7c:b1:ce:4b:fc:97:50:d5:be:57:77:44:b9:47:0e:b1:72:
5e:67:10:03:d8:71:8c:04:fa:28:07:b3:ec:d0:b7:8d:20:c4:
1a:52:f3:56:fd:d7:e4:a3:f3:34:df:74:fc:37:33:89:d6:ba:
62:85:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:51:50 2025 by rpki-client