Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json)
Hash identifier: J4B3H5c83Vt6vOoQ2z3MeA7Spgi/x5r37ClQHLvOgi8=
Subject key identifier: 3C:97:0A:CF:4D:BA:85:07:58:07:4B:F8:C4:E2:3C:8F:66:39:3C:EB
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial: 0198D6988BA0F7F0600523C13096E1CB84BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:58 +0000
Manifest this update: Sat 23 Aug 2025 11:02:58 +0000
Manifest next update: Sun 24 Aug 2025 11:02:58 +0000
Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: 88sosYLenwxXZgZkoTcd60Y3J6MudWCrVjREp0Q0qzc=)
2: fxES6V-YcHLIYfWbK1XCrf--99E.roa (hash: /7Za8qsVUiet1d+zZvUbv7RF8k01UQmlJjxyUgXzNdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8b:a0:f7:f0:60:05:23:c1:30:96:e1:cb:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Validity
Not Before: Aug 23 11:02:58 2025 GMT
Not After : Aug 24 11:02:58 2025 GMT
Subject: CN=3c970acf4dba850758074bf8c4e23c8f66393ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:79:89:95:c8:2f:11:76:64:d2:19:9e:4b:
b4:93:f7:3e:27:db:b0:67:2d:58:fd:65:c8:0f:63:
dd:0d:f8:93:4a:f8:22:27:d3:39:52:2b:7a:7e:9a:
78:44:59:bf:67:2a:47:5b:12:6f:a0:f4:be:89:65:
78:00:08:44:be:ce:d1:78:ad:ac:42:8b:c1:c1:0b:
ff:ba:a6:18:3e:b2:04:fe:84:93:12:72:e6:3c:dd:
59:b1:c4:6b:35:9c:94:02:10:41:29:0c:92:6e:f6:
95:f8:aa:dc:30:bf:2c:a4:54:b7:78:1e:c4:02:86:
78:96:06:f2:cf:07:ce:42:06:19:f3:36:0f:ff:5e:
f6:da:17:47:49:03:27:c1:f7:c8:9f:de:20:ca:95:
03:96:21:63:d0:c3:73:49:6c:13:67:3a:73:09:1c:
6f:07:db:c5:e3:67:3e:98:9a:20:f1:ae:d8:f3:78:
0c:39:b0:a2:07:0c:b2:8a:6b:9e:03:59:6f:1e:a3:
a2:3d:59:a9:09:a5:df:a5:df:36:64:b4:54:20:b3:
51:51:76:3f:80:da:3e:e1:83:c6:2c:48:15:d2:7d:
d4:1f:ed:39:ad:c8:d1:d9:24:48:75:98:40:a9:0a:
9a:10:72:7f:34:e2:b3:c4:7a:00:e3:2b:3f:60:f7:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:97:0A:CF:4D:BA:85:07:58:07:4B:F8:C4:E2:3C:8F:66:39:3C:EB
X509v3 Authority Key Identifier:
keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:11:57:5f:3f:f8:b8:c3:7d:1b:39:41:c4:87:2c:11:0a:46:
32:83:f1:b4:a9:de:e5:56:94:d5:fb:ea:54:cb:c8:f2:ea:e6:
df:07:84:d1:d7:e1:48:0d:28:c9:c1:fb:f9:97:7e:11:41:c3:
0c:24:02:88:41:c2:4e:22:67:bb:28:f7:a1:5f:c1:33:3f:a7:
7f:56:a1:e6:85:12:11:bd:f6:3e:91:01:14:69:6d:ad:54:ab:
7f:71:24:ff:71:52:f5:db:dc:d5:85:31:55:16:ba:ab:db:f7:
14:8d:f8:fb:e5:7f:9e:0e:f3:5f:46:ec:b3:10:c7:99:39:b8:
2c:07:ba:15:61:9b:2a:08:52:2b:a0:8b:b1:23:70:e3:86:90:
64:22:45:5a:f1:3c:02:1b:be:b8:d8:45:b6:da:ed:25:ae:a3:
38:43:a9:12:e0:c9:2e:0d:fa:d4:e1:46:3e:22:7d:fa:ae:4b:
5e:0d:ec:c7:7c:14:20:d9:eb:94:73:ba:c6:08:5e:73:45:0b:
d5:b7:4f:f3:80:f2:31:50:f8:d5:9d:d3:3b:d4:18:aa:e4:f7:
21:56:a6:0b:ef:ca:40:cd:52:20:58:2e:92:28:aa:92:d8:45:
ee:e5:9c:4d:14:50:84:e5:07:ab:fb:66:1f:55:8b:fb:bd:33:
58:17:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:36 2025 by rpki-client